
$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
File: PQqIwMyj7oZ3zRffPuht5x38ESk.mft (raw, json)
Hash identifier: vr3qpj2CIi+Mc55u8DV5KjoxkRv5M8pmaTH1MpKdWhU=
Subject key identifier: B3:4A:11:CA:52:92:8E:E3:6F:8A:DA:61:71:CC:D3:44:0F:50:AE:E2
Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29
Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129
Certificate serial: 042A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
Manifest number: 0423
Signing time: Wed 29 Jul 2026 01:03:53 +0000
Manifest this update: Wed 29 Jul 2026 01:03:53 +0000
Manifest next update: Wed 05 Aug 2026 01:03:53 +0000
Files and hashes: 1: PQqIwMyj7oZ3zRffPuht5x38ESk.crl (hash: DC9EueGKVihXbiEVKBcI/5yXbyMmOBjxeUU7BeYIP+A=)
2: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (hash: lCNfDmCO6Vy6uu5QW43aJqJrNK0XuY+KKPY1oeY2SkM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl
rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1066 (0x42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129
Validity
Not Before: Jul 29 01:03:53 2026 GMT
Not After : Aug 5 01:03:53 2026 GMT
Subject: CN=6a695179-2a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d1:45:ff:d3:d0:61:bf:18:89:2c:20:54:10:
c3:8d:71:33:8c:85:8f:f6:a2:c0:30:a1:f2:e4:a6:
4a:bc:ce:88:90:8b:62:01:8e:e2:32:cd:65:b7:36:
95:20:1d:c5:3b:c1:47:40:88:ae:ba:89:12:ea:00:
c3:86:68:62:84:2a:20:8b:73:9d:26:a1:49:1e:e0:
55:d2:82:27:c2:fa:a1:74:f9:b4:00:cc:38:8a:1e:
8f:e2:bc:56:a8:13:5c:ce:8f:37:1f:96:5c:02:41:
08:85:2a:34:39:9a:99:1c:3e:8c:05:45:f8:f7:0c:
24:89:55:51:b8:8d:74:2e:0e:a8:51:d3:51:04:d6:
f4:dd:64:b9:2e:7f:10:89:25:00:a6:07:c2:80:48:
2c:b1:55:55:c3:79:b4:50:82:82:4f:21:c4:26:6e:
3a:0e:36:99:58:19:3a:67:03:18:c3:b7:6f:50:43:
cb:72:1a:d7:a0:bf:e3:35:f6:3b:99:27:51:91:f5:
9c:be:21:6c:0c:5b:04:d8:a5:82:80:c6:d8:4f:7e:
d4:ab:bf:36:64:08:a9:29:4d:68:e2:2f:32:62:ab:
0c:e7:e8:f7:24:44:76:8a:7a:8a:42:60:56:dd:4d:
f8:22:f2:65:37:ac:59:80:ca:78:05:cc:1d:3d:83:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4A:11:CA:52:92:8E:E3:6F:8A:DA:61:71:CC:D3:44:0F:50:AE:E2
X509v3 Authority Key Identifier:
keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:92:ec:1d:37:ae:c2:a1:25:9b:d2:30:c8:da:96:c8:7d:be:
c7:8a:96:13:e4:53:1e:ce:ce:85:55:ea:cf:60:b3:20:aa:9d:
66:2c:f1:0b:42:cf:18:7f:b2:5a:04:4b:cf:4c:39:dd:05:ee:
4d:94:e0:06:ff:32:cc:b6:7c:57:c6:89:8f:65:d8:73:64:f7:
1c:51:98:56:10:24:75:bc:66:17:14:b3:36:50:de:b9:ec:c4:
1b:1f:c2:87:c6:17:ce:cb:4f:24:60:61:db:8a:83:0e:08:1e:
e1:f7:06:b6:3b:fe:de:9f:c9:9e:10:6f:04:b8:c0:3c:66:ee:
ab:17:b4:39:22:f3:5e:19:4f:d9:77:b2:7e:41:a4:b1:b1:92:
59:21:f3:75:2c:7c:6e:f0:53:93:59:4e:18:b6:86:6a:03:f1:
3c:1f:25:04:f8:1a:08:dc:28:1b:a6:8e:2d:d8:e8:f2:cc:66:
41:a6:c1:93:71:00:1a:ee:ab:f9:f9:a7:52:be:64:42:2f:93:
fd:92:68:f1:89:22:58:34:10:87:eb:b3:10:00:fe:5d:56:da:
4a:1f:e0:bd:23:5e:08:f3:12:b9:c4:1e:1f:0f:ed:e8:e3:76:
f4:44:38:46:bf:60:76:38:b9:7f:16:3c:12:8b:6c:a4:24:e8:
1c:07:d9:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA3REUxMTAvBgNVBAUTKDNEMEE4OEMwQ0NBM0VFODY3N0NEMTdERjNFRTg2REU3
MURGQzExMjkwHhcNMjYwNzI5MDEwMzUzWhcNMjYwODA1MDEwMzUzWjAYMRYwFAYD
VQQDEw02YTY5NTE3OS0yYTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6tFF/9PQYb8YiSwgVBDDjXEzjIWP9qLAMKHy5KZKvM6IkItiAY7iMs1ltzaV
IB3FO8FHQIiuuokS6gDDhmhihCogi3OdJqFJHuBV0oInwvqhdPm0AMw4ih6P4rxW
qBNczo83H5ZcAkEIhSo0OZqZHD6MBUX49wwkiVVRuI10Lg6oUdNRBNb03WS5Ln8Q
iSUApgfCgEgssVVVw3m0UIKCTyHEJm46DjaZWBk6ZwMYw7dvUEPLchrXoL/jNfY7
mSdRkfWcviFsDFsE2KWCgMbYT37Uq782ZAipKU1o4i8yYqsM5+j3JER2inqKQmBW
3U34IvJlN6xZgMp4BcwdPYOozQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNKEcpS
ko7jb4raYXHM00QPUK7iMB8GA1UdIwQYMBaAFD0KiMDMo+6Gd80X3z7obecd/BEp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDdERS9DNzY4MTRDNkJC
NUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdvWjN6UmZmUHVodDV4MzhF
U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BRcUl3TXlqN29aM3pSZmZQdWh0NXgzOEVTay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDdERS9DNzY4MTRDNkJCNUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdv
WjN6UmZmUHVodDV4MzhFU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWJLsHTeuwqElm9IwyNqWyH2+x4qWE+RTHs7OhVXqz2CzIKqdZizxC0LPGH+y
WgRLz0w53QXuTZTgBv8yzLZ8V8aJj2XYc2T3HFGYVhAkdbxmFxSzNlDeuezEGx/C
h8YXzstPJGBh24qDDgge4fcGtjv+3p/JnhBvBLjAPGbuqxe0OSLzXhlP2XeyfkGk
sbGSWSHzdSx8bvBTk1lOGLaGagPxPB8lBPgaCNwoG6aOLdjo8sxmQabBk3EAGu6r
+fmnUr5kQi+T/ZJo8YkiWDQQh+uzEAD+XVbaSh/gvSNeCPMSucQeHw/t6ON29EQ4
Rr9gdji5fxY8EotspCToHAfZGA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:24:28 2026 by rpki-client