
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
File: PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json)
Hash identifier: itNDEO28x6hjJnwKYTojD6HId1gxKWlLMM2Of6GShC8=
Subject key identifier: FE:23:CF:CE:56:8E:D5:EE:F8:E5:32:7E:A9:38:F8:2D:11:B5:2E:E1
Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE
Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
Certificate serial: 0845
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
Manifest number: 083D
Signing time: Sat 28 Feb 2026 21:12:22 +0000
Manifest this update: Sat 28 Feb 2026 21:12:21 +0000
Manifest next update: Sat 07 Mar 2026 21:12:21 +0000
Files and hashes: 1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: m8kAEDD/Cm4tA2fQE8rG1G1xYik3rP6uSw2DBDAfVUY=)
2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: AHAcb+gAjCz8wkoAWVtMX/VsvUWaSfqcpHAMq6tIbbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl
rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117 (0x845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
Validity
Not Before: Feb 28 21:12:21 2026 GMT
Not After : Mar 7 21:12:21 2026 GMT
Subject: CN=69a35a36-3039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:76:0f:47:dc:40:32:79:df:ba:6f:66:c4:24:
3e:9f:74:4c:37:e8:a6:e2:54:4b:46:6c:ba:83:57:
67:9f:28:d0:d3:52:e8:75:7b:50:2d:c8:4b:9f:27:
1e:ca:a9:45:45:26:d9:d0:29:af:f9:a1:8d:17:db:
98:77:59:70:bd:37:bd:45:c1:e8:8e:9b:86:af:4a:
84:24:bc:63:22:78:f2:ac:26:83:fd:95:8b:c5:17:
9c:d6:83:74:f4:9b:92:c1:87:02:fd:24:f2:4d:d4:
5b:b9:62:64:8f:a4:03:8d:15:08:55:69:16:ed:e9:
79:43:8d:28:95:14:bf:99:67:a0:dd:c3:ae:a2:e4:
28:8f:2d:82:3d:35:ae:6e:46:83:f0:ed:34:d6:61:
91:3a:90:29:d2:24:12:ce:79:3a:b0:b7:d0:73:b1:
e3:b2:3f:28:0a:09:d2:65:35:0c:23:e7:52:b1:1a:
a7:5a:8f:39:35:9f:f4:95:13:8f:de:3f:1d:6b:c3:
0b:45:e4:9a:3a:1a:6a:d5:ca:a5:e9:b5:02:f8:56:
bb:ea:c1:ca:ee:c3:30:e4:b6:0b:1a:e9:a0:ba:5f:
32:54:e9:6b:ab:b3:e5:9e:f9:60:0e:2d:86:61:57:
ed:bf:b6:4f:6e:67:55:69:93:22:47:ff:3e:20:76:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:CF:CE:56:8E:D5:EE:F8:E5:32:7E:A9:38:F8:2D:11:B5:2E:E1
X509v3 Authority Key Identifier:
keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:b5:03:11:74:8c:96:02:f5:90:d2:b2:05:80:18:00:c5:d2:
4f:10:3a:0e:cb:44:41:9a:74:fc:02:9d:99:93:9c:f5:10:cb:
38:31:27:dc:6f:ae:38:19:4b:01:5a:e3:a9:48:55:d7:23:99:
6c:66:fe:ce:e1:84:fb:5a:2e:13:c2:26:2c:5c:43:38:86:ee:
e3:c2:79:2e:64:51:b0:7a:40:b3:64:6d:a6:15:f9:e8:4a:69:
c5:a2:81:b3:3a:20:41:1c:21:90:38:61:5f:0a:93:06:92:dd:
b5:52:82:9d:1d:35:1c:ed:c4:97:4b:d2:cc:4a:88:c7:71:5f:
82:5e:ba:cb:f9:04:77:b6:d4:cf:f2:56:96:d8:7d:0b:4d:fd:
c8:e4:86:3b:81:33:ce:50:e1:42:b2:2f:94:8b:c3:73:08:00:
15:fd:53:b7:ff:a1:5e:57:23:5e:a0:63:e2:0b:50:0e:13:69:
eb:24:43:18:75:b1:17:48:e6:f3:07:3c:0a:17:83:9a:2c:14:
f5:f9:90:37:4c:37:c6:fb:ed:f8:c3:d1:79:ed:0e:73:14:f5:
0c:b0:f9:f3:e6:07:5c:a1:40:63:45:30:fb:9e:a9:bf:62:48:
90:ed:3d:2f:e4:50:e9:a6:40:84:17:35:93:f5:77:59:50:6a:
91:0c:ad:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:03 2026 by rpki-client