
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
File: PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json)
Hash identifier: Q8F8okkFVGViFWl3OyEqZ/tbO1GFP6+emTA7V1v3vfQ=
Subject key identifier: 5E:3E:D6:E0:51:A5:83:BF:50:56:21:34:BF:B6:25:6E:F8:9C:70:64
Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E
Certificate issuer: /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
Certificate serial: 3513
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
Manifest number: 3513
Signing time: Sat 28 Feb 2026 14:41:56 +0000
Manifest this update: Sat 28 Feb 2026 14:41:56 +0000
Manifest next update: Sat 07 Mar 2026 14:41:56 +0000
Files and hashes: 1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: 5GPhlOLfJNwN/IuefenSLR56UUsICuHnbSg63IjeYvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl
rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13587 (0x3513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
Validity
Not Before: Feb 28 14:41:56 2026 GMT
Not After : Mar 7 14:41:56 2026 GMT
Subject: CN=69a2feb4-2b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:19:79:60:ad:c0:57:6e:30:f4:e3:74:f9:
7f:e2:a2:e9:47:d9:cf:5e:bf:e3:94:79:e2:f7:17:
ae:87:08:96:f5:da:87:c2:30:a4:6c:cf:18:6b:92:
f6:bc:42:90:1e:d6:49:b0:82:fe:78:57:6d:b7:37:
7f:5f:89:a2:49:23:1e:86:fb:0b:1d:07:a0:a8:29:
67:b5:f5:f7:44:3a:4c:b6:dc:47:66:bb:ce:0e:ad:
02:a7:56:b2:1a:5b:7d:c8:44:00:6f:32:f3:0f:ee:
8a:97:96:86:a0:84:d0:cb:0a:e6:2f:51:36:62:0f:
f3:17:8f:57:03:e3:1e:c2:5f:a6:1e:aa:9f:00:39:
1a:e5:13:d8:5f:58:eb:35:9a:3d:6e:f8:0d:8d:ee:
4e:76:fe:9c:07:dd:15:33:e6:f9:0b:20:59:63:86:
83:95:0c:e9:c0:e8:1a:19:1d:2e:e1:55:c2:63:f3:
cd:50:ec:ee:90:bc:39:2a:46:20:20:f1:62:1b:66:
04:c5:a0:d5:43:19:1a:9a:9b:7f:00:a1:6e:9b:fa:
b4:4c:c4:e9:1c:ca:9b:8e:98:f3:4d:6e:17:cd:c7:
84:ed:a6:6b:f8:10:78:d5:b4:25:9f:79:c1:ed:39:
9e:c5:88:c8:75:c5:b4:72:e0:b4:38:31:43:64:87:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3E:D6:E0:51:A5:83:BF:50:56:21:34:BF:B6:25:6E:F8:9C:70:64
X509v3 Authority Key Identifier:
keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:2c:7c:a5:43:71:a2:7e:c1:83:35:18:2d:2e:78:e3:cf:a2:
90:a5:47:31:cf:7e:8b:5f:a4:74:0d:ce:e2:7f:da:c2:e9:66:
92:96:24:6d:a5:76:f3:30:a1:4f:4a:de:3a:10:5a:54:d2:0c:
a3:be:5b:1e:ec:41:35:48:51:18:cc:bc:79:fa:47:cb:6c:99:
1e:0c:ba:bf:73:2f:d4:a1:6a:d8:a5:dd:2a:74:f7:23:a6:28:
49:0d:fb:86:37:ba:c9:70:ce:f4:1d:db:08:62:c3:e2:51:da:
c7:8e:b1:82:01:da:22:06:d9:1c:0a:12:3a:cf:a7:f8:a5:3b:
3b:39:d0:75:94:89:3d:e4:c2:46:c0:73:a2:7f:d8:aa:60:33:
db:2f:cd:e0:a2:0f:75:ef:4d:18:d9:d6:2e:d8:fa:f6:be:3a:
5d:3a:a6:31:ff:41:be:34:c7:19:f6:90:c8:a9:c8:d4:be:39:
25:03:26:9f:d1:5d:23:08:ef:41:e6:e4:19:ae:07:9f:5a:2a:
26:06:f0:9e:b5:bc:44:7b:84:d6:07:ca:7c:d3:30:ba:10:79:
5e:01:ee:17:3d:7c:57:8c:f6:34:6c:0f:2c:80:61:dd:ff:fa:
39:08:b6:71:7a:a3:6e:89:6a:59:e9:17:8d:dc:d3:9d:b0:3c:
3a:77:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:14 2026 by rpki-client