
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
File: pjM-hRYZl7cwtGh_BelmGT9roa8.mft (raw, json)
Hash identifier: CTFkMhiCa0EzNaN+iUFScxPQRQAhjuIF3O7mmNT5Gzc=
Subject key identifier: B9:37:ED:C5:2A:2B:78:3C:74:BE:F3:8E:30:5F:88:D9:31:FF:E4:E6
Authority key identifier: A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
Certificate issuer: /CN=A9174CBE/serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
Manifest number: 2C
Signing time: Thu 11 Jun 2026 11:03:23 +0000
Manifest this update: Thu 11 Jun 2026 11:03:22 +0000
Manifest next update: Thu 18 Jun 2026 11:03:22 +0000
Files and hashes: 1: pjM-hRYZl7cwtGh_BelmGT9roa8.crl (hash: +QbVg+Pvg5f4NslsqvH3KY85dZUGAL7eJJchgOOFVYk=)
2: 37DA9614245E11F1A1D0CE16C5833773.roa (hash: lMRR/zqNW58wSBmGf5f2NfJ6o9i7EWhZV///FsnpLQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 11:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174CBE, serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Validity
Not Before: Jun 11 11:03:22 2026 GMT
Not After : Jun 18 11:03:22 2026 GMT
Subject: CN=6a2a95fb-648e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:b8:d6:d9:03:70:d3:5b:b5:76:71:e8:d2:
e6:83:9b:42:3b:6f:ec:66:14:6c:0f:57:17:1d:9e:
b4:47:0d:34:c2:de:2c:de:11:12:8d:98:fa:14:ce:
41:3d:64:bf:ea:70:4f:b9:d7:b4:01:76:29:a2:03:
35:9f:42:f7:53:f9:09:1a:83:91:3d:51:73:bc:d4:
cc:ff:81:87:b8:9b:e6:e1:67:60:ed:af:31:51:9b:
aa:31:c0:d7:84:39:a0:4f:f8:fa:c1:b4:45:f9:8f:
b7:bb:fd:ac:26:c9:af:2c:ff:80:6c:78:81:fd:dc:
bc:fa:f5:a1:e4:bf:ac:af:fc:91:54:fd:6d:38:cd:
71:6f:dd:ad:6c:6c:e3:90:53:9c:58:10:07:01:a1:
75:8e:32:61:c8:08:d0:10:1c:c8:69:b8:d7:84:58:
93:6c:9e:a9:50:e3:94:90:aa:c2:68:b0:f0:d6:9c:
ec:c3:b4:25:76:6b:20:ad:50:0a:24:16:bb:37:02:
aa:f5:7e:be:4e:b6:cc:be:53:8a:52:b4:32:2e:03:
4b:02:e5:94:fc:e7:d1:36:03:a0:be:3a:75:e3:c5:
6e:7d:0b:13:70:35:f0:44:02:7d:b2:f3:56:32:3d:
c2:f2:0d:aa:ea:fd:08:eb:19:16:57:c2:4a:97:5d:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:37:ED:C5:2A:2B:78:3C:74:BE:F3:8E:30:5F:88:D9:31:FF:E4:E6
X509v3 Authority Key Identifier:
keyid:A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:54:c8:24:00:f5:bf:5a:d6:03:d3:e5:35:56:6a:53:c0:34:
30:8f:86:ed:18:c9:70:2a:65:c5:1c:2c:45:00:79:42:42:17:
58:c7:d3:7d:7a:56:78:aa:27:76:3f:80:a1:67:e2:36:4f:86:
77:c7:13:27:e2:86:dd:dc:7d:81:79:ca:6c:8e:83:8e:5b:df:
9a:40:71:7d:dd:a6:e9:4b:1e:50:db:af:55:02:56:46:ba:2e:
13:2f:54:c2:77:36:65:37:39:75:6a:aa:ca:20:cc:cd:5c:8d:
2d:85:cb:94:8f:9b:60:76:6a:3d:d1:12:3b:b2:0f:26:e0:b8:
ee:bc:38:c7:22:49:d8:ca:da:95:72:11:b1:e4:e4:fa:a1:a8:
d7:38:b3:10:0c:40:db:d0:e3:2e:95:57:f4:a5:45:e7:9c:23:
30:9f:c9:9e:f3:a9:20:c3:1b:90:58:54:8a:b2:ce:3f:98:eb:
21:3d:84:36:66:50:3d:e3:7c:ea:b6:d1:c7:cf:04:17:b2:8e:
18:70:93:07:c9:8a:53:9b:ca:68:0b:da:d3:c0:2d:1c:cc:5c:
0d:ef:c5:92:93:c5:35:cc:28:13:ee:b7:b9:05:24:3b:b4:20:
3e:35:32:29:6c:de:f8:b9:e1:41:69:76:77:1b:f6:31:c4:0f:
c3:01:d1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:32 2026 by rpki-client