
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json)
Hash identifier: wmnCM8w0Oj43Sfmk5DFzhZ8xGAQz5psBPgFsl2VmnN0=
Subject key identifier: 0B:0D:EC:B0:B0:5F:AE:05:D8:73:8F:CD:DE:6D:6A:30:D1:A0:6D:41
Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Certificate serial: 03AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
Manifest number: 03A2
Signing time: Sat 19 Sep 2026 00:32:38 +0000
Manifest this update: Sat 19 Sep 2026 00:32:38 +0000
Manifest next update: Sat 26 Sep 2026 00:32:38 +0000
Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: dwpM3S5SBvYDyYofqHSsf/BZbw4utvXqBFY6FwtFOgE=)
2: 85B9F9CC8A7211F193E6E41D4211F970.roa (hash: K8/sp/CfflUVzDThJpOZ6EABm99x23tLUM/3USoDOpY=)
3: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: oufaNPGZbxnCNaqcpVINAiOM1TZFQ8M5GFYVVdKWLwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940 (0x3ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Validity
Not Before: Sep 19 00:32:38 2026 GMT
Not After : Sep 26 00:32:38 2026 GMT
Subject: CN=6aadd826-8c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:00:2c:e7:57:e5:31:16:f6:a9:c6:5a:44:
e1:8d:3a:b5:fc:fe:62:eb:45:01:2f:fd:aa:04:56:
7a:f4:27:1e:e1:2a:cb:ce:70:e0:f3:76:6a:fb:56:
08:08:76:ba:cb:7c:86:b6:c1:0c:29:31:c7:ca:9c:
71:ba:6c:4b:d7:52:e5:ae:f4:f2:0d:c6:93:57:2a:
dd:73:13:17:17:3f:6d:ac:a8:f4:3c:01:f8:b9:b1:
59:de:5e:5e:21:1d:36:8b:10:30:03:61:5e:8e:0b:
3a:1e:3d:52:3f:5e:43:f8:07:91:24:68:68:d6:dc:
93:2a:84:ae:8f:93:82:93:76:cd:ba:1a:69:d8:f0:
09:9b:db:0b:1e:23:1b:3c:9a:a9:94:04:a5:cd:1b:
92:51:ee:37:06:8e:3e:5b:4d:7f:ed:87:06:6c:fe:
cd:96:d2:83:0e:db:dc:0e:fa:33:80:0d:95:b1:32:
20:53:5c:5f:58:08:f9:27:9c:d3:2b:39:5b:45:92:
d0:0a:eb:df:2c:1b:5c:2c:a3:fe:b8:ee:5f:47:d8:
37:dd:df:03:f8:5a:45:9c:87:a1:5c:50:3b:e4:1a:
92:60:fb:40:ee:db:2f:fc:3d:70:7d:a9:65:f7:0b:
6d:c0:d1:8f:c9:e3:50:56:40:c1:fa:ab:fa:db:76:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0D:EC:B0:B0:5F:AE:05:D8:73:8F:CD:DE:6D:6A:30:D1:A0:6D:41
X509v3 Authority Key Identifier:
keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bd:39:92:df:89:1c:e4:8e:bd:74:c8:08:e5:e3:5a:84:ea:
94:42:06:e7:ff:a3:ac:68:c7:a9:67:40:36:bf:65:28:c5:50:
b7:d5:c5:8e:83:b1:c9:d3:eb:ce:c1:6d:95:48:f2:f4:ab:8e:
a8:58:8c:fd:a4:0e:cc:df:1c:01:e6:58:c9:75:0c:e3:5e:ed:
60:1d:13:4e:f7:d7:69:53:1c:14:a6:4c:aa:8e:c3:b4:34:25:
55:06:af:ee:14:0a:50:90:08:7f:74:1b:35:83:3d:b1:a3:65:
72:b9:5f:02:e1:96:b6:67:cf:4d:85:93:0c:a4:6c:36:37:2b:
ec:14:f8:80:44:5e:8a:df:6f:fc:c6:cb:2c:72:c1:ce:15:43:
24:b3:0e:c3:36:d0:2c:d6:c1:c0:e6:f5:56:49:29:dd:a2:05:
2a:e4:f6:5f:e4:ee:ef:69:c2:2c:e9:9b:01:16:ae:b4:2b:d9:
e4:a3:48:a5:79:c0:70:f3:d4:21:a6:5d:03:58:af:e6:c5:84:
d7:5e:82:9f:63:8e:ab:6b:e0:bb:da:4d:02:40:c1:d4:c6:79:
3f:1d:09:22:16:7d:87:36:9b:59:9e:43:6a:59:c2:d9:d4:54:
d1:48:5c:e3:ea:5e:fa:e6:3a:be:11:3c:8c:45:f4:d6:ec:16:
31:24:9f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:52:13 2026 by rpki-client