
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
File: PnIyBI3L0sabqyJbikIhYEbBiyU.mft (raw, json)
Hash identifier: ucHYT2KiLSc8Z+lqZ/uJK3ft8UVPwaIPDbYFcnSLFTU=
Subject key identifier: 18:F4:C5:DF:A0:5F:B9:82:91:E5:2A:89:C9:93:8C:CC:00:9C:04:3C
Authority key identifier: 3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25
Certificate issuer: /CN=A911CA78/serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
Manifest number: 0257
Signing time: Tue 28 Jul 2026 18:59:44 +0000
Manifest this update: Tue 28 Jul 2026 18:59:44 +0000
Manifest next update: Tue 04 Aug 2026 18:59:44 +0000
Files and hashes: 1: PnIyBI3L0sabqyJbikIhYEbBiyU.crl (hash: cpM3XAQvSw2s1ZhdZMxA7g1OVBBClw9PbjtNjmky9rw=)
2: 1ABB6C4E17DB11EE92B1C26FC4F9AE02.roa (hash: UxgWHSWCQslOtEVN8vxHfkeQxG5zKwXTOsnpS8saGYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.crl
rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25
Validity
Not Before: Jul 28 18:59:44 2026 GMT
Not After : Aug 4 18:59:44 2026 GMT
Subject: CN=6a68fc20-2b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:67:d6:87:09:0a:d5:22:64:73:89:5e:2d:
79:d8:45:61:29:72:c2:69:d4:c9:38:a1:83:83:af:
8b:5d:73:77:63:9f:7c:ed:f0:06:89:62:67:e0:20:
f6:f4:c9:74:b2:50:4c:17:1a:2e:08:14:bd:a1:dc:
73:56:a7:50:12:63:9b:b2:b3:0b:8f:a8:64:13:10:
ff:3c:82:b8:b8:92:ac:6e:5e:eb:c8:f1:2b:15:25:
13:50:c0:c4:78:22:e5:37:11:42:c9:40:0f:a5:ca:
15:6f:44:04:20:b5:c5:9c:ff:35:e8:2e:d5:9d:de:
c1:93:37:cb:d7:14:47:d1:9b:c2:f4:20:6e:6f:14:
6f:f9:91:6e:88:0c:93:5a:61:ed:a7:97:43:26:37:
26:66:7d:81:20:b8:cb:18:8f:60:5d:52:2c:50:14:
00:5b:c0:ca:8d:94:56:d7:a9:ed:4d:14:98:a2:a7:
83:6b:c8:f5:cf:54:a3:6d:d3:fa:09:b1:03:c1:97:
8b:6e:66:54:ae:ba:33:fb:8f:cb:d8:80:0e:b4:69:
df:2f:d3:5a:30:b5:51:9c:74:b1:50:6f:68:0c:e9:
13:e8:fa:ad:c4:d7:53:77:43:4a:2f:00:32:b9:02:
57:9f:d0:cc:12:1f:2e:6e:2b:47:8b:70:7b:12:f5:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F4:C5:DF:A0:5F:B9:82:91:E5:2A:89:C9:93:8C:CC:00:9C:04:3C
X509v3 Authority Key Identifier:
keyid:3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:9a:39:49:a5:5f:c7:2a:79:28:65:82:0a:67:1d:2d:07:69:
a1:14:3f:8d:16:09:1d:16:2b:19:b7:0c:d5:bf:97:4b:21:ca:
1c:69:ae:27:eb:44:2f:4b:8e:0a:e3:f4:9e:17:67:5f:00:c0:
3e:3e:1b:e6:52:44:31:67:8c:f3:ac:f9:68:70:b9:be:c0:ac:
6c:b1:b0:10:6b:c7:a9:7d:09:e3:96:d4:29:07:48:00:3a:44:
a0:29:16:7f:9b:65:d5:b7:8d:3b:a2:e7:66:b8:28:bf:25:fe:
d8:23:5c:59:73:13:11:d1:13:75:81:39:e7:73:5e:8d:98:57:
64:5b:c2:9e:87:55:d4:dd:c4:e5:b8:ed:1b:55:9a:6b:48:f2:
7f:51:5f:d4:4e:b2:7e:fa:5d:b0:b5:57:ab:94:5c:ab:2d:ab:
fd:5d:41:79:c5:9f:53:89:21:ef:ba:44:90:70:56:64:e0:1e:
b8:4b:fb:fa:b0:43:b2:b7:cb:3d:77:aa:cb:14:6c:0a:6e:98:
50:65:5f:a8:d4:80:0a:27:79:77:04:e3:3e:3f:e1:e8:9e:cd:
00:8b:ba:63:c0:28:8d:d5:69:b8:6a:17:24:d3:87:ce:61:71:
59:e7:43:c5:1d:bb:94:fe:f1:96:cc:5a:d1:84:5e:35:67:8e:
aa:49:9e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:42:21 2026 by rpki-client