
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
File: PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json)
Hash identifier: uPAbNXcjDZ14iiagZ8WYstbxU7TGZeynyWHlKdByb5I=
Subject key identifier: 99:92:45:67:3A:76:93:4D:11:65:89:62:81:3C:19:82:7E:9C:07:FF
Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
Certificate issuer: /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
Certificate serial: 0B68
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
Manifest number: 0B5F
Signing time: Thu 16 Apr 2026 19:07:09 +0000
Manifest this update: Thu 16 Apr 2026 19:07:08 +0000
Manifest next update: Thu 23 Apr 2026 19:07:08 +0000
Files and hashes: 1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: AwO6lFxbrZS4QMWs+xg3LZ/wzcKnDWv+wr3kq9oilGw=)
2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: ZatHv2sHyWRSC6zewOoWADYzth7DnWj+eG5J7PvU3G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl
rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2920 (0xb68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
Validity
Not Before: Apr 16 19:07:08 2026 GMT
Not After : Apr 23 19:07:08 2026 GMT
Subject: CN=69e1335d-8659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:0a:a2:b2:c6:8c:96:7f:f0:c0:65:5f:75:
40:f6:9e:32:2e:a7:63:e3:36:81:85:e8:46:cd:1b:
31:0b:bf:7d:4f:e5:52:0d:c6:20:c8:39:34:b7:32:
67:d9:22:c4:96:3a:10:61:f4:5e:df:b1:6b:16:e5:
e2:32:c5:76:5b:1d:e4:cb:43:73:ba:39:58:2b:b1:
4e:d5:0d:55:54:af:ec:cc:4d:92:1b:69:84:04:6d:
0f:1f:6e:74:b9:73:0d:f4:28:93:bd:5a:4e:2c:9b:
c6:fa:87:36:a1:35:40:15:72:d6:30:32:ac:ea:cc:
58:6c:20:b9:d4:89:49:fc:31:5f:a2:f6:a6:ee:ef:
40:ad:19:ff:07:91:61:dd:06:01:1c:40:c5:d0:fd:
44:4d:83:1f:8f:d0:89:43:30:87:c5:c9:b1:b3:d9:
ee:6d:56:87:50:2b:1e:33:58:d6:76:21:f1:ac:38:
27:dc:0b:0d:00:ac:55:cc:7d:b3:f8:f0:b5:b1:f6:
f8:7e:d3:e3:9d:9e:c6:00:4b:97:6e:8e:62:35:97:
d7:23:c5:b6:9a:c0:d5:a9:1b:2a:8b:6e:01:d0:d8:
bb:67:37:a8:6c:26:0c:36:c7:a8:6f:29:1d:3b:74:
cf:3a:43:cc:a7:1a:9a:d3:72:d8:a2:f1:05:32:f6:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:92:45:67:3A:76:93:4D:11:65:89:62:81:3C:19:82:7E:9C:07:FF
X509v3 Authority Key Identifier:
keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:90:20:7c:cc:49:75:c6:37:1c:62:df:10:cc:3b:cf:fc:b3:
8c:7c:f2:ae:cb:be:54:79:83:61:c4:4c:a4:e9:3d:0e:c1:59:
41:18:af:d4:d2:7b:df:e5:f2:ed:7e:75:6b:b1:e6:7e:80:b5:
80:31:2b:0b:9a:23:db:73:c9:ea:56:1f:76:eb:41:09:0e:ff:
35:b1:cc:5a:fc:22:3d:74:a9:24:0d:5d:14:e2:da:72:c5:97:
ea:a9:7c:fa:53:d0:93:4f:ee:6d:b1:87:eb:19:7b:a3:eb:be:
44:b1:e3:0e:c4:5e:e2:8a:c4:a6:f4:b9:cb:bd:1e:cd:cb:ff:
18:86:2a:31:2c:dc:1e:8b:c9:60:5e:e4:f8:b8:a9:e6:77:99:
4a:e6:2d:79:3b:f9:12:38:68:5b:cc:e2:97:3c:91:48:7b:fa:
5d:58:55:a1:79:83:1e:9d:1f:cf:50:c0:6f:28:5e:91:5e:28:
f9:44:7a:1a:68:00:8f:8d:0b:0c:9a:38:63:8c:8e:58:61:81:
2f:fa:c4:9c:08:f5:0c:2b:e7:8a:80:22:09:80:5a:dc:ae:88:
4b:b4:a6:b5:b9:7f:dc:43:1d:b1:72:ad:ae:4f:71:e4:fe:5f:
23:9a:b5:bf:ed:67:0e:fe:3d:28:4d:f0:5e:f9:07:48:3d:2e:
44:df:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:43 2026 by rpki-client