
$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
File: PQqIwMyj7oZ3zRffPuht5x38ESk.mft (raw, json)
Hash identifier: anvsajXZnrkr7MuLVCB98ChLb+bEXx/ed6iq1Q/tXNk=
Subject key identifier: 01:27:C3:13:DF:2A:93:B4:07:FE:CB:EB:96:64:4F:A6:85:7D:F5:29
Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29
Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129
Certificate serial: 0413
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
Manifest number: 040C
Signing time: Sat 13 Jun 2026 00:26:10 +0000
Manifest this update: Sat 13 Jun 2026 00:26:09 +0000
Manifest next update: Sat 20 Jun 2026 00:26:09 +0000
Files and hashes: 1: PQqIwMyj7oZ3zRffPuht5x38ESk.crl (hash: bkTr4+rWz8yW2r62QzaAYqaT/BmG/PwsNMuygNvLldM=)
2: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (hash: lCNfDmCO6Vy6uu5QW43aJqJrNK0XuY+KKPY1oeY2SkM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl
rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1043 (0x413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129
Validity
Not Before: Jun 13 00:26:09 2026 GMT
Not After : Jun 20 00:26:09 2026 GMT
Subject: CN=6a2ca3a2-2aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:2a:6e:fc:f1:41:19:2c:36:00:40:57:35:
ed:83:14:36:2c:db:47:96:14:04:33:19:1b:bc:ac:
80:09:b1:d2:21:1e:bd:d9:77:ce:18:80:9f:a9:ef:
15:fe:01:2f:09:87:0f:8d:54:84:83:94:c8:ed:80:
e4:5b:36:74:3f:f0:71:d8:b1:09:e9:ee:ce:bd:99:
bd:5a:7f:37:9f:35:98:b2:23:b5:d4:28:6e:07:f8:
cf:5d:b2:a8:56:9c:52:d5:00:76:da:d3:59:a9:89:
74:83:f4:e8:a2:9c:43:8c:d0:96:b8:a8:57:9e:58:
f7:7a:42:85:a0:83:d2:b9:de:e2:49:81:e7:20:d4:
33:3a:9b:03:2b:a3:45:e4:11:94:a3:05:05:e2:05:
0e:92:9b:f7:f7:07:45:b7:79:80:ce:8e:26:ae:7b:
38:da:0e:48:5f:45:1e:50:2a:f4:16:da:39:7e:dd:
8b:49:45:da:d9:f5:7c:2e:fe:a7:e1:44:e3:1e:0f:
25:af:f5:fc:54:9a:73:c5:06:bd:5c:19:57:39:5f:
ca:3b:2c:c7:c8:c1:04:9d:01:aa:4f:7b:4d:9d:bb:
4b:4a:92:53:81:98:c6:5a:36:16:df:f2:2d:7a:19:
c2:b3:3e:f8:e7:ed:b8:ea:ab:76:ee:f5:b8:4a:41:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:27:C3:13:DF:2A:93:B4:07:FE:CB:EB:96:64:4F:A6:85:7D:F5:29
X509v3 Authority Key Identifier:
keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:01:91:3e:62:a6:d7:6b:40:d3:b5:d1:f9:1f:7a:bc:01:c0:
83:94:d7:44:01:b1:c3:1e:b7:70:8f:28:15:12:4c:70:d6:0e:
83:e4:23:4d:2f:1a:c1:3f:ea:44:db:66:44:82:08:b7:4a:f6:
1f:fd:38:eb:be:e6:c6:ba:d6:65:81:2a:a5:4c:3f:c4:4f:3d:
bd:68:e7:de:a9:20:57:24:dd:63:bb:d7:de:75:15:2e:07:e5:
b2:f1:90:a9:1c:b5:85:44:cd:71:75:d5:24:ce:3d:22:93:79:
ab:d0:c0:30:61:1d:d0:47:e0:84:ac:b1:70:f4:c8:66:2e:c4:
83:1f:a6:0d:4e:c7:36:1c:ec:1c:90:35:56:55:56:70:23:a0:
e1:87:81:87:13:0b:ec:42:ce:a5:9e:c8:5f:d4:bd:d5:b1:3d:
4b:b6:f7:e2:22:4e:2d:97:a4:77:42:bd:94:1e:d1:c6:2b:b7:
dd:6a:6f:28:c3:ce:6a:35:8e:ae:85:e6:55:ed:68:fe:72:7f:
cc:0f:2e:da:f9:f2:f6:e5:60:6d:bf:3b:7e:b4:fa:87:83:ae:
b0:f7:87:5b:1a:6d:e8:ed:e6:4d:38:75:0e:86:a9:c4:e0:fd:
06:b1:70:23:80:06:cb:66:1f:4d:13:c6:cd:72:3e:8d:ab:70:
80:aa:ec:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA3REUxMTAvBgNVBAUTKDNEMEE4OEMwQ0NBM0VFODY3N0NEMTdERjNFRTg2REU3
MURGQzExMjkwHhcNMjYwNjEzMDAyNjA5WhcNMjYwNjIwMDAyNjA5WjAYMRYwFAYD
VQQDEw02YTJjYTNhMi0yYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl7wqbvzxQRksNgBAVzXtgxQ2LNtHlhQEMxkbvKyACbHSIR692XfOGICfqe8V
/gEvCYcPjVSEg5TI7YDkWzZ0P/Bx2LEJ6e7OvZm9Wn83nzWYsiO11ChuB/jPXbKo
VpxS1QB22tNZqYl0g/ToopxDjNCWuKhXnlj3ekKFoIPSud7iSYHnINQzOpsDK6NF
5BGUowUF4gUOkpv39wdFt3mAzo4mrns42g5IX0UeUCr0Fto5ft2LSUXa2fV8Lv6n
4UTjHg8lr/X8VJpzxQa9XBlXOV/KOyzHyMEEnQGqT3tNnbtLSpJTgZjGWjYW3/It
ehnCsz745+246qt27vW4SkGJXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEnwxPf
KpO0B/7L65ZkT6aFffUpMB8GA1UdIwQYMBaAFD0KiMDMo+6Gd80X3z7obecd/BEp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDdERS9DNzY4MTRDNkJC
NUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdvWjN6UmZmUHVodDV4MzhF
U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BRcUl3TXlqN29aM3pSZmZQdWh0NXgzOEVTay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDdERS9DNzY4MTRDNkJCNUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdv
WjN6UmZmUHVodDV4MzhFU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMQGRPmKm12tA07XR+R96vAHAg5TXRAGxwx63cI8oFRJMcNYOg+QjTS8awT/q
RNtmRIIIt0r2H/04677mxrrWZYEqpUw/xE89vWjn3qkgVyTdY7vX3nUVLgflsvGQ
qRy1hUTNcXXVJM49IpN5q9DAMGEd0EfghKyxcPTIZi7Egx+mDU7HNhzsHJA1VlVW
cCOg4YeBhxML7ELOpZ7IX9S91bE9S7b34iJOLZekd0K9lB7Rxiu33WpvKMPOajWO
roXmVe1o/nJ/zA8u2vny9uVgbb87frT6h4OusPeHWxpt6O3mTTh1DoapxOD9BrFw
I4AGy2YfTRPGzXI+jatwgKrsTw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:15:19 2026 by rpki-client