
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
File: PNcVUq-qATj5pk4BYO7wYJYGUyM.mft (raw, json)
Hash identifier: e2fgtdiI4oUmr8yPc+4Xb4mi1F39xArroac3/zBu6tI=
Subject key identifier: 72:C5:B4:C3:E6:2D:C1:19:1C:E1:E0:AC:00:5B:C0:37:46:4C:4F:BF
Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
Certificate issuer: /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
Manifest number: 01FC
Signing time: Thu 23 Jul 2026 04:31:13 +0000
Manifest this update: Thu 23 Jul 2026 04:31:12 +0000
Manifest next update: Thu 30 Jul 2026 04:31:12 +0000
Files and hashes: 1: PNcVUq-qATj5pk4BYO7wYJYGUyM.crl (hash: aJMRo+AroyD02lwHpT5uo7V6bXXqtJUaG0DO6AqhkNc=)
2: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (hash: Nj2SWfF08+NWeNfqPzGe0G/AhkrzTZtBpN7F7NKz6A0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl
rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Validity
Not Before: Jul 23 04:31:12 2026 GMT
Not After : Jul 30 04:31:12 2026 GMT
Subject: CN=6a619911-02d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:63:e8:6c:ef:9e:3c:dd:75:5d:9d:b6:c8:
f0:19:3b:1a:06:4b:46:a1:90:fc:6e:17:92:5d:15:
ae:97:e6:6c:e2:d3:c7:f9:ba:f1:4d:2c:e4:b3:d5:
b4:af:a1:ba:df:a6:be:75:35:d1:83:1b:5d:82:ed:
16:4a:5e:de:bc:df:7d:5a:7c:33:ed:f1:87:6e:e9:
47:33:5a:2a:1f:91:da:a8:9b:1c:81:e6:2b:87:15:
94:00:90:b5:b2:69:90:cd:9d:93:c6:aa:77:ea:1c:
2c:da:c6:36:8b:51:74:c5:0e:0e:86:23:77:b6:4e:
bd:08:72:45:a5:3c:3d:7f:c0:f2:06:ec:12:2a:c8:
20:4e:49:74:78:26:89:ce:0a:ba:00:91:a5:29:7d:
2c:5a:35:06:f8:df:db:71:d3:16:4b:e8:b2:3b:8d:
d5:87:30:23:3e:b4:41:48:8d:01:22:9d:e4:bc:42:
7b:ff:f2:5a:79:dc:85:65:74:bb:d5:8d:89:13:e3:
8a:62:d1:21:64:1a:a3:ae:66:e6:1d:84:cd:33:dc:
a9:03:0e:f4:07:1b:c6:6a:cf:ba:f5:a4:60:be:68:
c0:a5:2b:88:1e:68:57:3d:d4:bb:ec:ac:41:7c:14:
e2:52:49:d7:4b:44:8d:f6:e4:93:00:0a:ff:c7:e8:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C5:B4:C3:E6:2D:C1:19:1C:E1:E0:AC:00:5B:C0:37:46:4C:4F:BF
X509v3 Authority Key Identifier:
keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e6:04:5c:58:9b:8f:e8:bc:fc:50:59:15:4a:ef:d7:37:27:
dc:5e:f5:2d:a1:7f:a4:91:b6:3d:3d:c0:43:cc:c7:d2:b1:9b:
91:b9:80:0e:b4:d0:09:04:49:29:83:05:e1:60:e0:d8:21:c5:
f1:75:8d:ad:76:4f:9a:e8:52:c9:66:ef:eb:95:31:f1:b1:d0:
33:fc:ff:2d:97:2b:4c:02:fe:9a:bd:5a:c4:00:a8:ab:1a:83:
1a:7d:06:8b:c5:a0:85:36:64:53:23:bb:e8:a9:b7:f2:1d:f0:
cb:78:33:da:c7:6a:d1:7d:e1:01:5f:27:43:d6:96:f4:79:80:
aa:5c:06:61:10:5d:98:29:76:5f:53:f9:a3:f5:2c:35:87:07:
9e:fe:12:c8:de:f0:1d:da:02:13:c2:15:98:32:41:1b:29:07:
73:de:f7:b1:cd:14:db:fe:4f:c1:6c:11:91:5b:8d:96:c1:7f:
b8:1c:01:23:bd:7b:60:f8:de:68:c4:f0:7a:45:12:ae:5f:9a:
24:a6:d8:44:7e:bb:e6:83:7b:da:b8:56:00:58:ff:bd:b2:cc:
bd:c7:f1:80:68:f9:26:85:3f:c9:a6:2f:3a:c4:ae:0b:ec:51:
04:31:9c:fa:78:19:e9:d3:1f:5f:59:71:9c:f8:96:ba:bb:b2:
6f:45:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:23:08 2026 by rpki-client