
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
File: PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json)
Hash identifier: cwzW7/FRAgDQwnhcZnL8U1N6GRkMGxFXnbQcuzs0GgM=
Subject key identifier: B4:DF:81:D4:6D:8E:76:C7:95:85:41:FC:BB:42:90:F9:5D:FF:DB:34
Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
Certificate issuer: /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
Manifest number: 01D9
Signing time: Wed 29 Jul 2026 04:51:41 +0000
Manifest this update: Wed 29 Jul 2026 04:51:40 +0000
Manifest next update: Wed 05 Aug 2026 04:51:40 +0000
Files and hashes: 1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: wAzRvpuOgG8n+gbU7QTwWyzacn+LEv9WOQo1tAhirFg=)
2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: RLvkJQC71Slj35G4jfs9BmOdtDEiBC1wT0j0eVVXx8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Validity
Not Before: Jul 29 04:51:40 2026 GMT
Not After : Aug 5 04:51:40 2026 GMT
Subject: CN=6a6986dc-6eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:be:78:09:e3:8c:cb:a1:9a:ba:a7:ef:e6:
ff:bb:8f:5f:fe:f7:b2:82:aa:cf:05:67:cd:39:55:
e0:d7:57:3a:1d:a2:31:e6:d9:ff:54:50:a4:4b:04:
49:03:fa:c3:54:4b:ce:33:03:1f:c8:d2:f0:b6:df:
6a:7a:ab:37:cb:fd:58:32:10:8b:6e:39:cd:c6:85:
3d:1a:bd:eb:18:65:f1:b0:27:e8:6b:a4:c4:5e:30:
7c:78:9f:c4:91:8b:b3:e9:21:ce:df:a9:5e:d1:6f:
14:10:93:8e:f0:8d:a2:d3:38:bb:d3:77:8b:e5:83:
9f:04:56:8d:a4:8c:50:c8:64:e6:5d:c3:78:2e:40:
ac:e5:60:ec:ed:bb:e9:93:bd:8f:aa:3b:90:c9:a0:
26:59:60:90:49:70:75:6b:2c:68:8f:f2:8c:f4:3f:
6a:f3:15:5a:c0:1a:8b:19:0a:1e:6d:a8:db:24:81:
a3:ea:29:ca:8f:00:af:8d:99:8e:bf:3e:7e:f7:0c:
66:41:f1:c6:37:64:83:d5:31:66:05:eb:3a:5e:5a:
50:0f:9e:d8:d9:72:1d:b6:f0:74:c8:10:25:f7:1e:
d2:7e:b5:b4:c6:a3:74:1b:9f:9d:0f:d1:f1:bd:2f:
c3:ee:3f:2a:6e:15:7a:d6:b8:f5:c6:04:d4:fb:44:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DF:81:D4:6D:8E:76:C7:95:85:41:FC:BB:42:90:F9:5D:FF:DB:34
X509v3 Authority Key Identifier:
keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:86:e4:9b:79:3f:16:c9:b7:40:da:10:03:87:fb:c3:91:f8:
04:db:c1:23:fc:b7:42:90:08:c4:ea:aa:b1:71:cd:df:bb:b3:
2a:d0:0d:06:22:2c:8c:f7:22:10:53:6b:74:cc:82:54:8f:79:
e6:0f:3d:24:39:62:bf:68:22:08:3a:d8:76:7c:50:6b:c7:8b:
4a:1f:6f:ab:12:c7:82:3a:fa:4a:53:f7:f6:d1:d4:d8:7f:36:
da:15:df:2c:c6:74:40:38:92:c0:ea:ca:99:87:07:b5:4a:ce:
dd:c7:23:fb:5b:eb:ac:70:f7:ce:8e:49:9e:8f:61:7b:01:f8:
f7:10:4b:ad:65:7b:81:c8:b8:9f:22:82:4a:4a:f6:64:f7:d1:
df:ab:ec:57:0c:2a:98:c5:c9:40:a1:70:23:e1:18:65:6a:09:
11:7e:23:41:17:12:ef:e6:13:d6:b1:d5:79:b6:f5:81:47:5e:
e6:22:c7:de:18:f0:80:13:c6:9a:38:9c:b4:b6:11:06:59:db:
2a:d1:d7:c1:dc:ea:94:81:8f:b0:77:0d:d5:af:07:96:79:c5:
f2:48:23:ea:c9:ce:be:d9:8f:03:3b:2d:9f:23:f4:88:9f:9b:
f4:98:70:9e:f1:9a:57:73:a8:ff:ef:5a:43:b5:fd:7b:28:55:
98:29:9c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:16 2026 by rpki-client