
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json)
Hash identifier: 54fFe/sqU6AkCYUXbpKw+UOMbdUuU3PG/FHtobe3z8I=
Subject key identifier: 1C:CF:4E:56:A3:CD:FA:AC:7C:50:98:1B:7C:E8:89:3F:B3:3C:BA:8B
Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C
Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C
Certificate serial: 1FE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
Manifest number: 1FD0
Signing time: Tue 18 Aug 2026 16:05:23 +0000
Manifest this update: Tue 18 Aug 2026 16:05:23 +0000
Manifest next update: Tue 25 Aug 2026 16:05:23 +0000
Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: AENoSAXlTdWlr681C5I6dpm4kAZClWhoRvokCv2Bb9o=)
2: B3FD34B086EF11F19E006003A7EE528E.roa (hash: jUd6E1y9akwpYW++1YnOWiJy/vljpSRRO3tXCJkUkr8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl
rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8162 (0x1fe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C
Validity
Not Before: Aug 18 16:05:23 2026 GMT
Not After : Aug 25 16:05:23 2026 GMT
Subject: CN=6a8482c3-3d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:32:79:66:2b:a2:aa:33:a0:2c:3a:8e:7f:
18:29:28:3f:aa:8f:75:d2:56:8c:35:d4:39:76:08:
10:ed:39:7a:e9:59:07:f7:07:32:12:38:08:ba:46:
50:18:ce:35:80:f9:b1:69:6c:a2:81:9b:03:aa:27:
a6:c7:b3:44:ae:dc:d8:69:fb:d9:74:0e:e3:39:30:
4d:5b:7d:ee:87:45:ee:ab:43:02:7d:6e:9d:9d:fb:
ef:a5:e1:86:83:81:3d:bb:e5:54:3f:bf:c9:6a:ee:
e3:bf:e6:a2:c6:86:03:d4:45:02:34:42:0c:2e:94:
d4:e3:25:be:d0:d5:ff:21:61:56:6d:20:de:8a:ad:
eb:b5:43:29:d1:c6:d1:2a:05:58:19:f6:28:c7:01:
ad:f4:fb:fb:58:bd:fe:2e:a7:80:73:65:fd:ea:cd:
59:b5:42:6e:1e:5a:85:7d:de:4a:e1:05:a1:e2:e2:
55:63:36:c1:c1:cb:d3:b9:65:53:29:88:c5:ff:c9:
3b:ca:54:7d:89:30:58:d3:f5:07:e0:c3:19:91:66:
08:4b:ff:d2:f4:43:1b:a5:e2:9f:04:e7:c0:92:23:
95:ed:e9:c7:b0:52:c5:d3:40:4f:67:26:8a:42:7b:
69:6f:e4:77:02:17:d8:91:be:31:4b:d6:98:ec:40:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CF:4E:56:A3:CD:FA:AC:7C:50:98:1B:7C:E8:89:3F:B3:3C:BA:8B
X509v3 Authority Key Identifier:
keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:f4:f8:48:26:0a:cd:d7:ce:7b:3b:bf:7e:af:86:fe:f3:e5:
6b:53:03:95:ed:05:2e:84:67:b8:49:7d:89:3b:ee:73:8a:e0:
0a:ed:7e:63:91:3e:b9:7b:73:3e:2e:f8:4b:a4:79:0c:a9:94:
b0:c4:b8:d9:ce:34:06:f8:ea:55:a6:15:73:8c:e3:f1:75:bf:
6c:93:7d:88:81:b6:0e:69:fb:63:48:b9:12:c1:42:d3:70:a3:
76:b0:4e:b9:4c:cf:5f:65:c1:f2:03:5f:fc:35:ae:c6:14:57:
85:39:fb:85:a8:cb:04:1c:71:4d:b1:e2:be:1d:30:bf:b4:1e:
3a:c4:8e:27:e4:96:ac:93:71:6c:95:db:18:0a:2a:e7:aa:9a:
22:17:4d:f3:56:05:55:51:a1:f7:41:8c:b9:0e:d8:33:43:b6:
42:4c:32:d6:19:3d:05:d3:28:4b:cd:25:8a:96:8b:27:fc:f3:
f3:c3:c0:27:81:c1:18:70:93:2a:3e:63:94:06:1e:e9:ef:93:
da:a3:0f:b4:17:a8:cb:af:3a:94:23:ba:f0:33:cd:3a:81:32:
1a:eb:8b:da:e1:0a:33:33:8e:49:65:5b:49:f4:b0:c6:7d:bb:
0d:34:2c:bb:a3:e2:67:34:fd:d7:4d:b6:ad:04:ae:de:f2:a9:
91:b9:a5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:19 2026 by rpki-client