
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
File: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json)
Hash identifier: 0QunuljrP4QRnxeMCVfl1XYh8inOGu01SrszLNiy3RI=
Subject key identifier: 4F:E1:30:FE:13:2D:10:DA:91:E4:C6:1E:81:0C:40:28:2A:FF:AE:12
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial: 0454
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
Manifest number: 0412
Signing time: Thu 17 Sep 2026 00:30:29 +0000
Manifest this update: Thu 17 Sep 2026 00:30:29 +0000
Manifest next update: Thu 24 Sep 2026 00:30:29 +0000
Files and hashes: 1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: /FQJl4DTFEGdnuKQQSdnkYH0Pw0DIEGEmvSI8DosV70=)
2: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: piqd3okCbVlFKjEolLFOOOARynspzmzOHcnRRet9yBg=)
3: AD595B62A08911F19CA560C95111F970.roa (hash: iXQSgfzv5Du+4aXNbNxkvvRFO9z0pwgmujIi9v8pcPI=)
4: 4ED71B80AFFF11F1BD61B2EA6311F970.roa (hash: 1lSbamswHB3UNqnig5IojJ9Gp5PeOWUen/dkbQ9nWK8=)
5: 95C64BC0A20C11F1978F0A1A4811F970.roa (hash: wL66YNVnRgEwAMiQSYr0PpdCCahvdrdoToc9iJC1nx8=)
6: E31040027AA211F1A7425D4B5FA30FBC.roa (hash: R/9K4K6QZffUa+A09UevR5/cUaVC0oy01ZOS/2cVFB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 00:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1108 (0x454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Validity
Not Before: Sep 17 00:30:29 2026 GMT
Not After : Sep 24 00:30:29 2026 GMT
Subject: CN=6aab34a5-0e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:21:97:3a:a0:8e:e2:42:80:12:39:df:21:3a:
56:0a:b7:ca:fb:c0:bb:e8:56:dd:00:df:e7:b3:89:
35:ce:1f:bf:6f:7e:8f:c3:81:39:7e:27:70:11:d5:
fa:32:53:de:5d:d4:90:20:7b:b8:d1:b0:db:de:d4:
93:98:3a:37:63:66:ca:1c:0b:01:43:9d:75:6a:af:
a1:eb:87:92:d4:16:46:40:04:0d:01:f2:4b:80:e9:
e0:50:df:4a:38:3e:68:30:3f:c5:ef:ef:91:ef:78:
d0:67:c2:a3:44:96:16:a8:d2:74:49:63:8a:ba:06:
2b:56:38:84:7a:d3:16:84:07:66:66:82:1d:0b:1d:
1f:7e:e7:44:e8:d0:35:98:8a:dc:10:13:14:2a:bb:
45:be:7a:0d:0d:57:26:c6:1d:2f:37:f2:3d:5c:7d:
80:6f:08:f4:6a:e9:ba:d5:e0:ad:c8:f6:d1:f6:c5:
55:55:de:e3:10:d2:dc:ae:f5:52:c7:b3:bc:bd:f3:
17:c1:68:d1:ad:82:e4:1b:57:0c:4b:a3:b9:be:7b:
37:9f:69:cf:6a:1e:0c:a4:44:d1:a1:05:66:e4:b4:
7a:f4:6d:31:03:33:ef:f6:d8:c2:84:2c:15:ee:90:
f6:7c:44:9f:7c:cf:76:50:28:e9:d0:ec:8d:75:f3:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:30:FE:13:2D:10:DA:91:E4:C6:1E:81:0C:40:28:2A:FF:AE:12
X509v3 Authority Key Identifier:
keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:65:a0:ac:8f:fa:52:3b:f7:cf:2f:18:81:2e:6c:36:40:8f:
fa:93:a9:57:3e:84:67:a1:30:39:0a:4f:41:a5:20:f2:f1:97:
73:dd:93:20:f4:5d:92:8e:03:ff:27:e0:6d:78:d2:13:81:dd:
0b:49:89:48:77:82:27:53:09:22:64:22:c3:1d:69:e2:d2:bb:
6a:f4:a5:2d:69:16:c8:dc:a8:92:44:3c:ca:a7:e9:67:28:b3:
85:01:83:79:44:74:79:f6:f7:09:22:3f:6b:43:7d:66:80:70:
71:c3:df:73:75:79:80:ed:33:5b:0d:69:08:97:a3:27:b0:26:
2e:d1:83:3d:c3:9f:4b:81:8a:cf:a7:14:ff:75:2d:c4:7c:27:
b4:6b:cd:ca:10:39:f9:d4:c0:c6:e2:fc:f4:ca:92:4b:07:c4:
4d:d6:5e:a0:e4:9f:34:a2:a6:44:88:63:ce:07:5e:51:6c:02:
f3:06:a8:68:33:7e:07:b4:cd:dc:d5:f6:85:1b:fa:87:27:31:
2c:f5:45:1d:45:1f:e7:fd:ab:19:65:a7:ff:6a:f7:6d:f7:00:
55:23:9a:9b:09:7e:fd:05:53:d7:60:dd:43:03:97:f9:bb:bc:
ae:64:32:89:54:d6:77:5a:56:1d:b1:a7:d9:6b:62:ac:e9:db:
db:b7:db:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:11:25 2026 by rpki-client