
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
File: Pq60tRb3A-pY8W4I2opmdwP7XK4.mft (raw, json)
Hash identifier: qN6OJm34PpSGE5099Og09PVb2ASAzfjah/BkhEihtI0=
Subject key identifier: C5:96:96:03:8F:FC:2D:A5:15:7D:96:E3:E3:90:B6:61:66:E4:23:19
Authority key identifier: 3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE
Certificate issuer: /CN=A919D109/serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE
Certificate serial: 0232
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
Manifest number: 0227
Signing time: Wed 19 Aug 2026 03:23:39 +0000
Manifest this update: Wed 19 Aug 2026 03:23:39 +0000
Manifest next update: Wed 26 Aug 2026 03:23:39 +0000
Files and hashes: 1: Pq60tRb3A-pY8W4I2opmdwP7XK4.crl (hash: U90dZpkW9n0jnbigbsnWSSF3SNp89TQJGyolKhkgF+Y=)
2: B67DC27A60E311EEB04BEA49C4F9AE02.roa (hash: Ammp8qF05nah6v/McxV23VKxzM9VW/7aLFZmanvDnyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl
rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D109, serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE
Validity
Not Before: Aug 19 03:23:39 2026 GMT
Not After : Aug 26 03:23:39 2026 GMT
Subject: CN=6a8521bb-03f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ec:78:1a:9d:41:e5:da:ef:60:f9:f8:18:71:
b4:b8:0b:66:93:a6:99:57:16:27:af:07:86:41:04:
10:f1:22:a0:08:a8:79:0f:e8:a2:4b:79:ed:79:8c:
20:ec:5c:1a:0b:56:c5:fb:9a:bb:9a:4c:e2:58:f4:
bd:b9:49:24:fe:f1:1d:e4:13:02:ac:4b:3e:43:c1:
0d:bd:29:10:7a:ae:60:01:d2:8c:4c:6b:cd:9f:38:
e2:c5:65:34:6c:26:79:79:17:a6:bf:db:3a:c7:90:
aa:26:c9:4b:7c:5c:4c:ec:c6:40:1e:a4:04:54:55:
90:35:f6:5a:bf:65:f3:3b:39:28:30:ab:5b:33:ed:
af:1e:26:51:96:af:4c:d7:8d:a8:a9:35:4f:2c:c8:
f7:6d:aa:a8:a3:18:2d:c2:74:90:e3:db:89:1a:7d:
00:74:45:89:02:59:29:cc:53:97:e3:e7:3b:a2:24:
cb:d7:0a:cc:e3:83:59:d2:72:a5:0f:57:d2:0a:28:
d8:75:f3:58:ef:4f:a5:c5:85:90:69:e3:1e:f7:a4:
ad:cd:c7:42:91:a6:8e:49:52:d9:fc:a6:dc:d6:02:
f5:ab:2b:90:9e:00:1e:85:af:9d:37:38:08:0f:2a:
e9:43:c7:af:7e:0f:9b:9e:1d:ff:44:bd:99:1b:5b:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:96:96:03:8F:FC:2D:A5:15:7D:96:E3:E3:90:B6:61:66:E4:23:19
X509v3 Authority Key Identifier:
keyid:3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:89:4b:3f:e4:90:16:6d:e8:30:cc:e7:c0:22:f3:47:94:a4:
1e:5a:72:1c:66:3d:29:d7:42:ff:1b:1d:de:c7:f9:0f:2b:09:
9c:24:b0:8b:8b:37:9f:68:33:99:73:a6:df:5e:89:30:b7:a4:
f3:8a:57:16:c7:2b:0e:a4:79:e4:fa:fc:dd:dc:c2:21:16:f9:
ec:47:82:b1:40:74:4c:56:17:fd:36:2f:ba:54:8f:82:cb:c5:
fc:06:5b:b4:bf:59:34:6a:89:8a:6e:3d:45:f3:e0:47:0a:45:
59:00:7a:09:0a:43:91:d9:c1:32:98:b3:44:55:4f:8c:bd:78:
82:82:a9:d4:07:93:56:23:3b:94:21:88:7a:a1:90:9b:98:67:
5d:4a:aa:9f:af:c5:61:d2:c4:78:80:6e:2d:53:08:b9:a0:25:
f0:63:47:51:90:82:3f:09:83:ea:74:33:e0:4f:a4:0a:8b:c8:
13:83:ad:82:a6:ec:24:55:5a:48:e0:35:6a:63:a2:82:7d:0a:
63:db:c5:26:81:c1:f7:9d:05:d9:e8:8d:73:65:c1:09:70:ca:
b7:06:a1:a4:24:ac:8f:6a:3a:44:92:d3:a8:04:b8:eb:5a:9a:
75:51:79:4f:2e:70:10:38:92:a6:29:cf:27:ba:24:76:85:44:
48:2c:da:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:59 2026 by rpki-client