
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
File: PgyjPXanW6ZPDdawakQr5pWGRBo.mft (raw, json)
Hash identifier: Mb9921AOKjBuKLc4Ab4xGOKFxQfRImfv4eLfVDitOhQ=
Subject key identifier: E0:F7:8A:C9:F6:9B:E7:67:36:FC:BD:7E:10:F7:8B:F2:4B:53:E3:5E
Authority key identifier: 3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A
Certificate issuer: /CN=A917C422/serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
Certificate serial: 352E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
Manifest number: 351E
Signing time: Sat 28 Feb 2026 14:27:00 +0000
Manifest this update: Sat 28 Feb 2026 14:27:00 +0000
Manifest next update: Sat 07 Mar 2026 14:27:00 +0000
Files and hashes: 1: PgyjPXanW6ZPDdawakQr5pWGRBo.crl (hash: f2R2qMifn25McxYTqQyLUOCO0TE2xfwblHQ/2qexbeg=)
2: D69F6688CD8511EBB5252063C4F9AE02.roa (hash: o45AFhO6SSMQiWqggKeTKMzwcSJwvQDsZ1NlO/kkLkM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl
rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13614 (0x352e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C422, serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
Validity
Not Before: Feb 28 14:27:00 2026 GMT
Not After : Mar 7 14:27:00 2026 GMT
Subject: CN=69a2fb34-423b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:8d:51:ad:97:4c:5a:e7:1c:b1:f0:c5:05:
81:0e:0a:87:c6:3b:59:af:55:60:dc:80:95:f7:f5:
21:d7:60:89:a4:18:0d:7d:81:6a:c0:12:e1:29:6b:
54:0a:da:c7:2b:da:90:9d:35:57:b6:28:37:d1:c7:
b8:4d:37:cc:02:4f:08:39:79:98:77:66:12:a2:55:
3c:20:9f:48:33:42:d2:19:93:d0:01:a3:e9:63:2a:
b6:85:55:33:b1:89:07:57:61:76:f2:3a:33:4e:9b:
99:e8:07:72:0e:87:c1:aa:0f:56:10:7d:5a:0f:53:
20:dd:e3:6e:14:4b:6d:f6:80:c5:4d:55:cc:e9:28:
cc:a7:dc:0a:4b:7e:cf:dd:c1:72:c0:3b:62:2c:44:
50:3d:3f:0e:ec:a2:09:c9:b4:b6:ac:f1:72:62:87:
fa:e5:4e:22:a8:ce:93:21:f8:8c:63:0b:89:ff:2a:
1d:23:8d:af:54:a3:7b:21:6a:b2:31:a2:ae:41:7e:
9b:21:b5:5d:15:52:a0:0a:63:21:d0:9b:9c:cd:9e:
8e:10:75:41:df:56:59:84:da:d7:bc:21:08:e2:34:
45:f1:10:00:80:90:60:d8:33:b6:41:f3:fb:40:15:
68:cd:5e:4a:f2:8a:03:ed:80:6b:ee:3d:be:95:bc:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F7:8A:C9:F6:9B:E7:67:36:FC:BD:7E:10:F7:8B:F2:4B:53:E3:5E
X509v3 Authority Key Identifier:
keyid:3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:1d:10:98:dd:4b:ef:8f:c5:9f:a3:97:23:18:b8:1e:ab:64:
df:3c:70:84:9f:4a:0b:35:f3:6f:7f:bb:46:69:48:ee:6e:6c:
a0:17:33:57:90:76:a6:42:ea:87:9e:91:aa:12:6d:27:ee:75:
b5:7f:5e:bb:de:62:5a:b0:b8:93:2a:ed:22:83:e6:ec:97:c8:
ad:26:05:07:b2:35:69:c2:e3:dc:85:98:4f:35:48:8d:51:18:
05:b1:c9:be:5a:0f:31:07:c1:cb:e6:9e:d8:20:90:f4:5f:43:
c2:6e:27:cf:e6:65:b8:25:58:e6:ac:07:c5:d4:53:64:d8:2c:
ed:70:ac:33:5c:15:fa:fb:17:67:62:19:27:8c:a2:71:3f:f9:
a1:aa:da:30:96:f8:b1:81:db:ed:78:13:bb:d7:71:56:33:b0:
4e:37:31:90:9b:12:53:07:56:d4:c8:cb:69:fe:a6:fa:81:f4:
f9:ad:99:8e:a7:c2:3b:03:77:c1:bf:e0:d8:76:32:10:c0:7a:
d7:a7:a5:eb:e0:2d:1c:9b:80:a5:f5:1d:e4:02:26:21:68:0e:
20:99:fe:98:69:7e:e2:b7:c2:71:c9:6a:5a:cf:f9:70:fc:cb:
a9:df:f3:60:f3:97:03:bd:f4:b7:c1:98:36:9c:27:0b:ad:e2:
39:6e:3b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:52 2026 by rpki-client