
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
File: Pq60tRb3A-pY8W4I2opmdwP7XK4.mft (raw, json)
Hash identifier: DvjZoTHosaTJp4L2XoymWr9SwpO8ABzg2Ngs13Jx8gk=
Subject key identifier: C8:E7:AC:0B:9B:E6:22:C5:FE:53:0F:98:71:15:07:22:7E:0C:C2:C3
Authority key identifier: 3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE
Certificate issuer: /CN=A919D109/serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
Manifest number: 0219
Signing time: Thu 23 Jul 2026 04:13:54 +0000
Manifest this update: Thu 23 Jul 2026 04:13:54 +0000
Manifest next update: Thu 30 Jul 2026 04:13:54 +0000
Files and hashes: 1: Pq60tRb3A-pY8W4I2opmdwP7XK4.crl (hash: yOk7vLaDvDzNJ1ySHNkAB863XuKdVcyDGkSqUiSsVUc=)
2: B67DC27A60E311EEB04BEA49C4F9AE02.roa (hash: Ammp8qF05nah6v/McxV23VKxzM9VW/7aLFZmanvDnyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl
rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D109, serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE
Validity
Not Before: Jul 23 04:13:54 2026 GMT
Not After : Jul 30 04:13:54 2026 GMT
Subject: CN=6a619502-3832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:78:34:02:57:c1:6c:3a:93:b1:1b:e5:d3:
3b:37:b5:96:74:ac:0b:02:2a:70:15:5a:c3:f6:71:
bf:b5:d0:0f:d9:b0:20:1e:9e:30:1f:c2:ca:29:a4:
1f:18:78:53:4b:3c:8c:e3:b1:b1:be:aa:67:6b:0b:
c4:7d:d6:1f:c1:06:dc:29:8a:0a:80:7b:90:17:9a:
15:fb:47:fc:c4:b8:da:9f:a7:7a:2b:31:f2:24:89:
01:1a:ed:2c:88:17:5f:98:26:f3:7f:3a:95:17:8d:
b0:ad:8b:c4:64:7f:b3:de:50:9c:88:36:e1:71:16:
83:ae:b6:02:8e:0f:e7:16:50:b2:f2:57:12:62:c3:
88:53:0a:a6:23:e7:17:fb:2e:c4:b2:69:6a:fc:31:
61:1f:f3:a1:e4:b6:ef:81:0a:b3:71:1d:7b:02:e2:
37:46:e0:4b:b1:8b:fb:98:97:bc:04:5d:68:3c:9c:
25:68:23:c8:8e:dc:bb:27:ac:40:59:1b:0f:17:dd:
3d:5d:7d:e3:bc:18:01:4a:05:55:5f:cf:01:e9:00:
41:e1:5d:b0:5f:15:38:4c:d9:0c:92:38:90:84:af:
e0:cd:e2:1d:62:64:48:bf:3f:22:18:30:cf:d9:c8:
fd:65:fd:eb:ad:a9:54:27:ad:17:38:2b:d1:f6:83:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E7:AC:0B:9B:E6:22:C5:FE:53:0F:98:71:15:07:22:7E:0C:C2:C3
X509v3 Authority Key Identifier:
keyid:3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:2f:e6:54:88:17:a0:80:41:d9:88:20:16:5b:bf:c3:ff:b6:
fa:f4:5e:97:89:e5:a3:4f:30:15:38:cd:f1:23:f7:22:c4:a2:
9b:cb:dc:41:aa:d0:d8:af:cf:ee:9c:73:73:d5:76:29:35:9b:
95:63:98:74:05:c8:19:62:e7:0a:e1:2a:bc:3d:62:fc:52:53:
e5:4c:09:56:ca:54:df:b1:0b:e6:c9:7b:74:b1:6e:e9:79:37:
5d:01:0a:cc:83:a2:a7:6d:1f:77:b0:24:26:51:55:4c:76:fc:
02:7c:80:2c:1a:3f:f2:57:bb:ed:c9:39:b0:88:2d:6f:3e:59:
5a:eb:87:c1:cd:a3:0d:8a:94:00:9b:84:38:09:6b:04:d8:ac:
11:22:6b:9e:e8:37:25:3f:ea:ef:5f:8d:58:e9:bd:2a:a6:d9:
f5:a9:21:10:44:bc:ea:fd:a6:6a:4e:37:d7:26:a7:59:c5:51:
aa:3d:30:f9:ee:b4:16:88:37:4f:0c:94:c7:cd:57:ac:4e:39:
aa:34:2c:30:6b:6a:c8:ac:08:e9:9f:cf:54:50:aa:d7:dd:c0:
8a:6d:6b:ed:d4:f0:97:b3:b4:bf:15:3c:bc:51:1b:1d:60:36:
4c:23:1e:b4:6c:19:6e:db:06:ee:99:79:5a:5c:86:d9:16:5b:
5c:c8:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:58 2026 by rpki-client