
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
File: PfacqYyxMelltbxKM_znG50156g.mft (raw, json)
Hash identifier: 8keAcZxaNPKeNkCi/WF0ecLCcPe5MX81qpGHvzSfktY=
Subject key identifier: 43:8B:D2:8B:DF:86:C8:D7:37:A5:6B:0E:10:F2:BE:19:A3:E5:3E:21
Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8
Certificate issuer: /CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
Certificate serial: 07EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
Manifest number: 07DB
Signing time: Sat 28 Feb 2026 21:43:49 +0000
Manifest this update: Sat 28 Feb 2026 21:43:49 +0000
Manifest next update: Sat 07 Mar 2026 21:43:49 +0000
Files and hashes: 1: PfacqYyxMelltbxKM_znG50156g.crl (hash: IqqL6fmFxasP5K93D4MeVGPFwmN71X/OryrfqxHV27s=)
2: F1C686AA1D5811EFA8D26E3EC4F9AE02.roa (hash: YqZSzMgiE6bNjJt7Nol1/xXqN+WkcyhD7s43MlY/jkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl
rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026 (0x7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AF13, serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
Validity
Not Before: Feb 28 21:43:49 2026 GMT
Not After : Mar 7 21:43:49 2026 GMT
Subject: CN=69a36195-b53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:55:1d:a9:1f:63:ad:25:29:f9:35:e8:34:37:
9a:09:98:68:13:e5:5a:f1:ba:4f:b1:82:8d:71:93:
72:64:97:d2:07:41:6b:bb:63:6c:77:d6:2f:91:c1:
0e:b0:4d:10:33:aa:f2:43:8a:b8:05:8a:97:9d:21:
fb:b7:4f:d2:65:49:ec:8a:40:b2:2c:a1:e0:95:92:
d9:d6:9f:47:4c:be:06:31:b4:0f:d3:62:ba:39:8b:
96:06:8b:c6:25:e0:46:f7:8d:30:5f:90:89:2c:7d:
fc:06:2d:ea:14:7b:f4:23:0d:84:13:d8:a9:d2:17:
d7:46:2d:ef:f7:d3:9e:d0:4b:ee:95:b9:19:d1:91:
21:c0:55:ee:39:f1:94:50:f5:aa:d4:d5:22:a7:23:
c8:af:df:37:3d:db:88:12:fe:ce:1e:25:67:47:2f:
36:25:e4:44:e2:0c:05:4b:ca:63:90:11:13:4b:6c:
95:b7:ff:24:b6:a9:31:26:0c:38:7f:9e:c0:af:60:
6e:33:56:91:8b:06:17:2b:80:53:03:e9:fd:82:ac:
d3:dd:2a:b6:57:8e:cc:2c:f3:51:49:fe:3b:fd:e7:
ba:1f:be:55:40:fb:48:8a:d7:4b:2e:d8:bd:1d:e8:
93:4a:c4:ec:a9:76:c2:20:7d:88:59:71:6f:4a:08:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8B:D2:8B:DF:86:C8:D7:37:A5:6B:0E:10:F2:BE:19:A3:E5:3E:21
X509v3 Authority Key Identifier:
keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:db:ff:9e:22:fa:6c:3d:01:6c:01:80:15:4d:b3:64:8e:32:
a5:60:ff:c5:5f:a8:ee:18:cb:f9:ed:c8:03:68:11:b7:fd:b8:
aa:fe:0b:51:c2:c4:09:47:61:11:29:11:17:84:65:e4:d5:d8:
bc:59:db:98:45:05:2d:28:aa:f6:f5:e2:1d:94:e2:d7:93:46:
06:7a:8d:b0:6c:ce:db:e9:ca:16:6a:e2:2b:12:c4:f1:41:59:
b8:31:19:94:0e:8e:06:09:3c:f3:a1:95:40:84:04:7e:ce:d5:
9c:19:b5:35:32:2d:4a:f1:6e:12:2f:47:e5:c8:01:d4:f4:e9:
e9:f6:ec:7f:28:1a:ae:fa:af:e6:52:99:8d:0d:eb:12:8f:b5:
64:f4:ce:6d:83:84:ec:27:6e:7d:7a:56:50:57:eb:43:2d:18:
e6:ee:d9:4b:b8:d3:f6:e9:9e:82:f9:8e:c2:d0:f9:29:23:e5:
e5:8a:99:1c:8b:2d:10:8f:3c:4b:a0:5a:74:87:21:bc:bc:55:
42:c4:bd:b4:34:42:3b:96:f6:8b:d6:e9:d9:ec:87:b9:69:4b:
de:e3:99:12:9d:86:50:d7:da:10:0c:95:66:8f:ea:9c:7e:cc:
1e:02:50:5a:83:bf:b1:3e:73:f0:56:3c:fa:43:bf:28:02:c3:
e6:6f:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:48 2026 by rpki-client