
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
File: PgYolveWFAxkBV5H1FMISCOnCCQ.mft (raw, json)
Hash identifier: KbWpQsxqC+hbZqOBZxhJbJea958SZAwBtdEF+zEdaCc=
Subject key identifier: A1:B9:82:0F:AA:E0:9C:60:4B:06:07:8A:D0:14:65:80:C9:08:E3:9E
Authority key identifier: 3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24
Certificate issuer: /CN=A917E65B/serialNumber=3E062896F796140C64055E47D453084823A70824
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
Manifest number: D9
Signing time: Tue 23 Jun 2026 06:53:19 +0000
Manifest this update: Tue 23 Jun 2026 06:53:19 +0000
Manifest next update: Tue 30 Jun 2026 06:53:19 +0000
Files and hashes: 1: PgYolveWFAxkBV5H1FMISCOnCCQ.crl (hash: 3SgsIt29/uVV2ZlDQroJMiKGvP8y0wp00m3y86tX2k0=)
2: B7498170318011F0A5A76C39C4F9AE02.roa (hash: UbYb0P8FE3F+HvemibXz0dMD4w6gFMZ7kKT3m10twQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl
rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 06:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E65B, serialNumber=3E062896F796140C64055E47D453084823A70824
Validity
Not Before: Jun 23 06:53:19 2026 GMT
Not After : Jun 30 06:53:19 2026 GMT
Subject: CN=6a3a2d5f-7ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:75:62:75:e3:12:b7:94:8c:35:d4:c8:95:
40:ef:2e:ab:ab:68:63:89:83:c7:9f:6b:73:7e:23:
4c:9b:f6:1b:e8:5a:aa:22:d3:ed:84:a0:63:34:48:
8b:b5:cc:69:ef:4a:5d:44:f2:82:ae:98:62:08:71:
ab:a7:06:82:bd:7b:5b:d7:ee:c9:7c:19:13:22:25:
b7:c0:f3:d0:a7:54:c3:62:1a:e6:25:05:25:a0:b0:
84:58:a3:1e:38:ff:9d:61:3f:de:b8:ca:c9:f3:ab:
cd:2b:c4:53:0a:e7:8b:a9:57:3b:e9:37:d3:0e:85:
11:d8:94:90:05:04:3e:b2:f4:4f:a1:24:fc:78:94:
4b:19:79:03:25:1b:39:8e:08:7d:73:57:3a:7d:b0:
9f:7a:9b:37:bd:9f:59:94:24:d4:94:e6:2e:30:76:
30:31:dc:32:6a:4a:da:ee:f7:4d:83:10:ec:6d:28:
05:8b:fb:15:ef:14:d0:e6:e2:e8:0e:7f:83:b9:91:
27:c9:fc:c4:31:56:04:3d:4b:64:1f:71:3f:6a:2b:
a4:f4:32:0e:4e:8a:dd:82:0c:0d:97:30:da:85:d3:
52:26:72:e1:39:20:42:94:21:27:8c:6b:5d:c7:9f:
6b:54:b0:c3:de:7a:d0:26:69:c9:80:eb:36:ed:4a:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B9:82:0F:AA:E0:9C:60:4B:06:07:8A:D0:14:65:80:C9:08:E3:9E
X509v3 Authority Key Identifier:
keyid:3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:24:30:97:10:bc:42:84:96:c0:86:99:d4:c9:f3:c5:83:6c:
54:fc:88:fb:40:03:a7:9d:94:3f:c6:26:97:05:86:a3:ba:01:
f9:6b:72:b5:ee:b0:33:71:28:80:31:1d:9d:72:c7:6d:7c:92:
32:5c:5a:54:43:e2:72:49:aa:7a:99:f0:b0:cd:c6:2f:c1:f8:
55:4b:ca:74:01:41:2d:19:2a:27:d6:69:b1:23:7e:17:24:2c:
13:89:01:59:e7:38:c6:bb:63:05:9a:80:56:a5:eb:53:d8:23:
9e:da:07:69:ad:d1:be:69:ca:55:ae:80:97:9a:a7:e6:d4:ef:
ae:51:b7:27:57:02:75:51:06:e4:0b:5f:35:00:3f:ef:23:70:
ad:3d:67:ed:e1:c2:86:47:9d:11:a6:1e:ac:00:8e:54:e5:b9:
20:44:fa:86:ed:54:7a:42:25:e6:95:11:58:be:3e:d2:2d:1c:
aa:ed:9d:11:f7:b6:e0:4b:2c:e0:e3:d2:c5:92:b3:f8:7f:43:
03:da:c8:1c:03:38:1a:3d:62:fa:e9:b0:2d:8b:a8:2f:ba:7b:
c1:84:9e:5d:09:0a:fd:59:2f:df:81:47:66:65:11:41:02:bb:
7c:6b:f7:d2:08:87:99:02:a7:d9:f4:7e:7b:be:e2:10:57:a2:
b5:5e:1a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:12:14 2026 by rpki-client