
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json)
Hash identifier: wEB4h056PonqlX9D8DO0lzgFRNoCIhecyBXKnUF2HRA=
Subject key identifier: 5B:1B:44:FC:A8:BE:B8:B1:07:A3:2B:60:59:1A:84:BF:6D:1C:39:A7
Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Certificate serial: 0464
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
Manifest number: 0452
Signing time: Wed 05 Aug 2026 00:53:55 +0000
Manifest this update: Wed 05 Aug 2026 00:53:55 +0000
Manifest next update: Wed 12 Aug 2026 00:53:55 +0000
Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: 3wO/mKcl0qIfLzOBpwVpY/UpFtci3PBA2GSAmlyB3k4=)
2: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: NkI+pmzBqCxF9snRnYsLLFaunC0T93+l8haq4O7khjQ=)
3: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: i18vAYWYZqWUAwFZVSlGk7OxKqt1gz8XjzU2hmpsWh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Aug 2026 00:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124 (0x464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Validity
Not Before: Aug 5 00:53:55 2026 GMT
Not After : Aug 12 00:53:55 2026 GMT
Subject: CN=6a7289a3-e0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:c0:19:f3:62:fd:ed:a6:24:38:3b:ed:62:
c9:65:b1:20:0c:b9:0c:55:92:d1:af:ac:83:a0:80:
2b:5c:87:a1:d5:b7:4f:b0:3e:32:f1:e6:9a:0d:3d:
3d:fb:de:a2:8d:a7:02:b9:9f:07:3d:52:16:cf:37:
41:8c:55:8e:1a:07:94:89:5d:ef:e0:6d:75:8e:8d:
b4:7d:58:1a:61:52:12:5e:0f:2c:0c:17:6b:dc:d0:
71:cf:03:0c:8c:4e:cd:ac:a7:f1:5b:76:8d:7a:05:
70:0b:bc:78:6e:50:e6:c3:58:24:53:1d:b7:6f:fe:
30:41:23:f8:c0:56:e1:11:45:3f:7e:f7:f7:6f:ff:
cc:37:0e:ac:c5:d9:8a:6a:8d:a7:01:08:b5:55:f6:
b4:ac:6e:e5:a0:d8:94:09:51:4d:6a:fe:9c:e3:43:
5d:a4:da:ec:33:e6:93:28:fb:17:1d:52:34:83:8a:
b5:05:65:e1:cc:d2:37:6c:15:14:cc:3c:f9:03:36:
ad:a8:15:cc:bd:b9:63:09:2f:69:88:83:9d:88:cc:
7d:d3:14:dc:ff:66:6d:2e:90:67:9d:62:b8:f9:6c:
d0:f0:3a:a5:71:7a:08:42:50:15:f8:89:c8:28:af:
bb:f9:fe:91:4c:a8:a9:f6:08:e8:16:84:e7:a6:c3:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1B:44:FC:A8:BE:B8:B1:07:A3:2B:60:59:1A:84:BF:6D:1C:39:A7
X509v3 Authority Key Identifier:
keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:3c:2c:78:cf:2d:5c:3d:20:e0:ae:38:b3:91:b1:73:8e:31:
25:59:ad:8c:06:98:54:90:2d:e5:3a:d3:90:60:f6:61:c0:de:
79:2e:f9:41:62:62:bf:3f:76:88:ed:35:35:de:9f:b9:28:00:
09:ca:e4:67:1d:35:5a:1f:68:1d:3d:50:59:f4:58:3d:85:96:
65:59:7d:1f:76:6b:d0:df:06:5f:94:a7:df:e4:0f:b1:d0:99:
9e:d0:8e:c2:6b:ff:86:85:58:2c:84:aa:27:3f:d0:19:86:90:
b2:77:fc:b6:2c:ff:23:93:97:fa:ad:45:41:b2:86:0f:26:1e:
e9:7e:ec:1f:0b:35:87:85:62:12:fb:d1:88:e9:e2:3c:97:c5:
e8:a2:71:33:28:e2:e2:c2:2b:36:b5:cd:a9:2c:04:e1:6b:ab:
0c:cd:cd:2e:21:d1:5c:7c:fb:57:d6:9e:98:6e:eb:0c:06:f9:
90:7c:51:e8:a2:35:20:b0:d2:d1:8c:d9:4c:7c:e9:7f:9f:36:
68:b0:43:18:63:7e:23:05:c4:33:c3:6f:75:2a:5f:65:c6:74:
6d:df:0c:0b:67:f2:83:46:8e:59:de:47:f4:a9:76:a5:3a:e5:
8a:5e:40:6d:0d:31:0c:40:14:79:c0:21:6e:b8:30:69:d1:d9:
25:f0:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 10:18:25 2026 by rpki-client