
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
File: PgYolveWFAxkBV5H1FMISCOnCCQ.mft (raw, json)
Hash identifier: Btyb5bWSrDncW8hEpNH/qbpvFW4hs5pipgrKU5xlABo=
Subject key identifier: F8:C2:90:5C:78:EC:7A:D3:CB:7B:2F:5F:0B:C0:5A:DE:76:69:75:34
Authority key identifier: 3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24
Certificate issuer: /CN=A917E65B/serialNumber=3E062896F796140C64055E47D453084823A70824
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
Manifest number: 0107
Signing time: Mon 21 Sep 2026 06:06:48 +0000
Manifest this update: Mon 21 Sep 2026 06:06:47 +0000
Manifest next update: Mon 28 Sep 2026 06:06:47 +0000
Files and hashes: 1: PgYolveWFAxkBV5H1FMISCOnCCQ.crl (hash: P12506YY3xEoTzfnhZ1S1xfPf1UnFNMYq3eipAFik/8=)
2: B7498170318011F0A5A76C39C4F9AE02.roa (hash: UbYb0P8FE3F+HvemibXz0dMD4w6gFMZ7kKT3m10twQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl
rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E65B, serialNumber=3E062896F796140C64055E47D453084823A70824
Validity
Not Before: Sep 21 06:06:47 2026 GMT
Not After : Sep 28 06:06:47 2026 GMT
Subject: CN=6ab0c978-d1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:41:3a:57:c0:1e:d4:90:d7:40:63:a4:f5:
aa:8c:c1:83:94:0f:04:62:ec:de:e0:25:85:bc:15:
76:f6:7b:75:5d:5a:c3:d0:fd:6c:e3:f5:1d:49:a8:
79:6a:66:be:3b:d2:b0:76:79:fb:10:75:08:d6:1b:
4c:7a:c1:90:4c:2b:0f:13:34:e3:45:be:11:33:fd:
ad:91:5b:a8:3d:9d:e2:ba:59:80:53:0d:b1:48:87:
16:1b:67:80:53:05:f0:78:f1:28:7d:d1:4a:1d:24:
c8:ed:3a:66:b4:a6:f6:e7:6f:a5:da:91:4c:8b:f8:
61:78:b9:b7:ec:8b:d3:ea:a3:b1:c6:90:13:a6:ec:
4b:1d:f8:ec:c3:bd:98:fc:b9:14:26:16:6c:88:98:
3c:4d:cc:54:b3:f5:19:ff:c8:bc:8f:07:0c:b4:d6:
f1:0b:9c:de:f7:3c:77:5f:03:fe:77:1d:dc:a6:62:
30:89:36:c9:d6:70:6d:8d:62:c8:60:f1:bd:6b:cf:
50:29:52:68:71:dd:83:a6:62:7d:fe:29:32:38:dd:
f7:5a:8d:c8:64:6b:1e:1a:56:6f:39:f5:41:be:61:
3c:6a:a5:ff:7c:67:af:34:b2:22:dd:69:51:38:98:
82:56:7b:67:65:05:42:b2:ff:1c:6e:e9:12:78:b6:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C2:90:5C:78:EC:7A:D3:CB:7B:2F:5F:0B:C0:5A:DE:76:69:75:34
X509v3 Authority Key Identifier:
keyid:3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:dc:ca:6f:cf:4b:19:b7:54:34:2b:f5:bb:05:0c:89:57:6c:
ea:a3:0c:d8:31:92:95:43:c9:c1:ee:79:d6:ad:25:6b:e8:c2:
a0:bf:93:7f:fa:de:c7:b7:5f:a7:08:a6:f0:bc:93:b2:75:f2:
e5:96:8a:c6:a0:b8:31:aa:26:27:1f:d6:f9:80:44:1f:bc:e5:
be:e8:e8:bb:48:1b:2e:06:61:b7:7c:9d:27:c6:eb:06:88:48:
e4:52:51:37:57:1c:d7:06:26:89:c5:93:41:35:62:1d:f3:b7:
2d:ae:c9:3c:86:9c:7c:33:3b:89:71:cd:92:67:96:7e:42:ee:
2f:8f:0b:eb:65:a1:b5:28:9a:f5:01:58:39:f6:13:19:ce:1f:
ba:8d:35:ef:48:6c:ef:5d:0d:0e:1d:67:77:bf:51:a2:ef:e6:
f6:95:8b:1b:72:46:ab:57:fe:14:3a:3b:c4:94:69:6b:c0:c7:
b9:0e:c8:d6:e7:d6:f8:85:a0:21:0c:28:f4:4e:25:2f:d9:5a:
01:8c:b9:1f:96:05:1e:69:94:1c:3a:5d:09:5f:31:51:c5:83:
65:ea:de:c3:c9:23:27:18:b8:ac:c3:48:9e:7d:ac:a6:40:5a:
60:c0:5d:75:19:90:1b:4d:bd:04:88:a9:e1:d7:bd:2e:e6:4a:
fe:27:9d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:09:13 2026 by rpki-client