
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json)
Hash identifier: b1OBtlwIqxje9NWr6ktztLWu5vUA2UxJnNvRsImwgJs=
Subject key identifier: 55:8D:FF:56:0F:47:45:15:EE:43:7B:AC:21:58:55:80:23:83:D6:70
Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Certificate serial: 0390
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
Manifest number: 0386
Signing time: Tue 28 Jul 2026 10:53:14 +0000
Manifest this update: Tue 28 Jul 2026 10:53:14 +0000
Manifest next update: Tue 04 Aug 2026 10:53:14 +0000
Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: zAaGegDSojrD542j16fqRnC5ANoRbS9F42fZXy4wIQQ=)
2: 85B9F9CC8A7211F193E6E41D4211F970.roa (hash: K8/sp/CfflUVzDThJpOZ6EABm99x23tLUM/3USoDOpY=)
3: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: oufaNPGZbxnCNaqcpVINAiOM1TZFQ8M5GFYVVdKWLwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 10:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Validity
Not Before: Jul 28 10:53:14 2026 GMT
Not After : Aug 4 10:53:14 2026 GMT
Subject: CN=6a688a1a-402c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:dd:dd:a6:65:1a:81:d0:fb:b9:f3:da:3c:
f3:09:de:61:79:b3:61:90:22:9d:5e:4a:21:34:35:
cc:19:4b:bc:c9:50:24:83:c4:8e:7d:79:6a:79:f0:
58:e6:b0:8d:87:cc:52:75:d3:08:d3:c9:6b:ed:cb:
da:03:8e:7d:eb:5d:c9:77:26:fb:7e:58:8b:b4:ca:
22:1a:2c:01:f3:b3:f2:06:8a:58:74:d1:97:bc:2a:
a1:a4:7c:09:a3:9d:ae:80:fc:37:62:20:38:a0:53:
73:f3:aa:9a:73:a8:4d:f4:ef:49:0c:e9:5b:59:34:
81:f7:0b:84:da:18:0f:a5:45:12:47:2b:d1:e8:f2:
79:a1:57:b2:96:f0:ca:1b:53:7f:7f:83:d4:f4:a7:
91:ab:24:8f:41:3c:d5:88:7a:63:6b:e5:8a:a4:66:
e7:75:9c:de:45:06:97:3b:4e:75:4e:88:6f:a2:80:
24:3f:15:b7:28:36:7a:34:e0:4a:0c:53:05:fa:b5:
3e:9f:5c:44:c6:fc:86:56:85:77:7f:3c:dc:ab:a4:
99:32:17:39:f1:b9:eb:94:c7:8d:f5:35:7f:a2:c1:
f2:7e:51:ad:20:50:b4:77:47:e9:e6:71:0a:1e:92:
b0:d9:c8:76:41:43:79:86:6d:4f:b5:9a:9b:cd:78:
3f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8D:FF:56:0F:47:45:15:EE:43:7B:AC:21:58:55:80:23:83:D6:70
X509v3 Authority Key Identifier:
keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:0c:37:df:cb:d1:a0:79:69:49:d2:5c:fa:1f:79:f0:e0:a7:
7d:98:24:e9:57:5a:8b:f0:ad:82:77:02:94:89:1f:26:c3:d6:
98:3d:39:17:89:1c:08:3e:2b:ad:ab:dc:a3:a7:00:bf:58:ee:
d3:12:e5:fb:f7:4f:50:76:9f:3c:92:8d:a4:c2:df:ab:c0:fc:
97:73:28:a4:57:5c:cb:31:c4:10:8d:95:cd:2b:cd:fc:23:86:
62:5f:0f:0a:7f:0a:53:29:9e:18:99:d6:67:3c:3c:3c:87:ce:
6d:65:46:d2:56:18:9d:39:d5:52:60:dc:26:1a:65:ef:c0:bf:
2d:67:82:f1:5a:e6:dc:98:e8:3d:5c:27:39:b3:38:d9:bb:1a:
c8:59:47:d8:e8:b9:cc:9e:0d:fb:45:2d:6d:54:42:f5:b9:cd:
1d:a3:ef:1e:fd:a2:d6:3d:b5:fe:e2:c2:a4:da:8b:10:18:63:
ab:b3:a7:1b:00:52:04:be:59:e7:bf:c1:eb:a8:47:ed:d5:d2:
04:13:41:85:15:45:dd:03:4b:ef:df:74:18:9c:37:f3:2e:3e:
85:58:d6:38:ad:84:da:e5:f1:e3:e8:40:41:e5:c4:7f:7d:25:
a4:88:84:a9:cf:cb:f8:ac:c0:0a:8c:c6:4a:38:d4:aa:93:1e:
12:d7:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:34 2026 by rpki-client