
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
File: PcXSlD7UrPqSa3dnapi-yLPJea4.mft (raw, json)
Hash identifier: DEplrFTiHGztqSiLVFzUMOsTaHbzJBMpCXZH+BROBfg=
Subject key identifier: E0:E6:64:41:20:5B:1A:12:5F:C6:1D:7A:C1:7C:FA:FA:F9:2D:BB:47
Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
Certificate issuer: /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Certificate serial: 0850
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
Manifest number: 0844
Signing time: Sun 26 Jul 2026 21:39:34 +0000
Manifest this update: Sun 26 Jul 2026 21:39:33 +0000
Manifest next update: Sun 02 Aug 2026 21:39:33 +0000
Files and hashes: 1: PcXSlD7UrPqSa3dnapi-yLPJea4.crl (hash: Gk9CCq9wIgh059rpz9qvsGpYLwRcwV9txtu1q/ppeR8=)
2: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (hash: q90sQnxzbRSHPH85xcHWMaHvdjo+QzvVXmS+pu++tZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128 (0x850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AF8E, serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Validity
Not Before: Jul 26 21:39:33 2026 GMT
Not After : Aug 2 21:39:33 2026 GMT
Subject: CN=6a667e96-2b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:7c:53:0d:69:4b:e1:e8:f7:0a:01:23:7a:
64:44:22:bd:f2:a0:a3:04:bc:4e:e4:21:c4:43:0c:
e1:da:5f:64:49:3a:40:9c:4b:7c:05:b7:bb:34:b6:
f0:90:07:36:f4:89:bb:2a:dc:9e:08:b3:93:1d:9a:
ac:e4:2b:9e:6b:c8:1d:be:26:ac:d7:1d:ff:6f:db:
b8:cc:36:8f:8a:14:f3:fb:f4:1d:d9:07:0c:ce:ea:
d7:77:71:2d:72:74:ed:2b:65:77:14:3a:5b:93:b9:
65:f4:10:12:ba:0b:e3:5e:0d:3d:c2:53:6b:d0:42:
40:28:29:dd:77:f6:6e:3d:9d:18:99:b9:20:77:3b:
34:6c:5d:16:ba:9c:9a:a5:ad:b1:2b:d8:63:b7:89:
4d:fa:0d:2f:d2:ee:59:b2:5e:32:73:c5:01:b0:47:
51:61:52:c1:fc:cd:a6:68:b9:8b:99:1e:d9:38:1c:
c4:6d:d2:1b:c5:6f:d7:23:34:13:4c:3b:6d:a9:6c:
b5:12:6a:b5:52:12:c2:67:25:2c:3d:fc:e0:3f:51:
6f:51:4c:19:36:76:a5:cb:85:fd:b5:f3:e2:5c:ca:
24:de:89:68:9d:c5:76:b3:1b:f4:d9:98:7b:4d:90:
b0:08:78:ea:05:44:aa:6e:f7:f5:8b:23:8c:ab:e9:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:64:41:20:5B:1A:12:5F:C6:1D:7A:C1:7C:FA:FA:F9:2D:BB:47
X509v3 Authority Key Identifier:
keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0e:9c:9c:49:84:05:7b:d5:2c:e2:ee:97:98:2b:16:ca:2d:
eb:9c:1b:1b:72:86:8f:d2:4e:7c:71:06:06:de:2f:18:29:19:
eb:57:02:92:87:a0:42:04:3b:9b:a0:71:31:ff:b0:33:4d:32:
f7:6f:7e:0f:80:22:21:a0:b6:41:18:f9:10:b9:ad:70:44:b5:
bd:79:e3:b7:1f:33:9a:da:d5:d2:44:39:a4:d2:c4:eb:9d:44:
77:22:0c:ae:d5:cb:00:39:fc:84:6b:ec:52:15:a2:8f:64:18:
34:74:b9:9e:0a:b7:0b:60:3b:92:b9:cf:ef:6f:83:fd:84:f1:
0b:84:05:cd:59:fb:54:64:bd:52:f3:77:10:29:19:66:08:e9:
64:7e:f7:64:76:b6:f1:8c:cc:45:06:69:f9:9c:76:5d:cc:0f:
1a:b0:d8:e2:15:58:00:c1:b2:40:08:fc:b6:2d:f8:94:c7:2b:
bc:d7:a3:52:c5:11:82:5b:5d:5e:e8:84:e9:4b:f4:a7:e5:17:
88:1f:ec:90:53:84:f0:c9:4f:e3:85:bf:4b:13:9e:6d:45:ae:
5e:d6:55:ba:b7:8e:aa:c6:49:50:88:f6:ba:7e:1b:6f:9b:40:
cc:be:24:de:14:73:6d:e8:dd:fc:5b:b1:16:8d:ed:8c:6a:1c:
b5:78:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:41:12 2026 by rpki-client