
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
File: PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json)
Hash identifier: ci0dl96La5cxW4/qTd6VvVV+R5kF9VhNd9QaMLeWj6c=
Subject key identifier: A2:27:97:45:72:85:8F:B2:F7:A8:A2:0C:0D:72:4F:92:AE:29:EF:BA
Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
Certificate issuer: /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
Certificate serial: 0B85
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
Manifest number: 0B7C
Signing time: Fri 12 Jun 2026 19:10:51 +0000
Manifest this update: Fri 12 Jun 2026 19:10:50 +0000
Manifest next update: Fri 19 Jun 2026 19:10:50 +0000
Files and hashes: 1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: JqJCLOgAin31dD+02TrIQOUBqTZ33IH2nwvNW9oX2nY=)
2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: ZatHv2sHyWRSC6zewOoWADYzth7DnWj+eG5J7PvU3G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl
rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2949 (0xb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
Validity
Not Before: Jun 12 19:10:50 2026 GMT
Not After : Jun 19 19:10:50 2026 GMT
Subject: CN=6a2c59ba-4b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:bc:6b:76:49:07:82:ed:b3:11:a8:79:bb:
95:af:19:0c:4d:c0:fd:01:67:3f:38:df:d0:5a:b6:
d7:84:18:95:39:4d:96:f3:22:84:49:a6:8e:ba:6e:
24:e2:68:a2:09:a2:77:54:96:95:c7:82:4d:99:35:
44:ad:28:58:eb:12:bc:e1:de:44:84:36:5b:60:29:
9d:04:57:5c:c0:16:da:f8:f7:c5:2f:47:e5:b7:9b:
e7:04:e1:2b:79:75:07:fd:53:d2:85:61:d7:c4:13:
f8:94:65:a2:36:a4:7b:44:97:3c:69:df:de:4f:59:
6b:8e:33:34:a1:e5:3a:b6:be:fd:ec:0c:4e:0b:2d:
ac:c0:4c:88:8f:45:66:a9:de:cb:a4:31:b4:53:40:
de:22:ce:05:d1:a6:54:0d:50:3b:d7:6b:a1:d0:44:
b4:ec:8a:f8:63:f7:ae:ac:3a:2f:ee:d3:e5:35:fe:
54:b0:4c:06:5d:16:40:e9:14:27:44:68:a1:03:8b:
1b:06:7f:b0:97:a9:28:c8:d8:1a:c6:50:0f:50:0b:
23:37:9a:65:2a:ad:63:fe:fe:bd:9e:9e:df:52:55:
5d:4f:fa:cb:0d:37:ee:87:79:1c:a7:d0:5b:15:50:
7d:7f:1c:c6:9e:15:8c:3a:b4:12:21:8b:02:1f:e3:
fa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:27:97:45:72:85:8F:B2:F7:A8:A2:0C:0D:72:4F:92:AE:29:EF:BA
X509v3 Authority Key Identifier:
keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a4:48:03:86:6d:89:1d:71:52:aa:a4:98:22:da:de:7a:f3:
e3:3c:a8:48:a8:38:c8:ec:f5:b7:d2:e1:86:dc:c0:3b:36:6e:
38:99:b8:7b:89:e5:12:c5:85:63:6b:0b:67:ee:36:cb:04:39:
0e:8a:5e:b3:98:91:97:02:4d:42:ed:6e:af:cf:9a:40:01:15:
ef:8d:81:13:d1:5e:5c:aa:3e:7a:bd:88:07:d1:99:07:04:92:
9f:48:cb:26:53:9e:a1:9d:03:34:b2:46:91:c3:2f:f5:03:bb:
34:13:aa:a8:f9:4a:e4:03:b0:e0:c2:b6:ec:f3:ef:68:e3:37:
20:52:88:20:9e:a2:be:d0:27:8e:45:ac:90:ae:a0:d7:33:bb:
8e:7d:d4:fc:87:b3:ce:07:ca:a6:a6:d6:84:33:84:aa:cb:ec:
7d:6c:f9:3c:85:90:1e:8c:6d:82:81:ee:46:83:b7:38:8d:98:
59:78:31:0e:cf:95:a3:f0:17:e1:de:82:26:74:d6:df:68:6b:
ac:35:a9:00:2a:94:00:79:b3:ac:b2:c6:0d:ed:89:8c:2e:60:
77:53:bd:7c:0d:16:ba:a0:4f:58:74:db:66:0b:7f:0a:96:44:
e3:e4:ba:ae:bd:65:86:33:85:b9:c5:45:80:a1:21:bb:26:1f:
1d:e0:e6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:24 2026 by rpki-client