
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
File: pjM-hRYZl7cwtGh_BelmGT9roa8.mft (raw, json)
Hash identifier: 24ToEfRBpnt4b9rKVozGDoQ9304CCku+VXTY8uXe2Xo=
Subject key identifier: 39:58:B4:BD:A4:EA:F5:DF:3D:B1:5E:A6:4C:C4:D6:28:D8:AC:F9:35
Authority key identifier: A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
Certificate issuer: /CN=A9174CBE/serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
Manifest number: 10
Signing time: Wed 15 Apr 2026 08:38:31 +0000
Manifest this update: Wed 15 Apr 2026 08:38:30 +0000
Manifest next update: Wed 22 Apr 2026 08:38:30 +0000
Files and hashes: 1: pjM-hRYZl7cwtGh_BelmGT9roa8.crl (hash: TMctQP74/65kA1n9cCBXTGSD9E/2Fbh92JTkA0yW7DQ=)
2: 37DA9614245E11F1A1D0CE16C5833773.roa (hash: lMRR/zqNW58wSBmGf5f2NfJ6o9i7EWhZV///FsnpLQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:38:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174CBE, serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Validity
Not Before: Apr 15 08:38:30 2026 GMT
Not After : Apr 22 08:38:30 2026 GMT
Subject: CN=69df4e87-98b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:58:ee:7b:44:32:00:d9:cb:73:53:a4:93:
fd:c2:cc:40:fe:18:cf:a9:91:02:02:d2:bf:1f:5a:
70:5a:bc:6a:7f:06:0b:e1:ef:da:b4:65:b1:4f:4b:
2e:db:98:cd:7c:6d:4a:6e:60:e5:70:01:94:bc:f1:
77:3b:80:81:5e:e2:d9:88:fc:a2:65:03:04:e3:46:
53:c5:e6:7f:5c:c9:71:72:98:a9:aa:79:a7:f7:fd:
51:12:bf:3c:50:5e:51:3f:ad:f7:0a:53:52:cf:68:
4c:eb:ae:2d:62:bc:ba:ae:5a:68:4d:1d:d7:3d:cc:
c2:75:16:84:53:42:b5:9d:7a:36:f7:1e:16:05:f7:
c0:f2:90:ea:c1:71:d8:25:f7:d8:0d:b9:f6:71:7c:
ba:10:ae:b2:9b:3a:33:29:4c:9c:20:e8:44:ad:47:
6c:1a:38:6b:e1:6b:b8:e5:1f:79:0e:2e:85:ec:d1:
46:ac:ca:52:e7:2f:d5:1a:15:bf:12:28:d3:f0:04:
c8:11:36:7b:ee:8e:ad:30:14:96:10:97:2a:e6:e5:
52:89:0d:a5:51:b5:e4:cd:b3:10:0b:0f:57:1c:6d:
3e:a9:bf:cd:98:bf:77:37:26:70:66:f4:b1:b4:67:
84:b4:58:26:9a:92:3a:f3:ee:4b:8c:02:e3:49:8f:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:58:B4:BD:A4:EA:F5:DF:3D:B1:5E:A6:4C:C4:D6:28:D8:AC:F9:35
X509v3 Authority Key Identifier:
keyid:A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:bb:37:7b:c3:3e:ea:bd:00:9e:03:8b:a0:d1:5c:22:54:7c:
88:10:dd:41:15:c6:6a:81:ac:ee:91:ff:93:77:6e:ce:47:2f:
94:cf:e9:a6:8b:b2:bd:39:a2:21:1d:48:89:6d:31:51:82:30:
ca:57:a2:3b:06:47:6f:6f:d2:2a:7b:1a:42:a5:f4:df:2d:54:
cd:28:e1:f3:2d:9e:63:c1:c7:42:18:75:e2:af:e4:8c:ba:03:
cf:dd:4e:09:81:e7:f5:79:76:c4:8c:9e:a8:3a:21:54:85:96:
90:bd:b7:d6:5a:31:5f:00:0f:d6:e9:00:6c:a4:88:63:aa:c9:
ca:5b:06:fd:53:93:45:be:16:93:00:48:1b:d9:01:7e:b3:ff:
6b:0e:be:df:c4:b9:53:29:f9:2d:2f:49:21:12:3e:1a:01:a3:
11:c3:10:e6:76:df:7e:56:b3:0d:e3:fd:b1:34:d7:ea:9d:aa:
ae:9b:49:30:c9:35:0d:da:86:16:7a:54:b2:33:ec:a4:45:e9:
fe:63:3a:c3:13:75:73:d3:04:4a:ea:57:df:b1:79:e5:99:24:
71:46:42:9d:49:e9:99:35:e5:1c:2e:cf:5f:08:99:53:04:7f:
74:ec:88:09:2a:29:df:b1:74:75:3a:da:99:f7:49:73:74:94:
46:8d:c2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:11 2026 by rpki-client