
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
File: pjM-hRYZl7cwtGh_BelmGT9roa8.mft (raw, json)
Hash identifier: GnY7L1PHLUN9Pxz4DRMEHe08IAOM0NYWZOo6ePvjfg8=
Subject key identifier: E7:F7:52:24:4A:42:96:BC:76:30:B0:E9:F0:7C:82:9E:1A:5E:B4:07
Authority key identifier: A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
Certificate issuer: /CN=A9174CBE/serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
Manifest number: 60
Signing time: Mon 21 Sep 2026 08:05:28 +0000
Manifest this update: Mon 21 Sep 2026 08:05:27 +0000
Manifest next update: Mon 28 Sep 2026 08:05:27 +0000
Files and hashes: 1: pjM-hRYZl7cwtGh_BelmGT9roa8.crl (hash: 0/znEaLtUz6W1koTHDAs9l31spyLBaLOxHPBy8PmReI=)
2: 37DA9614245E11F1A1D0CE16C5833773.roa (hash: lMRR/zqNW58wSBmGf5f2NfJ6o9i7EWhZV///FsnpLQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174CBE, serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Validity
Not Before: Sep 21 08:05:27 2026 GMT
Not After : Sep 28 08:05:27 2026 GMT
Subject: CN=6ab0e548-39a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:05:9c:31:10:d6:5b:7f:af:15:07:5d:0c:6a:
48:1a:80:b9:95:46:0d:1e:dc:36:bc:87:fc:36:93:
06:e7:4b:c3:f1:f1:92:4c:3e:23:d1:da:ef:35:c4:
a5:b9:85:8d:f7:d4:88:3e:73:2f:e2:05:9e:22:b3:
fa:88:b6:36:f6:d7:de:d7:bd:70:06:1e:fb:03:5d:
57:11:5a:65:c6:85:a2:74:6f:f3:e7:89:46:7e:40:
6d:79:bb:28:c6:ec:57:3d:a4:42:11:41:58:cd:39:
34:bf:4d:57:be:b4:66:3f:53:3e:41:cc:b0:65:8b:
16:47:5e:a4:3c:b3:ae:fa:d5:3b:6a:07:a5:14:3e:
99:34:b9:df:7e:54:35:5b:96:f6:d7:56:d8:48:fd:
46:01:d4:7a:0a:f3:bd:ab:81:e9:55:b9:12:f1:fa:
04:53:aa:91:14:d5:f6:61:f8:a9:81:f6:f7:ea:ff:
70:5c:21:d7:21:b3:64:4f:f9:dd:20:1b:99:8f:18:
74:d8:9c:c7:f0:e9:a8:05:be:72:b2:1e:3a:d3:1c:
d5:57:42:46:d0:a6:01:4f:e5:b6:41:e3:e8:03:e1:
c9:30:8c:14:90:30:64:a9:36:e2:83:96:f5:b7:f3:
74:66:4f:52:29:93:25:ab:97:23:a5:02:07:40:54:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F7:52:24:4A:42:96:BC:76:30:B0:E9:F0:7C:82:9E:1A:5E:B4:07
X509v3 Authority Key Identifier:
keyid:A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:e6:91:3d:43:6e:76:f9:73:55:21:60:2c:2f:42:9e:df:79:
8a:9e:18:65:15:08:74:64:bf:c6:94:b9:cb:f3:c2:ad:d2:1b:
49:c3:10:b9:b8:84:48:a4:5e:f2:96:9d:14:4e:e7:7c:7d:75:
de:d1:18:5d:51:7f:af:16:9f:61:50:64:5d:5e:60:c9:ea:65:
c1:7d:a6:49:fd:48:3b:82:7c:10:f8:e9:d1:ef:ed:05:10:d2:
f2:95:c7:5c:3a:cf:1e:b9:02:d8:84:5a:31:a3:ec:82:9f:65:
e5:0e:79:16:89:cf:0a:fa:c7:08:e8:25:ca:cd:98:3c:82:3a:
b0:22:ea:62:07:ca:10:f8:6b:0f:98:f7:60:17:99:cf:5d:31:
87:0b:9d:be:44:35:9e:1d:a9:30:49:43:c3:ad:d6:e1:73:3b:
06:36:4b:5e:91:08:07:30:fc:67:bf:0d:aa:99:d0:45:40:78:
91:59:dd:2a:c8:47:90:c9:f7:9a:0a:1e:46:06:bb:bd:22:ab:
36:14:10:2c:88:e8:51:56:41:10:b5:4c:44:1b:d8:3c:4d:89:
be:dd:ea:d5:a3:cc:3b:c6:21:95:70:0b:4e:64:b6:b3:d3:8b:
10:27:5a:de:0b:b3:51:1b:c5:54:9e:d6:f8:97:36:20:d5:64:
1e:fc:31:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:13:29 2026 by rpki-client