
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json)
Hash identifier: 0l37I+UmB7G2ch5ADmXJqWK/WyYVpGEWQJQs9ij2hxA=
Subject key identifier: A9:43:6C:50:7F:F3:6B:0F:B1:DA:43:83:08:BA:7B:AE:D5:F1:17:8D
Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Certificate serial: 0352
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
Manifest number: 034A
Signing time: Sun 05 Apr 2026 00:44:22 +0000
Manifest this update: Sun 05 Apr 2026 00:44:22 +0000
Manifest next update: Sun 12 Apr 2026 00:44:22 +0000
Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: g6lMXuWm3sh6fzPOLvL0HvTIp9tNacttEJuXo7rSkYo=)
2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: 03v77JGnYzPEvxVx83tTkIQYIz4qJX+UenP4m2k+EGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850 (0x352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Validity
Not Before: Apr 5 00:44:22 2026 GMT
Not After : Apr 12 00:44:22 2026 GMT
Subject: CN=69d1b066-ef05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:d9:74:21:97:43:f6:88:7c:27:83:39:6f:
83:95:ea:4e:73:ea:30:b1:79:8b:ec:f3:84:4c:81:
10:fb:ad:c1:6b:df:13:30:f2:3f:cf:f5:1b:c3:73:
f9:cf:af:16:10:fd:51:82:bb:d7:a5:5e:f6:05:16:
d0:0a:ed:02:80:9e:ae:4c:10:6b:b7:e7:4c:32:62:
1b:94:bf:1f:c6:86:c3:7f:b0:60:2f:22:04:bc:9f:
39:d5:43:2e:90:d3:75:b2:4c:87:60:63:23:79:cd:
95:87:da:7e:de:dc:0d:cd:d7:77:e3:42:4d:7a:dc:
ce:2d:ec:1a:a4:bc:98:41:d7:c0:9d:2f:79:e9:82:
d8:f1:3f:b2:f1:8e:91:95:35:53:cb:49:82:16:65:
3a:76:4f:e9:24:e3:01:5f:78:b7:a1:c3:3e:d4:f1:
e5:cd:6d:5d:d1:bf:bd:5a:7b:4a:97:ed:b6:74:31:
de:d5:4a:ef:a6:36:18:50:35:f0:ff:33:75:09:e4:
5c:01:cf:79:7f:4d:b7:22:4f:fd:a8:f4:33:b5:9f:
a7:08:1d:e1:75:f8:4b:aa:85:81:67:36:f9:85:b5:
90:d5:57:b3:dc:1e:a4:72:c9:ac:4b:c6:ec:2c:f8:
73:c8:62:27:6a:9b:bf:17:dd:cc:c2:70:9d:de:dc:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:43:6C:50:7F:F3:6B:0F:B1:DA:43:83:08:BA:7B:AE:D5:F1:17:8D
X509v3 Authority Key Identifier:
keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:62:97:92:3d:7e:aa:9b:b8:f9:a6:9f:30:f3:f7:0b:b2:1e:
85:21:0f:50:e6:f8:86:1d:4d:aa:e8:59:2c:79:61:d3:49:57:
92:8e:49:96:52:8f:f4:1e:a4:52:26:88:e6:da:be:0b:1e:df:
13:89:9a:9b:95:ca:d0:28:f4:31:e3:f5:ee:81:be:e1:81:22:
ed:9d:29:0f:8f:44:0a:f7:19:9c:46:f8:06:3b:4a:c3:55:19:
2f:09:8b:b4:73:1f:a5:16:12:65:c9:c6:96:03:33:e1:79:45:
b3:09:73:d1:1d:f4:5e:ae:64:ca:48:e6:89:46:11:bb:8b:21:
0e:e9:cf:40:90:d6:c5:11:d2:88:a9:dd:e4:ca:9a:60:5d:89:
3a:93:6b:f6:28:fd:7f:30:e9:57:cb:b1:f3:4e:2a:91:ca:c6:
24:f5:6d:56:dc:92:d8:eb:17:7e:ce:fe:db:f9:96:5d:66:37:
50:05:c9:78:41:13:dc:be:c2:91:85:7e:37:6f:93:dd:14:60:
80:0c:f9:ab:8b:a2:fa:ab:98:f8:73:86:c2:03:ed:8d:5d:74:
a1:87:7e:65:d9:b9:a6:7f:8a:cd:70:41:8a:7d:25:ac:f4:2f:
ec:9a:bb:b1:73:c4:06:d0:96:8d:fe:82:af:fa:7d:52:8d:59:
4b:f8:16:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:53 2026 by rpki-client