
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json)
Hash identifier: gQqRC6ky1Qa/kwtHvtoXUIdW2UgvmPxWiGsxx43Y6hQ=
Subject key identifier: 70:02:4F:75:F8:CC:2F:79:C8:25:64:8D:64:12:F0:3F:15:76:86:A6
Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C
Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C
Certificate serial: 1F83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
Manifest number: 1F74
Signing time: Mon 02 Mar 2026 03:11:31 +0000
Manifest this update: Mon 02 Mar 2026 03:11:29 +0000
Manifest next update: Mon 09 Mar 2026 03:11:29 +0000
Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: PObRIGioC1hzO+/6doP8wSFPMJyYfY/vPE+vO2YrNVE=)
2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: YSudnO+gxDW3KLQoZtaYLWQrz8EP6UlH+aQ5JWb2Q0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl
rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8067 (0x1f83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C
Validity
Not Before: Mar 2 03:11:29 2026 GMT
Not After : Mar 9 03:11:29 2026 GMT
Subject: CN=69a4ffe2-8651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a9:c2:6e:ae:3e:c0:59:53:68:1e:a1:38:21:
90:df:2e:b7:b0:7b:45:aa:cd:ed:e1:cd:41:1b:81:
26:83:93:c2:94:ff:c0:83:a9:00:9a:98:85:61:f5:
88:fc:a7:28:f4:fb:f6:45:89:6b:80:8b:2d:f3:3f:
5c:d0:dd:50:1c:5e:b6:c9:af:36:fc:9e:30:7e:db:
82:bb:8a:0e:67:dc:9c:d3:75:3b:73:69:f9:d2:9b:
9c:db:c1:7a:6a:72:ff:3a:d9:75:cc:ce:9e:0e:da:
69:87:f4:fd:23:ee:ce:26:1c:fd:51:db:01:a4:f2:
3c:21:ea:3c:bd:cd:ce:8c:ba:6f:a8:3a:2f:25:1a:
17:7c:00:0f:4f:27:2e:ff:d6:ea:41:3e:e5:4d:4c:
38:d3:71:b1:41:83:b5:28:65:21:06:30:dc:3a:74:
d0:72:37:12:46:4b:06:f4:0c:7c:9e:6c:c0:37:5b:
a9:e8:9a:c9:91:bb:d5:d1:45:6e:f0:d5:4d:cb:97:
4d:6f:6d:37:27:85:05:f2:3d:d6:5a:7d:af:ff:79:
97:58:f6:3b:b4:b4:e8:97:38:e9:c1:13:0c:29:0f:
30:d5:b3:0b:81:8b:21:09:19:77:75:6f:07:d4:38:
54:66:b2:d1:c8:2a:6d:9c:32:c3:14:77:15:0e:85:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:02:4F:75:F8:CC:2F:79:C8:25:64:8D:64:12:F0:3F:15:76:86:A6
X509v3 Authority Key Identifier:
keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:6e:a6:ee:37:89:eb:1d:ce:df:b5:ea:cd:15:7c:1b:40:14:
52:be:3b:d7:34:82:e0:b0:ca:66:44:51:2c:7d:2e:fd:a0:c9:
ba:f9:7e:ca:cf:0a:51:47:2d:fd:5d:45:5e:f0:3e:da:93:ef:
9d:8d:fd:06:4a:1a:55:cf:bd:ad:4f:49:2a:63:ca:d5:c7:80:
85:4e:25:10:61:93:81:07:a8:d8:55:70:70:7b:73:cd:f0:5b:
6d:9b:96:dc:51:22:ae:ba:bc:88:03:bd:25:ec:02:8d:a1:d0:
f7:9c:ec:06:d5:26:9b:65:6e:11:b7:20:69:81:38:1d:a2:bf:
7e:a8:6f:18:e9:b8:5d:66:d9:5c:3e:90:29:52:be:e6:a2:37:
15:19:d1:45:73:0a:a2:be:1d:33:8e:68:f3:0c:05:21:5d:df:
12:26:49:63:a4:a7:92:a4:05:9e:7e:94:28:73:da:86:aa:66:
d8:86:91:3d:99:6d:c9:19:fd:54:d4:3e:9a:28:49:72:26:bd:
b6:60:cf:37:3b:9f:bf:c5:a2:6f:5b:8f:35:4d:a5:22:98:05:
4c:1f:5d:65:90:42:40:30:d2:4e:8f:85:a7:bc:b2:99:ab:22:
b2:07:2e:db:c7:3e:e5:fe:72:c8:8b:ba:7a:cb:d5:54:cb:9c:
ee:2b:56:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICH4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG
QzcxRDExNUMwHhcNMjYwMzAyMDMxMTI5WhcNMjYwMzA5MDMxMTI5WjAYMRYwFAYD
VQQDEw02OWE0ZmZlMi04NjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9anCbq4+wFlTaB6hOCGQ3y63sHtFqs3t4c1BG4Emg5PClP/Ag6kAmpiFYfWI
/Kco9Pv2RYlrgIst8z9c0N1QHF62ya82/J4wftuCu4oOZ9yc03U7c2n50puc28F6
anL/Otl1zM6eDtpph/T9I+7OJhz9UdsBpPI8Ieo8vc3OjLpvqDovJRoXfAAPTycu
/9bqQT7lTUw403GxQYO1KGUhBjDcOnTQcjcSRksG9Ax8nmzAN1up6JrJkbvV0UVu
8NVNy5dNb203J4UF8j3WWn2v/3mXWPY7tLTolzjpwRMMKQ8w1bMLgYshCRl3dW8H
1DhUZrLRyCptnDLDFHcVDoWC1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHACT3X4
zC95yCVkjWQS8D8VdoamMB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF
MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm
RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEW6m7jeJ6x3O37XqzRV8G0AUUr471zSC4LDKZkRRLH0u/aDJuvl+ys8KUUct
/V1FXvA+2pPvnY39BkoaVc+9rU9JKmPK1ceAhU4lEGGTgQeo2FVwcHtzzfBbbZuW
3FEirrq8iAO9JewCjaHQ95zsBtUmm2VuEbcgaYE4HaK/fqhvGOm4XWbZXD6QKVK+
5qI3FRnRRXMKor4dM45o8wwFIV3fEiZJY6SnkqQFnn6UKHPahqpm2IaRPZltyRn9
VNQ+mihJcia9tmDPNzufv8Wib1uPNU2lIpgFTB9dZZBCQDDSTo+Fp7yymasisgcu
28c+5f5yyIu6esvVVMuc7itWXw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:58 2026 by rpki-client