
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
File: PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json)
Hash identifier: gLUR0BIjn+61RM7S0RDo2bRKXk888LUEqN+sg5gmx5Y=
Subject key identifier: EA:AA:43:29:55:46:39:C4:57:02:EF:EB:1D:0F:EF:FF:90:44:5A:D4
Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE
Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
Certificate serial: 08A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
Manifest number: 0898
Signing time: Tue 18 Aug 2026 20:57:55 +0000
Manifest this update: Tue 18 Aug 2026 20:57:55 +0000
Manifest next update: Tue 25 Aug 2026 20:57:55 +0000
Files and hashes: 1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: TDnwnYNWlsxQ0gbZTtuXqRdAa4Ij4irYWNIGbjSRt3M=)
2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: XH4VYu53iAjrrjdTY4lzAuAVa7gNtCanU3skjDFNBQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl
rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2210 (0x8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
Validity
Not Before: Aug 18 20:57:55 2026 GMT
Not After : Aug 25 20:57:55 2026 GMT
Subject: CN=6a84c753-cf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:c2:91:d3:d5:19:10:82:f9:70:b6:e3:8d:
4c:b1:2d:a6:51:d0:53:fb:e2:90:70:23:00:59:58:
8c:c8:73:6d:40:68:3b:5e:f5:53:3e:b1:8e:ae:00:
dc:12:a8:a0:5c:e2:c5:ae:ad:d0:9e:d4:98:ed:29:
bc:bb:90:2e:dc:6c:cb:3b:b8:18:ef:26:12:e1:2d:
96:9f:d6:d8:28:3b:e6:20:09:29:ed:7a:e3:36:19:
99:ca:db:95:82:e0:0f:1e:f0:a7:1f:11:c1:32:60:
db:4e:82:b3:ec:26:d7:bc:c7:30:b1:71:d3:a2:71:
b8:e1:ce:22:a1:88:bd:db:0b:dc:99:e9:69:fd:d8:
6f:f2:5a:74:a9:5c:4e:7f:e1:09:d4:cf:a0:f7:29:
c4:d6:f4:b3:0c:de:58:61:b4:f3:08:b6:77:1e:4f:
57:c5:e5:8b:de:3c:d9:95:08:f1:12:71:48:62:9c:
84:38:63:1b:0e:84:b0:0a:10:1f:41:d6:78:da:8e:
6e:10:b9:5f:c6:d8:f3:ca:0d:ba:9d:23:dc:60:c1:
99:9d:95:e4:85:12:41:52:17:c7:fb:f9:e5:ad:02:
c0:08:88:e9:ba:61:e6:2e:fd:fe:53:5d:9f:d1:15:
1e:fe:51:4b:27:5c:06:85:99:ad:4d:9f:29:79:08:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AA:43:29:55:46:39:C4:57:02:EF:EB:1D:0F:EF:FF:90:44:5A:D4
X509v3 Authority Key Identifier:
keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:9f:a5:c3:6a:36:bd:76:22:c3:e5:ad:e9:e0:9d:b2:90:a3:
4f:30:27:54:1a:e1:85:a5:d3:0b:d7:5c:48:65:fb:09:91:48:
2d:1c:8a:8c:24:a7:60:e5:98:b2:7d:a2:9e:d0:7d:3b:22:fa:
43:a6:ad:b7:f2:d1:58:1d:d3:aa:10:0b:8c:f4:e1:d9:a6:90:
ce:46:00:2d:2c:60:d2:41:4e:b9:54:8b:db:d0:b2:73:ca:f1:
b9:58:b6:49:83:5a:fa:88:d5:04:79:7f:55:c9:ed:cd:59:01:
41:ca:1a:08:d1:60:29:24:ce:86:fa:76:92:f8:83:48:a4:1c:
a8:d5:88:28:ca:9a:18:06:38:d7:5f:e4:b0:13:7f:3d:f3:6a:
e3:18:a1:cb:d9:8f:7b:40:68:ab:8b:f5:2d:98:27:b3:78:2b:
48:be:b7:a6:85:10:a1:6a:26:d0:2b:4f:75:15:e1:d8:f8:55:
75:e9:2a:e9:d9:03:ab:6a:1c:6c:54:be:bc:88:c1:24:c0:3f:
9e:04:1e:0d:bb:2f:7d:ea:95:a4:8d:81:7c:c7:7d:38:6c:60:
17:32:fb:63:83:ec:de:0b:bd:3d:a3:df:e9:dc:54:58:34:24:
0a:6d:59:dc:da:5f:ac:53:b5:58:09:1b:e5:ad:c1:db:a0:2d:
6e:b7:5a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:42 2026 by rpki-client