
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
File: pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json)
Hash identifier: c0rda3OJqxRDM+0JYBA9r8HK1m2cf+79TNw8oyITX0g=
Subject key identifier: 12:3B:5B:15:21:AF:52:7A:0A:89:BD:4C:98:CE:32:8E:35:1E:77:BD
Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
Certificate issuer: /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C
Certificate serial: 121C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
Manifest number: 1200
Signing time: Wed 20 May 2026 17:09:28 +0000
Manifest this update: Wed 20 May 2026 17:09:28 +0000
Manifest next update: Wed 27 May 2026 17:09:28 +0000
Files and hashes: 1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: SCf9e/fqkD3EOYPc/1hSAva7Vg5LMrYs146Hziw2+K0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl
rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4636 (0x121c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C
Validity
Not Before: May 20 17:09:28 2026 GMT
Not After : May 27 17:09:28 2026 GMT
Subject: CN=6a0deac8-65d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:52:3e:15:a8:61:38:ea:6e:80:b7:b8:b1:
62:da:2c:ae:00:f2:23:a7:17:98:18:74:b5:63:49:
33:b5:fd:bb:f2:30:4f:b4:0f:6b:fd:cb:9f:6a:1e:
46:08:13:2f:15:76:54:13:34:52:10:61:93:7d:52:
7d:5c:14:dc:21:12:ce:fd:d6:e7:1a:97:b0:32:4d:
45:da:4c:2b:6e:48:1f:17:95:99:06:4c:43:14:8c:
48:25:7a:e1:e3:cb:7d:3a:0e:4a:ec:b5:2c:a4:12:
8e:09:97:47:36:2e:c3:5e:07:df:ba:a2:9d:dd:b3:
4b:73:2e:af:8c:3b:19:b1:63:02:3a:74:36:1a:f7:
22:2c:e4:0f:7b:64:2f:8f:13:7c:76:9d:39:ed:14:
e8:92:6a:a1:62:ec:92:3b:2c:5f:b0:2e:ad:e3:b1:
63:ea:7e:0c:17:02:76:14:33:d4:3b:8b:95:8c:46:
3f:7a:21:5f:6c:cd:27:88:1b:4f:3f:4d:ff:2f:d6:
64:ed:a2:bb:b4:e3:b7:58:52:19:9e:9d:58:15:18:
21:ac:9f:52:4d:20:36:d6:b6:5c:7b:14:80:60:01:
ca:04:bf:a0:c9:b3:2d:c7:b8:a2:b3:13:6b:4c:72:
1d:3a:33:19:79:9e:d4:ff:da:cf:e0:14:0a:69:3b:
4d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3B:5B:15:21:AF:52:7A:0A:89:BD:4C:98:CE:32:8E:35:1E:77:BD
X509v3 Authority Key Identifier:
keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:87:cd:1a:3b:6d:16:88:9a:1d:1e:f3:50:de:a2:c0:48:61:
6b:65:a2:a3:4b:1c:b1:21:74:f5:44:cb:dc:bd:ae:8d:fe:ad:
86:e7:67:8d:42:1e:da:bc:23:c2:00:04:05:9a:e1:17:ea:36:
c8:31:2b:0a:5e:38:aa:77:81:9f:ec:5f:30:b8:9e:9e:c4:56:
0f:56:97:f4:ea:45:00:c2:d7:f3:71:ad:f1:f0:69:e4:65:f7:
bc:32:20:f0:32:8b:c4:6d:2a:fb:d7:12:37:ef:02:5a:22:91:
a8:64:f0:10:19:3f:d9:91:dc:91:ee:3c:e9:58:56:b7:a3:12:
80:69:3a:f5:95:5b:d7:d0:b2:e8:01:86:41:55:3b:f8:3a:10:
e3:a5:11:f1:7b:24:3b:cb:5b:76:f1:30:05:8d:32:37:e9:79:
b4:8d:57:3c:a2:97:e5:8f:3c:58:09:68:ad:c0:f5:08:48:76:
0e:85:89:4a:0b:59:06:96:99:90:5e:93:29:94:5a:73:92:e5:
25:76:37:0d:4f:fa:bc:60:aa:ba:af:4b:cf:07:c0:ec:a3:db:
48:22:3c:18:8a:08:57:79:b1:0b:fd:1c:dc:c3:18:87:18:ce:
26:32:c3:92:e8:d3:0b:18:bb:83:15:a3:c3:35:60:37:5e:8f:
24:66:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:13 2026 by rpki-client