
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
File: PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json)
Hash identifier: 2xvGxGpXSbnSk79kXswcJGbCcSqAAPzdm2osVT5356A=
Subject key identifier: A1:9C:76:F3:8E:FE:94:A4:4D:29:F7:AA:BB:E4:AD:F8:BF:16:E2:F4
Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
Certificate issuer: /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
Certificate serial: 0B62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
Manifest number: 0B59
Signing time: Sat 04 Apr 2026 19:01:40 +0000
Manifest this update: Sat 04 Apr 2026 19:01:39 +0000
Manifest next update: Sat 11 Apr 2026 19:01:39 +0000
Files and hashes: 1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: +UlRsabMUlHcYOOqIMAO0rnC09wNb4aNBk6Ijti/Gzo=)
2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: ZatHv2sHyWRSC6zewOoWADYzth7DnWj+eG5J7PvU3G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl
rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2914 (0xb62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
Validity
Not Before: Apr 4 19:01:39 2026 GMT
Not After : Apr 11 19:01:39 2026 GMT
Subject: CN=69d16014-0482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:51:56:4b:48:71:a6:5f:66:9f:24:db:a6:
20:9b:5e:1a:18:7e:44:bf:a8:28:59:19:bd:65:70:
6a:18:80:2c:e3:19:8a:ad:6f:68:60:64:b0:f6:9f:
0e:41:f0:e3:d1:7b:0f:2b:79:66:12:d3:57:8a:22:
e0:b7:59:74:95:3b:da:0e:59:2b:7d:71:9d:fb:10:
95:10:c0:ef:59:4c:a2:e6:fb:a3:c5:7b:0e:db:e1:
64:56:9e:6c:fb:a4:94:f6:8d:1a:b3:a3:fb:75:35:
b0:af:3a:c0:83:8e:5a:ca:38:38:f6:5f:93:8f:ff:
48:7f:f6:52:78:36:f8:98:d7:28:82:59:af:15:e7:
74:d6:d7:fb:99:95:33:a7:52:c0:38:68:d2:77:ec:
b5:76:08:32:4b:25:46:0e:1e:69:27:fa:3e:83:89:
89:36:80:9b:55:01:28:a4:41:3d:e6:08:22:a1:94:
73:85:0c:f7:a2:38:ef:18:2f:bb:2d:f6:d6:84:43:
75:81:1c:e2:fb:b7:1c:a6:8d:0b:07:ab:87:2d:20:
79:69:e9:20:93:a3:3f:ee:62:d8:be:8b:e7:b3:92:
a8:3b:7d:6c:df:43:9a:5f:bb:f2:8c:95:25:40:19:
2c:8f:1e:f2:6c:61:5b:3d:fe:ee:ca:f8:7b:c9:a1:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:76:F3:8E:FE:94:A4:4D:29:F7:AA:BB:E4:AD:F8:BF:16:E2:F4
X509v3 Authority Key Identifier:
keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:2d:e2:b9:c7:e3:72:9d:d2:73:b4:9c:e7:c9:60:d8:21:e6:
13:d9:88:7c:c6:cc:3f:8f:99:c5:ad:69:16:e5:53:52:ea:ed:
78:2b:12:37:0a:bf:ab:be:8b:dc:7a:59:1c:87:87:57:2f:71:
6a:1d:9e:05:b0:db:33:51:b8:d5:a1:4a:1b:28:9a:a6:59:c0:
e1:1f:02:45:4d:65:6e:fa:11:62:23:32:93:3c:c1:b5:91:d1:
e6:03:75:8b:e0:b4:00:7f:98:aa:55:6f:cb:35:40:cf:c0:f1:
47:a3:2f:a6:a3:93:e1:64:81:eb:2d:9e:a0:00:d2:ea:0a:83:
cb:aa:3c:11:31:7e:6a:4f:e5:81:4e:24:75:58:c5:78:0b:d8:
8b:b9:dc:13:04:65:64:06:61:5f:c4:a8:70:f7:a9:ab:f5:9b:
91:9f:09:80:de:40:af:25:0c:c3:89:52:8f:6b:32:3a:66:ef:
3a:85:a8:ef:06:d7:18:27:cc:f8:fc:e4:5e:88:57:6b:2b:42:
0d:a2:77:ff:6d:9e:13:63:5b:dd:54:7d:89:bd:5f:f4:39:11:
89:1f:91:49:cd:7e:69:fd:1f:f7:c4:71:63:b9:6c:d3:9e:2b:
87:02:dd:e6:51:f0:9d:f7:96:e3:32:09:75:8a:0e:dd:d4:bd:
75:5d:88:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:58:31 2026 by rpki-client