
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
File: PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json)
Hash identifier: szuKVogpuwNAojcQK7LxPPSfCHD/S1MmP79yhK0ib60=
Subject key identifier: 09:4C:ED:24:1D:D6:A5:4F:8A:14:79:77:F7:CF:35:44:09:26:9E:7E
Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
Certificate issuer: /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
Manifest number: 01A4
Signing time: Fri 17 Apr 2026 03:57:33 +0000
Manifest this update: Fri 17 Apr 2026 03:57:32 +0000
Manifest next update: Fri 24 Apr 2026 03:57:32 +0000
Files and hashes: 1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: n+AqqN4EDnZBFnUPo0dUf2pXCcp4GwF2X4PqthfzycA=)
2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: +fiYjkOTw29H17V5Q0jS5Cy2xXc6X92nZPkDe2rUAJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Validity
Not Before: Apr 17 03:57:32 2026 GMT
Not After : Apr 24 03:57:32 2026 GMT
Subject: CN=69e1afad-6306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:be:55:cc:15:e4:05:12:cf:f0:1d:fd:67:
d3:fe:95:03:f5:03:e6:de:38:16:a6:b2:f0:a5:8f:
67:02:7c:82:b2:08:0b:eb:26:f2:e4:b3:13:dd:7d:
a2:27:16:25:b8:7d:f4:e3:9c:c8:52:c4:3d:bc:6c:
2d:4a:31:45:3e:03:51:f1:93:44:89:5e:60:67:30:
a6:2c:8b:46:1c:66:ef:9b:3e:8b:31:9c:f9:37:a5:
d7:60:64:e8:2c:d5:98:99:52:28:31:db:5c:ff:1b:
f7:08:d9:15:ab:9d:0e:82:65:50:ab:d7:16:fb:e9:
e5:41:f5:b8:21:7a:5b:56:fa:bd:93:fe:f8:0c:b4:
0d:95:ca:bc:2f:6b:65:43:ca:d9:37:b8:85:b9:85:
b8:62:24:e6:01:b9:75:62:8b:ce:21:76:4d:c7:e2:
8d:b8:0b:d0:67:c6:95:1a:b7:66:ac:cc:4b:bd:4c:
5e:c4:4c:43:1b:3d:50:db:f2:11:d2:70:9f:3e:68:
50:f8:b1:26:c5:39:5f:fb:90:de:11:71:a6:43:d9:
43:e9:81:a7:28:b7:7c:bf:d5:2b:8a:b6:ef:18:8b:
4d:1c:96:e3:ca:44:c5:80:78:19:0d:60:62:fb:4d:
36:25:46:fa:67:62:f0:8c:33:9a:f2:bf:fc:89:70:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4C:ED:24:1D:D6:A5:4F:8A:14:79:77:F7:CF:35:44:09:26:9E:7E
X509v3 Authority Key Identifier:
keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:f2:4e:1c:7e:c9:23:cf:97:05:75:5f:24:7c:67:e1:75:e8:
2f:77:59:30:0e:89:8c:b8:1e:13:22:97:90:7b:81:9f:0e:e7:
bd:f7:18:fb:e9:df:fb:4d:ca:4c:8f:f3:11:a4:df:2e:a9:f5:
67:dd:c9:46:84:57:74:e6:f9:73:f0:ab:1d:d9:40:61:b5:b3:
be:49:b5:ef:27:a6:bd:4f:be:c4:40:26:ba:7c:02:8c:4c:5f:
13:79:e9:e8:39:97:22:49:fe:b5:ab:9b:8d:d9:a4:25:8f:48:
4d:80:75:7c:2f:50:44:27:89:3a:17:0a:75:e3:4f:3a:30:af:
d5:85:1a:f9:3b:5b:f9:20:e1:66:e5:8e:dc:84:40:c0:e7:8c:
fd:8e:e2:98:4c:3b:7c:23:b1:74:aa:3a:77:ff:27:fa:b2:10:
7f:35:17:6c:7c:85:7a:ec:91:cf:35:78:b4:e4:29:99:84:47:
8a:4c:8b:b1:b5:25:df:98:96:da:dd:f2:15:69:b7:1e:05:09:
06:6e:41:af:e9:7e:d8:04:cf:6f:ae:d9:03:50:6d:61:6f:d5:
8b:1a:8b:39:a3:a1:11:84:9f:cd:0d:5e:b7:0f:cd:7a:f6:16:
52:80:d2:5c:75:7c:25:d3:e5:30:fc:a6:ce:47:9a:7f:e2:ef:
51:d5:6c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:49 2026 by rpki-client