
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
File: PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json)
Hash identifier: sr7SyoYezDoe6VfUAiyiiJI+WtAYp5Y5UFJ9IOeK2GI=
Subject key identifier: A8:31:A8:FD:22:54:2A:68:73:1C:C1:5C:67:F2:56:D8:89:AA:08:5A
Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE
Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
Certificate serial: 0861
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
Manifest number: 0858
Signing time: Sat 18 Apr 2026 20:39:12 +0000
Manifest this update: Sat 18 Apr 2026 20:39:12 +0000
Manifest next update: Sat 25 Apr 2026 20:39:12 +0000
Files and hashes: 1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: p+ho/PZyL/yG3C1qgrQfiWSoNgYhnJfP129hSq5/2G4=)
2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: N/PJeJGpe5jwVdTA+VhHOpYYFuL79+kPqluBOU8PIYg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl
rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 20:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2145 (0x861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
Validity
Not Before: Apr 18 20:39:12 2026 GMT
Not After : Apr 25 20:39:12 2026 GMT
Subject: CN=69e3ebf0-52f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:ba:47:e0:89:57:07:41:73:f7:12:1d:b9:
e2:64:5f:64:7a:f2:57:08:7d:62:6b:14:5e:78:28:
74:9e:b4:d9:17:ae:5d:be:fb:3d:ff:60:9e:f3:30:
83:3a:07:8c:15:42:07:75:12:ef:1e:3e:34:94:7e:
06:8b:b9:27:34:d4:44:11:68:56:fd:1a:d9:14:44:
32:f0:3d:d3:3d:bf:92:db:37:43:ac:a2:8e:bc:37:
bb:0e:8b:4b:bb:37:9b:61:61:1b:fd:bf:08:0e:ee:
bd:1c:4a:b6:32:5d:ab:d6:43:1d:c5:58:f6:5d:cd:
62:9d:d6:dd:33:8d:d5:b2:01:7b:27:32:c7:8f:c4:
79:24:c5:e1:73:2f:44:c6:42:b9:72:bf:75:bd:86:
45:3f:78:af:9c:1e:13:06:ca:62:00:9e:ac:d6:a7:
ce:a2:0f:e5:b3:4b:55:70:f0:73:e9:e1:73:f6:20:
49:24:77:2a:db:29:60:9b:b9:9d:75:1c:db:4f:07:
f6:67:6a:7b:b4:37:99:b3:58:1f:37:4c:59:82:97:
29:9e:eb:d6:46:77:d6:4b:3d:e6:bf:6f:5e:df:90:
4a:62:23:2f:fe:55:9b:53:7f:e8:a4:9c:3a:83:06:
ab:31:50:4a:b9:4b:49:3c:93:e3:65:8c:b8:c4:34:
a5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:31:A8:FD:22:54:2A:68:73:1C:C1:5C:67:F2:56:D8:89:AA:08:5A
X509v3 Authority Key Identifier:
keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:28:86:82:4d:bd:36:0a:92:da:8e:3f:44:9c:8d:db:96:20:
79:c2:aa:08:da:35:e3:f6:ed:84:89:80:66:d6:32:8c:17:b6:
12:13:69:c7:5b:1c:7c:d8:3d:cc:5e:8e:80:23:a8:c9:72:cf:
d7:18:67:79:78:3a:8e:f9:d3:d6:6b:03:63:2c:ba:73:4d:ea:
04:cf:cc:61:7f:9c:22:cf:32:73:34:ae:fc:fa:f0:85:cb:ab:
13:a3:8c:04:5c:73:cf:0f:77:b3:78:40:da:85:31:fc:c8:0c:
5d:d6:a3:99:59:ff:05:90:bd:80:7c:5d:91:81:61:fc:ee:64:
13:fd:d9:ae:93:6a:de:cd:d2:f6:83:ba:25:1b:5b:f1:75:f9:
ba:2d:48:b5:c1:30:6d:7b:f2:23:d1:2f:94:31:e2:5f:41:bb:
89:50:14:79:ff:b2:93:a3:b9:67:96:b6:b9:dd:d8:c6:aa:f3:
d4:0c:43:2e:eb:81:24:61:36:e5:d2:c2:74:df:ae:cb:48:45:
a9:f1:47:35:17:ff:f3:f9:2e:75:48:24:7b:fd:0d:aa:68:29:
ea:34:13:4a:9d:a1:9b:5d:b3:ee:94:dc:68:5d:6b:b7:e1:72:
54:ff:c8:da:8e:da:07:c1:27:5d:a7:92:53:17:52:1d:8d:b3:
19:66:fb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:21:58 2026 by rpki-client