
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
File: PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json)
Hash identifier: eKSnQyMEjzHbKaKO9ziUpaTtZlgqSBCwxh4FGAM4CCM=
Subject key identifier: 15:61:F4:4B:61:80:57:DC:B9:68:9B:62:D2:02:F0:0F:17:40:42:84
Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
Certificate issuer: /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
Certificate serial: 0B50
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
Manifest number: 0B47
Signing time: Sun 01 Mar 2026 23:01:06 +0000
Manifest this update: Sun 01 Mar 2026 23:01:05 +0000
Manifest next update: Sun 08 Mar 2026 23:01:05 +0000
Files and hashes: 1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: 3UOGtDOuabMCzzGVJjNiQp1GBWc4aoTWJjFOwFk6whA=)
2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: ZatHv2sHyWRSC6zewOoWADYzth7DnWj+eG5J7PvU3G0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl
rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2896 (0xb50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
Validity
Not Before: Mar 1 23:01:05 2026 GMT
Not After : Mar 8 23:01:05 2026 GMT
Subject: CN=69a4c532-f9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:04:37:07:e8:85:7f:ed:40:58:6a:f1:24:
ed:69:29:e6:0c:2b:20:90:e0:46:88:5d:cf:76:b3:
d7:57:2c:ce:83:22:35:0b:25:2b:d8:f4:a0:b5:77:
24:4b:0b:5c:02:21:f8:27:e5:91:70:d1:b7:74:4a:
3a:3a:7c:a7:49:fd:0c:87:25:cb:1a:89:86:5f:ef:
1b:5a:fd:5e:a4:0c:ec:c4:69:c6:22:9c:8d:91:02:
8e:0c:7a:35:cf:b5:1b:b4:f2:24:70:6b:e9:9f:26:
7d:9f:a3:d0:e2:f5:59:03:fb:c2:c7:08:1b:cc:4c:
9b:95:d1:24:9f:3c:9c:0c:25:f6:98:2d:2a:9d:48:
f1:ef:a8:81:be:46:3f:91:75:4d:2d:27:26:a5:48:
11:74:62:53:ff:80:10:4c:ca:6d:78:14:ba:31:43:
31:31:a7:74:b8:89:b4:e7:a6:d5:f6:48:27:24:b9:
f6:c7:d9:06:27:b1:8c:98:91:2c:60:20:66:3d:e3:
39:34:17:d7:be:b5:b4:10:25:2e:b0:c3:fa:cd:28:
bf:32:ef:2c:ce:b3:e4:30:ef:14:96:54:56:49:fe:
3c:62:e3:80:12:53:d2:1e:9d:98:cb:ff:df:82:6e:
7e:46:19:e7:a2:fa:68:35:4f:14:4a:6c:8e:0e:4b:
a5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:61:F4:4B:61:80:57:DC:B9:68:9B:62:D2:02:F0:0F:17:40:42:84
X509v3 Authority Key Identifier:
keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2c:5a:1f:3e:b4:9c:14:76:93:87:ff:8f:df:20:5e:c3:13:
cb:28:81:72:8b:e1:01:0e:3e:ee:4d:67:6a:60:3f:8a:6b:66:
7e:04:18:fd:72:de:e0:31:34:bd:40:b0:90:6f:6e:77:0b:56:
84:50:e3:70:66:24:0f:2e:0e:f9:af:42:dd:d6:fe:13:26:d3:
72:de:ab:a1:fb:ed:7a:bc:e6:13:f0:ad:6e:69:d5:31:d2:16:
70:8d:03:d9:da:42:8a:6f:06:64:93:9d:09:0e:fd:6f:ec:2f:
3f:3e:28:93:a6:d6:61:af:72:30:da:5a:53:65:c0:ac:f9:dd:
f3:5f:0e:04:c3:8f:00:9a:67:bb:66:d5:7e:6b:55:5e:08:01:
49:3f:eb:9c:15:f0:38:89:1e:bf:37:a3:55:95:7d:36:eb:be:
3c:dd:c0:bb:f9:84:9d:dd:ed:c4:2a:1b:b7:3e:ce:13:7c:03:
30:1e:9f:54:79:8c:d4:a1:1f:57:c1:bf:04:02:f5:d7:7b:01:
3f:8c:2b:7e:3b:36:9f:5d:99:a1:1e:46:37:a4:1b:18:55:1f:
29:16:46:3c:2f:1c:ca:65:a4:f9:44:0e:f5:3d:0e:20:34:9c:
0e:d1:0f:0a:64:39:33:7e:f6:78:72:4c:77:2f:2f:f4:2c:49:
5e:4f:ba:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U0QkExMTAvBgNVBAUTKDNDNkVDMDlCMDk1RkE1RjUxMzYxNTEwOEE1NDQ3Q0FD
QjcxQUIxQTEwHhcNMjYwMzAxMjMwMTA1WhcNMjYwMzA4MjMwMTA1WjAYMRYwFAYD
VQQDEw02OWE0YzUzMi1mOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtiwENwfohX/tQFhq8STtaSnmDCsgkOBGiF3PdrPXVyzOgyI1CyUr2PSgtXck
SwtcAiH4J+WRcNG3dEo6OnynSf0MhyXLGomGX+8bWv1epAzsxGnGIpyNkQKODHo1
z7UbtPIkcGvpnyZ9n6PQ4vVZA/vCxwgbzEybldEknzycDCX2mC0qnUjx76iBvkY/
kXVNLScmpUgRdGJT/4AQTMpteBS6MUMxMad0uIm056bV9kgnJLn2x9kGJ7GMmJEs
YCBmPeM5NBfXvrW0ECUusMP6zSi/Mu8szrPkMO8UllRWSf48YuOAElPSHp2Yy//f
gm5+RhnnovpoNU8USmyODkulOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBVh9Eth
gFfcuWibYtIC8A8XQEKEMB8GA1UdIwQYMBaAFDxuwJsJX6X1E2FRCKVEfKy3GrGh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9DOTUyQUM5RTUy
REMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBmVVRZVkVJcFVSOHJMY2Fz
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BHN0Ftd2xmcGZVVFlWRUlwVVI4ckxjYXNhRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTRCQS9DOTUyQUM5RTUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBm
VVRZVkVJcFVSOHJMY2FzYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADSxaHz60nBR2k4f/j98gXsMTyyiBcovhAQ4+7k1namA/imtmfgQY/XLe4DE0
vUCwkG9udwtWhFDjcGYkDy4O+a9C3db+EybTct6rofvterzmE/CtbmnVMdIWcI0D
2dpCim8GZJOdCQ79b+wvPz4ok6bWYa9yMNpaU2XArPnd818OBMOPAJpnu2bVfmtV
XggBST/rnBXwOIkevzejVZV9Nuu+PN3Au/mEnd3txCobtz7OE3wDMB6fVHmM1KEf
V8G/BAL113sBP4wrfjs2n12ZoR5GN6QbGFUfKRZGPC8cymWk+UQO9T0OIDScDtEP
CmQ5M372eHJMdy8v9CxJXk+6Bg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:25 2026 by rpki-client