
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
File: _PdT00aqq5WrFMYmdRXN8T-A-7s.mft (raw, json)
Hash identifier: 9m+33MgENB4+aQ0ibxYSGr2zt3UioySFnDn9DzdbNgo=
Subject key identifier: BF:20:2B:89:FE:E3:E8:61:2F:B1:8E:E9:86:7D:28:91:2D:60:3D:84
Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
Certificate issuer: /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Certificate serial: 01F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
Manifest number: 01DF
Signing time: Thu 21 May 2026 03:40:59 +0000
Manifest this update: Thu 21 May 2026 03:40:58 +0000
Manifest next update: Thu 28 May 2026 03:40:58 +0000
Files and hashes: 1: _PdT00aqq5WrFMYmdRXN8T-A-7s.crl (hash: WkO2c/F6bPnYLQ43SPUfUXvAP2qaEXnzUrGXJwRkjxo=)
2: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (hash: vlIQijSPBbvP9L65iKqCctaPnA/4JGm7yNBkYuL1NNg=)
3: 41969D1C8F3011EEA61ACF62C4F9AE02.roa (hash: gg1NxyOoVbC4W+3Hh9sYPb23rvpu8aUKKSd8lTa2xx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F22, serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Validity
Not Before: May 21 03:40:58 2026 GMT
Not After : May 28 03:40:58 2026 GMT
Subject: CN=6a0e7ecb-c2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b4:ed:dd:e5:85:3f:fb:8e:74:f9:76:a2:71:
1d:61:e5:00:00:88:8f:e9:21:fd:d2:f3:f9:c5:8a:
41:fa:96:ae:88:60:8e:b6:c1:3e:fa:bd:e8:91:5e:
ea:b0:37:d2:3d:5b:89:b6:59:9c:f6:c6:09:74:0c:
91:d1:db:07:fd:89:7e:e3:67:46:56:85:e6:1c:7e:
26:82:45:4c:76:d7:b6:d4:bc:ad:62:ee:b1:d1:24:
57:c2:0f:48:ba:23:96:a7:08:d8:56:a2:41:b4:88:
7b:d1:55:c3:e6:62:96:a2:b8:02:f7:3f:ba:42:dc:
35:80:15:86:98:30:bc:11:67:31:f7:6c:2d:f3:c4:
ad:11:79:71:20:1f:b5:a5:03:5b:33:41:46:68:37:
c2:e8:6b:6c:2d:41:c3:a9:8b:6d:1e:1c:d5:a5:46:
df:af:b3:57:9c:21:3c:a1:81:1a:34:58:ab:30:1c:
56:3a:7b:3b:a1:df:7e:43:e0:02:bb:a5:99:00:d3:
f7:95:7a:26:86:51:0f:09:d2:df:8e:aa:98:f6:e0:
70:27:c2:b9:1a:a9:d2:13:cc:c9:6b:8b:7f:7d:64:
82:51:3e:1b:1f:44:c5:f2:9a:0e:b3:a2:eb:38:db:
90:bc:17:4a:b6:69:e8:83:fe:05:82:32:c3:5e:9b:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:2B:89:FE:E3:E8:61:2F:B1:8E:E9:86:7D:28:91:2D:60:3D:84
X509v3 Authority Key Identifier:
keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:8e:6c:45:86:da:d5:b0:e7:d5:e0:a2:34:28:d9:d5:e4:15:
62:a4:c4:d8:4f:d3:88:d1:51:aa:c3:d7:8f:64:d7:92:dc:ef:
b1:e9:d5:b8:ad:10:f8:34:db:6f:75:ca:36:ee:e9:8b:0f:44:
0a:fc:bb:05:68:0d:bf:2b:b4:af:97:d1:14:71:70:84:6a:54:
04:8b:8f:62:c5:6e:83:75:3d:10:3f:32:60:28:88:25:a8:dd:
e2:a1:17:65:3e:24:f6:9f:c1:d5:97:98:5a:87:04:34:99:95:
d7:bb:23:15:87:a7:c1:33:2a:ec:68:27:4c:2a:04:89:bf:29:
2f:61:e8:6f:be:a4:97:39:16:b6:b7:42:62:25:70:83:52:47:
27:b4:12:ea:ec:20:75:bc:34:20:9e:72:50:55:78:9d:77:4a:
14:e7:29:df:e7:57:f7:2e:82:42:d1:e3:96:24:bf:07:f6:a6:
5e:89:64:6d:e0:07:7f:42:e2:d4:18:cc:34:61:bc:79:7c:29:
8f:15:51:de:e1:c1:5b:fa:42:6c:ca:f1:5f:c5:4b:c5:9e:81:
d4:28:ca:8f:6b:7d:bf:3f:1b:66:2b:ec:35:88:84:2a:50:c3:
5b:19:0d:03:b8:fa:f2:a2:b5:1f:68:28:40:8a:fc:03:89:58:
a6:53:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:09:48 2026 by rpki-client