
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json)
Hash identifier: kNvx7HP90tlY/9GSp8vFVTw5XtJPC/rg+BMaUszTEAU=
Subject key identifier: D7:B9:22:4C:D0:59:BF:17:72:D3:DA:D0:AB:17:68:AB:60:DE:C9:A4
Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3
Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
Manifest number: F2
Signing time: Thu 23 Jul 2026 08:07:39 +0000
Manifest this update: Thu 23 Jul 2026 08:07:39 +0000
Manifest next update: Thu 30 Jul 2026 08:07:39 +0000
Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: A6hrWiFedWR0Eec6PLIZArJr7Hx2fqz8m58K3oC1eh4=)
2: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: 47LsXWcwIKUuRyL+mT9zvEQa6j2H0OGo9Q7GJ+csjfY=)
3: 8BACF000172811F0B074151EC4F9AE02.roa (hash: Fl3h9ZkMvSkwu9/oPEGDkM57SG4asbpHPkhkIhKcKIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl
rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3
Validity
Not Before: Jul 23 08:07:39 2026 GMT
Not After : Jul 30 08:07:39 2026 GMT
Subject: CN=6a61cbcb-8e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:a1:2d:19:e5:51:9e:8e:ca:77:62:7c:2a:
54:c4:7b:83:2b:4d:81:5e:15:60:87:ca:9b:16:76:
c3:9f:89:88:15:00:bf:bd:a7:d4:8d:ba:df:50:05:
51:9f:ef:ce:36:ec:0b:42:fa:10:91:e6:01:0c:62:
23:96:f3:1d:42:58:93:04:70:0f:db:65:a4:1d:f6:
e1:94:03:63:11:23:c1:1c:68:fe:f9:d4:ce:b7:7c:
9a:8e:ac:3a:8e:7f:28:9f:09:28:6e:6d:ab:23:4a:
b0:d6:a7:5b:76:fa:01:33:70:81:f8:57:92:d0:8d:
1e:c1:d7:c5:cc:3c:21:96:38:60:e1:d5:4b:84:ec:
7e:06:2c:9e:b3:4c:dd:22:c2:86:1e:20:a9:97:7e:
7b:bb:94:1c:9c:a2:c5:6c:41:00:68:52:42:33:e0:
e7:33:52:8a:4d:57:16:a6:c8:92:66:b5:4c:1f:a1:
8e:a6:77:6c:0d:15:5b:f9:47:24:97:25:ea:10:a8:
fe:3f:98:fc:ba:16:ed:27:07:35:c3:9f:df:6a:f2:
3f:3b:bd:4b:b0:6d:81:ca:2c:03:d2:ae:ae:b7:29:
b3:ca:9b:9e:f6:7f:9c:f0:9b:ca:97:84:3f:64:ae:
7b:61:cd:d8:73:61:44:49:a7:d8:66:6f:c5:43:cc:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B9:22:4C:D0:59:BF:17:72:D3:DA:D0:AB:17:68:AB:60:DE:C9:A4
X509v3 Authority Key Identifier:
keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1f:50:0a:c9:d5:82:e4:6e:ee:1c:78:77:db:d9:30:77:11:
2b:a2:02:14:41:44:9c:64:66:87:1c:c5:62:7e:21:85:30:f7:
f3:39:61:90:d2:42:ee:23:b8:f6:ca:8b:23:4b:31:7e:9f:c2:
7c:9f:76:cd:f2:f8:26:0a:26:42:6a:39:01:1c:41:ce:81:24:
b1:55:fb:32:2a:47:37:2c:8f:da:21:29:67:3b:fe:a6:4b:bd:
5f:b1:64:ea:c6:0c:69:7f:40:c9:e9:f6:48:d2:bc:4b:2f:c6:
14:39:6b:51:13:62:44:2d:a4:ee:83:e3:27:f9:6a:25:27:49:
e1:3c:00:d4:95:59:cc:c3:ef:16:be:f4:0e:f7:10:c5:7a:27:
6f:02:90:18:7e:03:17:dc:10:ee:dd:42:cc:20:1a:d6:c1:eb:
e9:c8:18:48:78:27:c8:b0:10:6d:c2:1e:ce:f7:2c:a8:54:c0:
b1:22:38:34:c8:80:04:11:1f:71:1e:f8:a0:c4:ec:a6:89:d7:
f2:77:8a:39:43:e2:46:81:ba:b4:28:f4:ac:55:a0:6a:3d:5d:
b4:30:ff:72:1a:38:91:44:9b:a1:7d:7a:52:3b:73:78:44:2f:
20:f5:29:ab:b9:56:08:55:27:25:06:5f:db:38:e1:bf:69:e2:
bc:fd:41:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:44 2026 by rpki-client