
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json)
Hash identifier: P+FQgfk3UicSymLiCUNNCsTa4rSqzqv+i319R8PCUMY=
Subject key identifier: 9A:09:0F:E3:86:5C:2F:14:DF:9A:14:B7:F4:5A:AA:AC:5C:9A:A0:5D
Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3
Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
Manifest number: EF
Signing time: Fri 17 Jul 2026 07:36:34 +0000
Manifest this update: Fri 17 Jul 2026 07:36:34 +0000
Manifest next update: Fri 24 Jul 2026 07:36:34 +0000
Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: 2ezjmlBoVelEHVJsvWmRuepcGWeTlD8Me6LrjbC/l9U=)
2: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: 47LsXWcwIKUuRyL+mT9zvEQa6j2H0OGo9Q7GJ+csjfY=)
3: 8BACF000172811F0B074151EC4F9AE02.roa (hash: Fl3h9ZkMvSkwu9/oPEGDkM57SG4asbpHPkhkIhKcKIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl
rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3
Validity
Not Before: Jul 17 07:36:34 2026 GMT
Not After : Jul 24 07:36:34 2026 GMT
Subject: CN=6a59db82-168f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:56:5d:4c:78:b8:02:e5:5d:3d:33:0e:33:
65:5e:51:72:25:ae:b7:39:71:94:58:8e:9a:02:77:
9e:95:ee:c0:8a:33:af:97:c1:92:8c:16:8d:3a:b4:
d5:46:99:15:66:ae:66:5f:78:63:e6:c1:17:a1:11:
bc:d1:4e:af:3b:1a:d6:b6:ca:4c:5e:ca:ed:81:95:
92:12:fc:30:f9:f0:e5:14:0c:0a:38:50:62:84:ea:
31:98:98:5f:9e:65:83:6a:e9:ec:86:53:75:89:fa:
1a:57:d9:29:17:47:78:92:af:59:2e:1f:b2:50:d7:
d6:f6:77:58:44:9a:4a:6e:ad:ab:12:54:37:83:74:
25:7a:70:55:73:1e:bb:75:a1:fe:b9:90:00:87:8b:
6d:1f:bb:e1:ec:8e:7e:e2:98:63:b3:27:5d:26:b2:
93:fe:f9:ff:c4:b7:d7:a9:d9:f9:1b:e9:36:44:d4:
b6:ba:e5:83:6f:9d:5b:9c:e1:c1:d7:a0:a3:11:c2:
5d:de:6d:0b:82:8b:f9:e3:cf:bd:4b:56:2c:4f:86:
fb:bf:01:e6:f9:54:fc:79:b5:e0:32:42:73:25:6e:
85:16:df:93:2f:56:79:49:67:ca:f2:18:0b:b7:e0:
04:ba:6d:21:de:f1:d6:51:dd:ae:84:0c:46:a9:56:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:09:0F:E3:86:5C:2F:14:DF:9A:14:B7:F4:5A:AA:AC:5C:9A:A0:5D
X509v3 Authority Key Identifier:
keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:c3:a8:3e:24:7f:9e:e7:47:33:de:81:64:38:bc:75:2e:ce:
b2:c6:77:7b:c3:eb:58:18:ad:c1:a0:42:73:6e:8e:39:3f:72:
c8:c2:a0:86:12:ab:75:11:25:c9:52:5e:4d:f8:71:b2:5d:c0:
b5:94:cd:10:82:35:56:d8:fb:ee:16:a5:57:4f:b6:6b:ab:7c:
a7:96:88:bb:e0:6c:25:04:fc:fc:86:c5:24:82:b7:a4:cb:64:
58:13:8a:e6:99:92:2f:dc:28:bc:c3:75:b0:dc:09:85:a8:67:
5d:19:1c:6e:c4:52:4b:3b:42:1c:41:8a:59:78:8f:fc:ce:c3:
f0:4f:b6:a2:b2:99:79:bb:f4:b8:c0:c8:54:dd:0f:cd:04:a8:
b7:7e:99:c9:08:48:29:79:1d:52:cb:0d:96:43:e1:d5:ea:91:
b5:d7:1d:da:85:4b:94:c5:9a:74:1b:2c:aa:5a:7b:ea:ba:91:
58:c5:75:ce:54:b2:c2:2f:ef:56:bc:77:0f:36:cb:82:22:4a:
27:44:42:5b:7f:08:39:0b:0f:0a:60:57:d2:3f:b1:b6:5a:17:
1b:d1:5a:e3:b0:0d:cc:50:3c:29:36:31:54:f8:aa:e0:d9:6e:
01:e8:75:f3:20:e5:14:46:9c:de:54:1a:bc:5c:2a:90:ad:72:
8c:b8:c0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:17:45 2026 by rpki-client