
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
File: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json)
Hash identifier: EA5sdMk71yWAJMWLfBRIymcYq/A67beQdKwRVddr0/s=
Subject key identifier: F6:CB:27:98:B2:7A:83:06:04:D4:02:A3:5F:97:C0:94:EC:5B:C3:A4
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial: 0416
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
Manifest number: 03D9
Signing time: Fri 19 Jun 2026 00:45:22 +0000
Manifest this update: Fri 19 Jun 2026 00:45:22 +0000
Manifest next update: Fri 26 Jun 2026 00:45:22 +0000
Files and hashes: 1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: YW6RW7M+6MZUkUw4OQ2DwcbHxfxF6DRVRbC4yYWwsV4=)
2: F252737C371411F1984E76E7C6833773.roa (hash: lJEfF027vlV3qB/NZh2KVSm2VyC5BZHOMVkeNSBXx6A=)
3: 75FAF26A5C0611F19E004A568F833773.roa (hash: 36Zf/JUYIh/vKJbgaKcz86UAVpT7bLuw2LCnPswO2yI=)
4: 2E8796D201D811F1B1EB0BE0366F56BC.roa (hash: rCc2LJ3SHarCzukGEVF7yiv4Jot6jNEMODiytpZTHFI=)
5: 769DD8E65D9F11F1B674B26C98833773.roa (hash: 4e/ZxAHLtqfsmhUL7ic9nxXvBz6f3VjlIDuaZXKFxQ4=)
6: 5EDCA5AC61BE11F1BC6CC5449047A888.roa (hash: RfyGAa3qye+BMhRuql0Q61Dpnspsmt7EFQ2dI7Ec2g0=)
7: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: piqd3okCbVlFKjEolLFOOOARynspzmzOHcnRRet9yBg=)
8: ABE29B7C5D9511F19B2B032896833773.roa (hash: iif20YCU1Wi7zhD1Jfp+9xeh29navVt61FKhyB2YPEQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Jun 2026 00:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1046 (0x416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Validity
Not Before: Jun 19 00:45:22 2026 GMT
Not After : Jun 26 00:45:22 2026 GMT
Subject: CN=6a349122-6899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:90:33:97:69:f6:2b:9d:a7:d2:3d:ae:2e:
c6:54:92:87:a4:35:cb:ac:dc:db:24:91:8c:18:9c:
b6:91:c2:cc:e9:80:af:3f:e5:3d:a6:42:0e:1f:d7:
35:20:7f:65:b4:91:ed:db:5c:74:21:78:8a:b2:ee:
d3:07:75:95:fc:8b:cd:02:82:0d:32:fe:40:b4:5f:
d4:b3:6b:29:7a:91:b0:60:e8:ef:fa:6e:2f:ff:c4:
b1:35:16:6c:97:b4:3d:f0:e8:5f:12:f7:5f:19:47:
6c:12:99:ea:f6:57:41:18:51:59:2f:43:d5:c6:a9:
2d:c7:a8:5e:7f:00:b0:32:ff:90:37:71:84:ed:2a:
c0:7d:23:22:0f:73:1c:4c:1a:37:65:8e:3f:a2:23:
6b:9a:cf:d7:b2:0e:2b:01:3f:ff:e0:22:c6:8c:54:
55:29:90:a1:e3:89:df:5f:9f:55:62:0a:74:24:b9:
72:61:92:19:23:6a:e6:12:57:8c:a1:7e:5a:68:a2:
ce:61:88:4a:aa:fb:e0:1e:84:a2:58:45:54:b5:60:
e0:10:90:1e:06:a2:6f:6a:cb:d8:40:42:f4:d4:a9:
