
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
File: PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json)
Hash identifier: uIYMLkpLO+Y+rMUBe8itTpf/1JuePoOABnyTj3NCL9o=
Subject key identifier: 96:76:A9:BB:15:15:08:93:27:14:2F:26:9A:D9:DF:E8:9A:42:C8:D4
Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
Certificate issuer: /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
Manifest number: 01C0
Signing time: Sat 13 Jun 2026 03:56:05 +0000
Manifest this update: Sat 13 Jun 2026 03:56:04 +0000
Manifest next update: Sat 20 Jun 2026 03:56:04 +0000
Files and hashes: 1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: 25MekKch33775gttbv9FAvT8HDPoCB+Ue0YSA00Qdzc=)
2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: +fiYjkOTw29H17V5Q0jS5Cy2xXc6X92nZPkDe2rUAJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Validity
Not Before: Jun 13 03:56:04 2026 GMT
Not After : Jun 20 03:56:04 2026 GMT
Subject: CN=6a2cd4d4-c98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:b2:98:78:a0:73:28:53:4d:c7:23:24:85:
98:4c:47:0f:2d:09:d0:41:1d:7f:1f:89:a6:85:cb:
9d:51:11:e6:6e:0b:e3:f1:f8:52:32:15:94:97:34:
a2:ba:ab:7a:d2:57:05:4d:ff:b6:4b:69:70:95:20:
f5:bc:cf:d8:46:3d:2c:25:16:b8:28:5d:c3:7c:0b:
81:8b:f9:a4:e3:06:b0:2a:a6:27:b3:1a:e1:71:8a:
4e:03:de:55:00:34:5e:56:a5:c3:e3:3e:4a:85:14:
17:42:c4:85:60:1a:03:d1:23:cf:19:ad:cd:e8:5b:
a7:14:01:a3:63:3e:67:09:2d:8f:8a:62:34:50:ff:
b1:ae:4a:ed:25:5c:be:ae:9e:da:4e:35:6d:c0:40:
87:e8:e7:0c:9b:f3:fe:07:bc:be:be:ad:30:62:d7:
8a:35:12:3c:a2:8c:cb:92:d6:ad:f2:14:11:3b:60:
a9:3f:f4:b7:78:38:e0:79:b1:0b:0e:2f:f5:b1:0a:
45:4e:85:d6:47:8d:57:17:e8:f2:00:02:ca:a1:6f:
64:d7:41:b1:fb:79:2d:39:17:b3:57:0a:72:30:09:
25:78:85:1d:dd:b8:be:77:81:07:ac:1b:51:29:50:
81:5c:f1:7f:83:fa:88:0d:c5:48:45:dd:f1:5a:e4:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:76:A9:BB:15:15:08:93:27:14:2F:26:9A:D9:DF:E8:9A:42:C8:D4
X509v3 Authority Key Identifier:
keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:6a:8e:8f:65:1b:81:4b:bb:2b:de:ed:32:9a:4e:18:e1:f5:
90:0a:b2:8d:60:1d:92:64:dd:56:4f:9b:21:fb:e6:65:a5:9b:
49:a0:4f:76:23:c9:48:d3:75:70:5d:74:26:d3:12:4f:9f:70:
0b:56:9b:df:d4:d5:89:db:8e:d7:7d:f8:a5:30:77:2a:15:6e:
5f:88:6f:95:bd:69:cf:7d:32:b4:92:84:ab:45:cf:96:65:fe:
ed:39:24:5d:3d:be:7f:3d:15:5a:72:68:c5:70:c7:30:a5:2f:
93:e7:75:d1:15:77:ff:94:ce:65:d1:65:54:80:c2:b0:af:1b:
67:8e:ed:72:f5:f3:90:d4:e7:51:bf:fb:9f:63:1e:c2:0b:9f:
da:f9:ca:49:19:3f:66:e8:75:fc:51:f8:92:22:de:99:f2:fe:
a1:87:ab:3f:9e:99:82:37:47:1d:26:65:56:18:5e:c1:a9:55:
d1:a2:3d:17:84:f8:1a:7a:76:64:ab:7c:87:70:76:d2:fa:9e:
6f:9e:25:63:f5:e6:9b:5d:6f:fe:b9:dc:b7:28:31:15:48:9a:
3c:12:9d:90:5e:f5:7f:6e:b6:b1:42:d9:66:37:1e:5a:0d:eb:
9f:67:78:6c:79:d3:de:d7:f4:cf:9c:e0:e0:89:37:13:69:0c:
b5:97:01:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:47:27 2026 by rpki-client