
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
File: PgYolveWFAxkBV5H1FMISCOnCCQ.mft (raw, json)
Hash identifier: FCqphwy07ObBNRQFTgDlVtWcncmSUBjsM7O5VBblL/A=
Subject key identifier: 9E:FA:57:9B:C9:0C:73:9C:7D:11:95:85:C9:88:75:35:60:5A:77:C1
Authority key identifier: 3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24
Certificate issuer: /CN=A917E65B/serialNumber=3E062896F796140C64055E47D453084823A70824
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
Manifest number: C4
Signing time: Mon 11 May 2026 07:02:37 +0000
Manifest this update: Mon 11 May 2026 07:02:36 +0000
Manifest next update: Mon 18 May 2026 07:02:36 +0000
Files and hashes: 1: PgYolveWFAxkBV5H1FMISCOnCCQ.crl (hash: bvGu5x+RRFJxb+0JkUn/KMh1CMgIyg39ic91KUg0W6Y=)
2: B7498170318011F0A5A76C39C4F9AE02.roa (hash: UbYb0P8FE3F+HvemibXz0dMD4w6gFMZ7kKT3m10twQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl
rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E65B, serialNumber=3E062896F796140C64055E47D453084823A70824
Validity
Not Before: May 11 07:02:36 2026 GMT
Not After : May 18 07:02:36 2026 GMT
Subject: CN=6a017f0d-fb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:a9:99:3d:9c:3e:f2:16:18:bd:30:ca:19:
de:70:fe:f2:68:78:3b:38:bd:1d:ef:01:77:7f:60:
b2:d0:86:e3:51:f1:97:69:29:2f:c1:14:09:96:cb:
dd:96:cd:77:07:50:6e:b9:8f:a6:ed:2f:c2:72:e9:
a6:bb:50:7b:5c:cf:bb:5c:91:98:8e:55:95:95:e3:
07:42:23:f2:2c:1b:2a:5c:02:de:49:9f:7e:38:a0:
91:7b:93:9e:de:7f:16:96:a5:cb:7f:e1:5b:3a:5c:
59:a2:9c:93:e4:07:71:29:31:18:e2:5a:7a:5e:69:
e7:48:f9:a8:8d:a4:18:d1:ca:fb:e7:c4:4f:74:fa:
20:5d:42:e6:0d:32:e9:e9:03:05:e2:85:39:d3:91:
b3:e0:73:fd:ed:c4:0b:dd:49:d4:20:60:9f:df:2b:
33:f0:8d:54:fe:d3:d6:2e:38:7b:df:3c:18:2a:18:
b4:25:0d:a0:88:d1:2c:90:ec:8a:31:a2:7c:03:8b:
64:42:28:cf:1b:4e:c4:ae:b8:d5:85:7d:ba:94:3b:
ae:bf:8b:53:a7:15:6e:07:7d:5e:ef:b2:f8:29:f0:
41:c9:dc:9c:6f:e1:ba:a9:b8:ec:3e:df:39:5e:c2:
f8:bd:43:47:f0:01:5a:5f:ce:38:72:85:c3:46:41:
8b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FA:57:9B:C9:0C:73:9C:7D:11:95:85:C9:88:75:35:60:5A:77:C1
X509v3 Authority Key Identifier:
keyid:3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4b:61:81:ed:72:a2:63:a9:91:af:26:76:84:c7:81:89:bc:
8d:b8:2a:d4:4c:7e:17:36:f1:c4:c5:e4:fa:86:e6:06:66:77:
db:a3:4c:75:0e:8e:b3:02:63:08:c7:bb:3d:4a:b8:f8:0f:59:
08:86:a2:8f:85:1f:a0:89:11:1d:be:37:86:71:fa:d4:8b:bb:
32:0e:83:c6:76:72:36:70:c4:37:1a:7c:be:99:33:75:75:a8:
7c:09:9e:a2:58:d6:4c:79:6c:81:f4:0c:a9:00:b6:1b:be:37:
87:ca:b7:c4:75:9c:1c:03:b1:66:a0:21:6c:35:57:f9:9f:15:
a5:6a:ea:d3:ca:17:c9:c0:1a:4e:cb:af:5d:16:94:4a:33:5b:
b4:ba:c1:12:e1:36:7c:6a:6f:82:e3:d3:79:1e:bb:13:1f:ba:
1e:32:41:bb:f6:ca:d4:59:83:b0:97:ec:5e:6d:d1:e7:24:5d:
5f:ff:cb:0f:03:a2:88:d1:65:b5:5d:39:f0:5e:e5:01:04:ed:
d0:1f:56:c1:16:86:cf:03:ee:d2:11:dc:bd:76:0b:00:ea:5c:
44:10:64:fd:72:45:5c:f9:bd:e2:c2:0c:e9:a6:f3:88:08:93:
37:4a:b5:b3:08:d4:a9:15:00:a6:71:41:0c:4a:9f:54:a8:ac:
57:28:8d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:10:53 2026 by rpki-client