48:06:6b:79:98:40:ab:63:c2:d3:19:45:59:f1:08:
b3:17:0a:cb:cf:f2:ce:81:86:22:73:36:a0:63:9f:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CB:27:98:B2:7A:83:06:04:D4:02:A3:5F:97:C0:94:EC:5B:C3:A4
X509v3 Authority Key Identifier:
keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:13:c7:b4:f6:c9:9b:f8:34:ce:1c:8b:f6:5e:9f:88:0c:4b:
0a:0d:22:2f:d0:60:55:98:3b:38:44:c7:e6:93:72:1f:33:a5:
69:c0:11:d0:09:2a:c9:f8:6e:d9:39:5e:1f:53:d1:55:7e:3a:
66:2f:00:9e:79:69:8d:81:34:c5:f9:68:f7:19:e0:fe:0f:db:
06:78:9f:21:50:04:7d:1f:d7:3b:cb:b9:2b:e2:d5:09:39:fd:
1b:82:67:54:e7:64:ca:ff:57:32:dc:f6:42:74:a4:9d:9f:c6:
92:34:a6:e4:f3:c7:5c:ac:da:75:bc:5a:5f:af:f3:37:8a:38:
99:7a:f2:5c:d8:ac:87:fe:4f:5e:0c:bc:71:d3:fd:16:2e:ed:
75:d7:ea:ea:d2:3c:0e:37:79:8f:bd:be:ec:68:e7:65:dd:04:
2f:8f:6d:44:23:a7:22:70:47:d7:80:5b:e0:1a:81:22:9b:55:
90:25:24:34:16:b4:3f:75:e7:2a:3e:9e:8e:63:d5:09:f6:ec:
0b:dc:a7:0e:0b:fa:b6:8b:f2:95:4e:8d:d6:e5:20:42:0b:4e:
7c:e4:04:c2:d2:da:6a:7e:8b:03:25:a7:26:0d:be:2d:f9:e0:
4f:8e:a4:b9:22:35:20:8e:f1:3e:e8:73:64:48:99:bb:6b:2f:
bd:ee:60:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz
NDQ2OEM3QjkwHhcNMjYwNjE5MDA0NTIyWhcNMjYwNjI2MDA0NTIyWjAYMRYwFAYD
VQQDEw02YTM0OTEyMi02ODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz+6QM5dp9iudp9I9ri7GVJKHpDXLrNzbJJGMGJy2kcLM6YCvP+U9pkIOH9c1
IH9ltJHt21x0IXiKsu7TB3WV/IvNAoINMv5AtF/Us2spepGwYOjv+m4v/8SxNRZs
l7Q98OhfEvdfGUdsEpnq9ldBGFFZL0PVxqktx6hefwCwMv+QN3GE7SrAfSMiD3Mc
TBo3ZY4/oiNrms/Xsg4rAT//4CLGjFRVKZCh44nfX59VYgp0JLlyYZIZI2rmEleM
oX5aaKLOYYhKqvvgHoSiWEVUtWDgEJAeBqJvasvYQEL01KlIBmt5mECrY8LTGUVZ
8QizFwrLz/LOgYYiczagY586uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbLJ5iy
eoMGBNQCo1+XwJTsW8OkMB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB
RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzRFNy85ODFDMDU1OEVBRDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRU
c1VoRlE1c2E1UHMwUm94N2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKxPHtPbJm/g0zhyL9l6fiAxLCg0iL9BgVZg7OETH5pNyHzOlacAR0Akqyfhu
2TleH1PRVX46Zi8AnnlpjYE0xflo9xng/g/bBnifIVAEfR/XO8u5K+LVCTn9G4Jn
VOdkyv9XMtz2QnSknZ/GkjSm5PPHXKzadbxaX6/zN4o4mXryXNish/5PXgy8cdP9
Fi7tddfq6tI8Djd5j72+7GjnZd0EL49tRCOnInBH14Bb4BqBIptVkCUkNBa0P3Xn
Kj6ejmPVCfbsC9ynDgv6tovylU6N1uUgQgtOfOQEwtLaan6LAyWnJg2+LfngT46k
uSI1II7xPuhzZEiZu2svve5g0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 20 03:14:05 2026 by rpki-client