
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
File: PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json)
Hash identifier: uC1Q2/XLiHAtab7/bAT04bNTQbxMvpXtuP5nU0Ui1OU=
Subject key identifier: C9:F1:BD:09:BC:42:D8:3C:FF:FF:67:79:5E:E6:82:E0:42:25:11:73
Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Certificate issuer: /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
Manifest number: 014C
Signing time: Fri 17 Apr 2026 04:55:42 +0000
Manifest this update: Fri 17 Apr 2026 04:55:42 +0000
Manifest next update: Fri 24 Apr 2026 04:55:42 +0000
Files and hashes: 1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: E9TECuX7apmL/l5P+CqpGojGwbmYVnkzwXzJQK7qjfs=)
2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: OgCWnzqkwWEniebxSjCaqKQFGPlBmgsXfq8XVeayY5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Validity
Not Before: Apr 17 04:55:42 2026 GMT
Not After : Apr 24 04:55:42 2026 GMT
Subject: CN=69e1bd4e-91c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:7f:b7:e0:6c:6e:02:a2:02:6b:04:dc:03:
40:9f:cb:a6:9a:a9:ca:85:89:a8:9b:70:9e:32:67:
4f:62:70:3d:70:8b:6f:2d:63:64:f4:fb:50:e8:34:
5c:c0:7a:66:81:2e:3e:52:eb:6e:c8:26:f4:45:af:
38:8c:f0:ab:76:b4:85:98:f5:11:bc:11:76:8f:17:
7c:e4:f5:9a:dd:2b:4f:07:72:3e:9d:13:a9:ba:ca:
95:ac:a5:ac:ee:fd:92:d4:c3:92:54:c1:e2:88:51:
ba:f1:12:09:e8:f3:e9:5e:77:2b:23:6c:92:36:c0:
5f:39:b5:71:d5:fb:bd:b0:73:68:e5:71:ed:c0:89:
55:db:f1:c1:c1:23:3c:b4:f1:51:62:65:e6:a7:45:
52:68:8d:40:65:0e:bf:e0:7d:5f:63:72:e2:e4:e6:
63:b0:64:07:24:ae:d3:89:c7:84:27:29:ab:8f:90:
35:fb:f5:54:a0:fb:be:0e:d1:1d:7d:db:72:c4:f0:
ec:83:42:65:17:ee:69:67:93:c0:ec:28:d1:13:6f:
05:5f:2c:09:e1:a6:c3:d0:5d:72:e6:11:7d:78:56:
dd:e8:ce:f3:d4:8a:bc:68:db:24:fe:91:19:93:69:
be:53:cc:85:d5:66:b6:9d:b4:da:a1:51:af:c5:8e:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F1:BD:09:BC:42:D8:3C:FF:FF:67:79:5E:E6:82:E0:42:25:11:73
X509v3 Authority Key Identifier:
keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:5f:d6:55:ed:30:ab:27:48:cf:e5:53:dd:7a:e0:bc:1f:7f:
01:cc:ba:c0:53:53:15:65:02:9e:e5:89:87:b5:05:03:65:7d:
eb:b9:8a:cd:0d:86:3f:88:e6:06:38:73:c0:d4:67:c5:6e:af:
9b:a1:c1:22:d1:ef:a2:13:eb:40:ab:c5:48:88:60:5a:1e:7c:
42:de:9a:b6:68:e8:92:08:2d:6f:86:d0:39:e5:fe:54:21:79:
2a:6e:a0:3f:78:1b:8c:fa:4b:01:97:e8:32:30:d1:d0:1e:5c:
2e:55:0c:2d:5f:f0:54:ec:e0:71:2b:a7:ff:d3:46:90:9b:e6:
4c:b2:e0:47:ad:68:68:1f:71:d5:a9:df:ce:40:0d:4c:4e:8c:
37:b0:d5:60:ed:78:31:3c:3d:aa:dc:f3:a9:eb:05:de:2a:88:
e7:1f:ac:d8:8e:0a:34:fc:78:fa:40:27:20:cc:d1:53:43:e4:
52:f2:0b:f4:bf:46:28:db:56:e5:cc:6b:52:88:dd:da:6a:c5:
18:cc:2f:2e:d6:70:ae:a9:7b:f7:55:01:1f:bd:8d:15:57:31:
b1:13:c6:1d:c7:11:9b:70:aa:85:a1:7d:81:06:6c:cc:2c:7e:
18:09:0b:a8:3a:7c:ef:28:ac:50:07:2b:19:62:6b:83:e0:a6:
12:7c:08:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:53 2026 by rpki-client