
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
File: f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json)
Hash identifier: +YsnLwh131Fcb/b1Dk4FgC+Y8XSN76oD70FbCP5IAu0=
Subject key identifier: DB:8B:38:EF:67:23:A9:6A:0B:5A:BE:A1:41:7A:95:8D:EA:AE:E6:9F
Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D
Certificate issuer: /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
Certificate serial: 06DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
Manifest number: 06CB
Signing time: Sun 02 Aug 2026 22:49:36 +0000
Manifest this update: Sun 02 Aug 2026 22:49:36 +0000
Manifest next update: Sun 09 Aug 2026 22:49:36 +0000
Files and hashes: 1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: NRcaIrdimfpF0wC+kqI+IM5WAUgvMiZASA9ujd5kVqs=)
2: 95B7B784C1E611EF91316938C4F9AE02.roa (hash: y+lFHngfQnlFkbwbfAnNnYvQWplxE2BUU73qj0ZDaUw=)
3: 515B1CD254EB11F0B04DBD37C4F9AE02.roa (hash: nKGpkEspHYoLDWlKrq+T1eLZcO38KBQKAU4XkN0Vf1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl
rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Aug 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757 (0x6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DA3F, serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
Validity
Not Before: Aug 2 22:49:36 2026 GMT
Not After : Aug 9 22:49:36 2026 GMT
Subject: CN=6a6fc980-b0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:2b:ef:ee:7a:26:16:08:42:da:64:38:22:
3b:43:57:4a:a1:0a:ee:99:d6:9d:57:ba:f3:5e:b8:
13:e9:30:bb:c5:44:66:d0:62:fd:7b:23:21:33:0c:
a6:b3:26:cf:97:bb:a7:e8:dc:10:07:99:36:e9:db:
93:c5:e1:37:e1:f4:03:d8:42:cd:c1:06:49:e2:ea:
e6:9a:f1:a4:74:31:0f:e3:a6:07:fe:03:2b:cf:17:
3c:54:5c:9e:2b:79:49:3a:90:5a:23:40:f0:ab:f7:
63:68:db:c7:2c:28:3b:2c:5e:54:26:56:99:2d:0a:
0f:c8:3e:8e:64:79:f1:73:b4:65:1a:f0:ac:a6:cb:
c2:cc:88:3f:d8:9e:c7:c8:8a:05:95:8a:c7:e0:14:
2a:12:f7:24:82:d0:7f:9a:51:f6:a0:6c:02:55:57:
32:1a:0d:22:10:75:66:2b:9f:01:db:78:43:fc:3b:
30:d8:b5:4d:d0:e8:14:69:b3:e5:bf:8a:b1:6e:f3:
f3:2f:56:79:43:74:c5:1f:20:dd:b8:5f:ca:f8:9a:
1c:4e:4f:4c:bf:e2:db:8f:05:04:9e:10:cc:31:9e:
30:bb:18:9a:23:46:d4:e7:e3:bc:b4:74:6b:d9:b0:
c9:6e:c0:63:e4:8c:e2:a1:6f:9c:63:7a:ea:42:28:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8B:38:EF:67:23:A9:6A:0B:5A:BE:A1:41:7A:95:8D:EA:AE:E6:9F
X509v3 Authority Key Identifier:
keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:15:e7:b8:9f:d7:b2:6d:7a:8f:b6:d6:49:56:bd:88:e1:db:
b5:e2:f7:41:e8:8d:ed:ed:08:66:1e:d0:f7:8b:ca:5e:19:1c:
37:9c:c6:d3:d6:2e:28:38:48:ff:47:d2:b8:8f:2e:1b:0e:fa:
fa:15:b5:6f:23:98:9b:6a:78:bb:d3:74:0c:91:e1:1c:e7:10:
1a:82:82:df:2c:54:cb:e6:a4:ce:1b:ce:c6:3d:b9:38:18:65:
b7:f0:d4:50:5f:dd:53:70:cc:15:ad:d5:81:85:1e:c7:80:d5:
e0:5b:35:fe:1a:32:70:8e:7c:80:5b:e4:14:d3:9f:31:ab:38:
1b:41:4e:0b:9a:63:fb:69:b6:b4:d2:c6:cb:6d:73:69:a1:44:
0f:65:af:16:94:c4:78:8e:76:92:5d:b7:84:ce:a1:a9:9f:b3:
83:4d:44:a1:eb:94:cb:28:06:de:e5:52:2f:11:a0:d5:c9:b6:
52:da:2f:87:53:45:ec:3b:11:67:e3:67:a4:f7:4b:76:3f:35:
02:91:1b:c2:7e:8b:67:53:35:74:d0:11:c3:30:fd:25:cf:22:
dd:b1:a6:20:d7:98:de:24:46:56:8b:42:6c:53:fd:03:a8:cb:
1b:ef:db:c4:7d:a1:ec:a0:d4:b2:09:dd:b1:92:9c:81:90:a6:
55:ea:0f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:36:46 2026 by rpki-client