
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
File: PgYolveWFAxkBV5H1FMISCOnCCQ.mft (raw, json)
Hash identifier: cr6XFCu8YzXRwAqrbOX1Vh+fy84BQG4XB8F4QVAb7C0=
Subject key identifier: CA:76:79:97:86:C9:77:00:39:21:D8:A8:62:30:5F:F4:5B:11:C9:9B
Authority key identifier: 3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24
Certificate issuer: /CN=A917E65B/serialNumber=3E062896F796140C64055E47D453084823A70824
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
Manifest number: E8
Signing time: Thu 23 Jul 2026 08:13:53 +0000
Manifest this update: Thu 23 Jul 2026 08:13:52 +0000
Manifest next update: Thu 30 Jul 2026 08:13:52 +0000
Files and hashes: 1: PgYolveWFAxkBV5H1FMISCOnCCQ.crl (hash: Pvetk30zOs/jaMKuN8mrfbMmfKpZxRa3ygwBgTtvn80=)
2: B7498170318011F0A5A76C39C4F9AE02.roa (hash: UbYb0P8FE3F+HvemibXz0dMD4w6gFMZ7kKT3m10twQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl
rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E65B, serialNumber=3E062896F796140C64055E47D453084823A70824
Validity
Not Before: Jul 23 08:13:52 2026 GMT
Not After : Jul 30 08:13:52 2026 GMT
Subject: CN=6a61cd40-d32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1a:cc:14:0f:b6:c3:f4:9d:3e:08:1a:ff:7c:
2c:c0:6e:26:7c:6a:63:cf:94:ed:53:0c:3e:b5:8a:
10:8f:dc:34:72:41:3a:71:86:70:fc:0a:66:b6:7b:
71:c9:e3:47:11:d6:16:c1:8d:53:09:2b:da:aa:01:
72:3e:14:a6:6f:c8:0b:59:74:9c:37:35:81:f2:90:
4e:c3:d4:ad:96:e7:2d:06:23:3b:99:93:16:1c:60:
2e:05:4b:3e:10:11:da:f7:c1:3d:ec:b4:aa:dc:61:
3d:c1:48:f7:d6:ae:bb:68:47:b3:33:e0:0e:db:60:
c5:6a:f5:bd:7f:31:36:7e:23:d8:b6:e5:4a:f8:3d:
63:a1:44:14:53:0c:b1:fc:81:15:c9:73:5a:f5:71:
17:1b:56:a9:93:77:4c:c3:34:69:90:fc:f0:71:6d:
b7:0d:d5:f1:99:73:84:52:c0:c0:1b:b5:89:d0:d4:
0e:9c:c2:80:65:19:76:ea:e7:8b:d8:67:8d:27:31:
58:6e:86:bc:52:fa:a0:d4:13:fb:84:65:8f:9c:02:
69:30:69:46:5e:b4:05:c5:e2:64:c4:76:5b:5c:6b:
57:21:30:0b:62:ec:9b:df:5e:ee:52:8e:1a:82:25:
17:89:ce:77:8a:14:8c:f2:22:2d:86:ff:da:d1:cb:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:76:79:97:86:C9:77:00:39:21:D8:A8:62:30:5F:F4:5B:11:C9:9B
X509v3 Authority Key Identifier:
keyid:3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:68:4f:69:ad:91:2e:b4:0d:40:f4:5c:12:6c:79:78:e1:fc:
d1:1f:62:4d:19:e4:5f:41:1e:dc:a3:6e:02:b1:88:9d:b7:33:
5a:a8:23:0d:28:7a:df:56:b4:be:73:62:15:cc:ae:5e:52:e1:
51:62:88:dc:00:e9:d2:96:84:25:e1:0d:0f:c8:af:42:e0:60:
3e:2d:fd:80:14:0b:fa:c3:e5:43:19:3f:29:5e:74:7f:28:66:
4a:1c:58:78:53:37:4d:cd:ae:a5:30:ea:68:cd:ec:45:d9:e1:
e0:32:fe:89:19:cc:99:e2:b9:d2:b6:26:3a:b9:87:44:d9:31:
06:63:c7:12:c8:03:cc:5b:fd:9d:b5:89:68:df:1b:d9:b7:95:
ec:f6:d4:5d:59:e1:b9:81:96:11:78:c9:ee:7c:dc:ad:d7:a3:
f6:cb:7f:4d:17:da:81:51:0c:a3:5a:1c:f1:c5:76:c1:ff:2f:
df:5e:d0:85:2a:7d:64:00:62:33:e7:2a:3c:c0:73:87:08:f2:
d9:44:78:3a:b3:b6:22:8f:c8:4e:00:dc:8c:b6:21:9a:b6:55:
e9:b7:50:bd:9a:2c:d9:62:2a:e8:ed:d3:d8:89:2d:b0:e1:97:
7b:2d:b2:e8:2d:80:a3:6c:ff:10:0a:5f:5e:b1:91:1c:b6:da:
19:eb:35:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:31:04 2026 by rpki-client