
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
File: PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json)
Hash identifier: 6QZ6O7onv+agrGmA1uvgAfH/jZ87g+SJ+2Aj9v+3afE=
Subject key identifier: 3B:D7:B5:26:9E:73:28:8A:AF:71:DC:81:72:C0:66:D4:F2:CB:FB:00
Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
Certificate issuer: /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
Manifest number: 01F7
Signing time: Fri 25 Sep 2026 03:25:24 +0000
Manifest this update: Fri 25 Sep 2026 03:25:24 +0000
Manifest next update: Fri 02 Oct 2026 03:25:24 +0000
Files and hashes: 1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: 7IJW9VQZ36WHiL1ql7TjZLv9Ca1cKJav5m5hGOIjMuM=)
2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: RLvkJQC71Slj35G4jfs9BmOdtDEiBC1wT0j0eVVXx8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Validity
Not Before: Sep 25 03:25:24 2026 GMT
Not After : Oct 2 03:25:24 2026 GMT
Subject: CN=6ab5e9a4-7cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:4b:8f:1d:73:27:29:f4:4f:bb:0b:5e:a7:
db:82:8d:dd:6f:d9:5b:ec:10:a5:f4:4b:4b:65:59:
30:87:d3:b7:37:2e:f6:85:7a:69:7f:02:9a:4a:f3:
94:f3:b4:27:74:6b:0e:71:cd:3b:35:77:27:b4:98:
21:95:ab:24:73:98:ba:0f:c6:73:59:99:28:4d:dc:
a1:72:9b:b1:03:cf:6c:3b:11:f8:82:9d:b5:64:b8:
c7:e9:78:40:86:73:e6:ca:08:8a:a0:4b:16:1c:69:
da:08:59:d8:a3:c6:42:49:15:42:b9:56:2f:80:e5:
10:e6:b6:e0:db:fc:fe:ad:11:fd:4b:7a:c5:eb:a9:
71:58:29:cc:10:02:f7:76:47:e7:47:eb:7e:ac:64:
61:ea:3b:9d:17:83:af:b6:35:82:49:cf:ab:31:bf:
ed:30:50:a4:87:6a:7c:ad:ce:34:e0:06:12:1f:e7:
20:3b:73:90:e8:82:25:5c:b8:72:39:6c:3a:d1:d9:
67:f2:9b:7e:d5:a0:26:3b:59:b3:de:64:27:15:70:
b7:f8:98:a7:67:a9:44:9a:42:3a:27:de:1a:6c:2c:
13:fe:1c:f7:f0:d7:d2:57:b7:af:03:1f:3e:60:e2:
3c:d8:c9:11:cb:2b:f4:fc:29:0b:30:b6:b7:2c:33:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D7:B5:26:9E:73:28:8A:AF:71:DC:81:72:C0:66:D4:F2:CB:FB:00
X509v3 Authority Key Identifier:
keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ad:2d:b2:fa:83:8f:84:36:aa:e2:af:c3:f2:c0:f1:42:15:
fe:12:ea:41:5c:82:b7:35:2b:34:ae:34:55:5b:f9:5a:f6:3b:
65:e2:af:e7:88:76:15:d1:27:c7:e7:d0:8c:04:38:c9:72:2f:
97:ac:59:6a:f3:37:81:8c:80:1a:2a:e3:e5:68:1b:14:3e:e7:
f6:57:0a:dc:38:3a:06:4b:1c:af:74:24:a4:e5:1b:f2:68:70:
fb:db:06:98:9f:5e:29:79:64:5f:9e:e1:bf:7c:71:c8:cd:06:
f5:9b:c0:9d:a3:2e:e4:5d:a0:38:db:8a:4c:d1:16:c6:68:b3:
76:7f:21:c3:8c:0c:d8:c3:95:6f:71:a1:06:3e:98:58:38:50:
78:86:d7:32:0b:06:50:f7:78:ec:e8:e6:fb:9e:79:75:68:0f:
60:ae:6b:a7:ff:d4:2b:9c:32:f4:18:92:1f:75:73:9f:8e:ad:
42:12:47:fc:6f:06:32:dc:3f:96:b7:fd:94:94:91:fb:8e:87:
0b:aa:b3:bc:a7:95:99:d2:2d:46:8f:68:c7:e0:30:82:69:15:
71:07:8e:f9:42:19:5d:39:ad:19:c1:3d:12:ba:b2:cd:29:1f:
65:d9:a7:3e:f7:ff:ed:8c:de:84:72:65:b0:0e:bb:03:3a:69:
be:49:a6:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JCNTExMTAvBgNVBAUTKDNFQTQzNDdEMkQ5RkQ2RUI2QTAxQjQ0RTU1NzFGODhC
MDhBQ0MyNUIwHhcNMjYwOTI1MDMyNTI0WhcNMjYxMDAyMDMyNTI0WjAYMRYwFAYD
VQQDEw02YWI1ZTlhNC03Y2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv1RLjx1zJyn0T7sLXqfbgo3db9lb7BCl9EtLZVkwh9O3Ny72hXppfwKaSvOU
87QndGsOcc07NXcntJghlaskc5i6D8ZzWZkoTdyhcpuxA89sOxH4gp21ZLjH6XhA
hnPmygiKoEsWHGnaCFnYo8ZCSRVCuVYvgOUQ5rbg2/z+rRH9S3rF66lxWCnMEAL3
dkfnR+t+rGRh6judF4OvtjWCSc+rMb/tMFCkh2p8rc404AYSH+cgO3OQ6IIlXLhy
OWw60dln8pt+1aAmO1mz3mQnFXC3+JinZ6lEmkI6J94abCwT/hz38NfSV7evAx8+
YOI82MkRyyv0/CkLMLa3LDMkKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvXtSae
cyiKr3HcgXLAZtTyy/sAMB8GA1UdIwQYMBaAFD6kNH0tn9bragG0TlVx+IsIrMJb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1MS8yNUFDRjVDMEM0
QjgxMUVFQkQ3MUM0NDZDNEY5QUUwMi9QcVEwZlMyZjF1dHFBYlJPVlhINGl3aXN3
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BxUTBmUzJmMXV0cUFiUk9WWEg0aXdpc3dscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkI1MS8yNUFDRjVDMEM0QjgxMUVFQkQ3MUM0NDZDNEY5QUUwMi9QcVEwZlMyZjF1
dHFBYlJPVlhINGl3aXN3bHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALK0tsvqDj4Q2quKvw/LA8UIV/hLqQVyCtzUrNK40VVv5WvY7ZeKv54h2FdEn
x+fQjAQ4yXIvl6xZavM3gYyAGirj5WgbFD7n9lcK3Dg6Bkscr3QkpOUb8mhw+9sG
mJ9eKXlkX57hv3xxyM0G9ZvAnaMu5F2gONuKTNEWxmizdn8hw4wM2MOVb3GhBj6Y
WDhQeIbXMgsGUPd47Ojm+555dWgPYK5rp//UK5wy9BiSH3Vzn46tQhJH/G8GMtw/
lrf9lJSR+46HC6qzvKeVmdItRo9ox+AwgmkVcQeO+UIZXTmtGcE9ErqyzSkfZdmn
Pvf/7YzehHJlsA67AzppvkmmRg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 20:23:26 2026 by rpki-client