
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
File: PgYolveWFAxkBV5H1FMISCOnCCQ.mft (raw, json)
Hash identifier: yJWPWS+Ez0QpX8u0iPx1IvlQ6JO21polybZh2G4w/P8=
Subject key identifier: 9D:A0:8D:F6:43:2A:B6:05:9D:10:C8:59:9E:25:FE:37:83:36:34:40
Authority key identifier: 3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24
Certificate issuer: /CN=A917E65B/serialNumber=3E062896F796140C64055E47D453084823A70824
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
Manifest number: B7
Signing time: Wed 15 Apr 2026 06:39:12 +0000
Manifest this update: Wed 15 Apr 2026 06:39:12 +0000
Manifest next update: Wed 22 Apr 2026 06:39:12 +0000
Files and hashes: 1: PgYolveWFAxkBV5H1FMISCOnCCQ.crl (hash: ANI5AMfHLC8tYQ17srg66IKHUzlDdoBXWcUhPuPFlI8=)
2: B7498170318011F0A5A76C39C4F9AE02.roa (hash: UbYb0P8FE3F+HvemibXz0dMD4w6gFMZ7kKT3m10twQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl
rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E65B, serialNumber=3E062896F796140C64055E47D453084823A70824
Validity
Not Before: Apr 15 06:39:12 2026 GMT
Not After : Apr 22 06:39:12 2026 GMT
Subject: CN=69df3290-ac1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:b3:6d:66:d5:7c:6b:97:9c:58:ce:01:7e:
6f:e0:97:ef:ce:06:ee:e6:30:2c:21:34:f5:6b:cb:
94:24:61:3c:40:7c:bf:8f:96:1f:82:0c:de:4a:a9:
02:0f:0e:e1:aa:dc:bb:70:1f:d8:7f:5f:7f:64:28:
88:36:ae:28:a9:dc:65:66:fc:17:89:eb:7b:8c:22:
b0:22:69:53:30:21:bd:28:62:e2:32:ec:49:23:84:
14:f5:c3:c4:ec:26:ce:e8:4b:f8:b1:b2:cf:b1:75:
fc:7b:e9:bf:ab:77:ce:26:c1:23:a3:6b:8b:82:e6:
a3:61:36:13:b2:97:2c:6c:12:5e:42:d7:91:20:a9:
55:51:95:4e:fc:01:10:ee:e4:c9:ba:fe:49:99:93:
f9:76:a7:7b:bf:54:05:e8:f3:81:e7:d7:e0:c8:b8:
eb:51:55:b4:57:9b:72:d1:c1:0b:26:e8:14:6d:b9:
c2:93:58:cc:40:07:15:3a:2b:66:4d:70:c6:ac:f6:
99:e9:a1:e0:c6:fb:e6:5c:5b:76:54:ec:94:0f:49:
e9:a7:73:11:28:a5:7e:d1:45:a7:ca:97:4f:d2:40:
87:34:4c:fc:fa:c1:02:40:a5:72:da:f0:28:9d:e1:
e5:79:3b:de:08:78:18:c4:1a:75:bf:98:88:e4:4c:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A0:8D:F6:43:2A:B6:05:9D:10:C8:59:9E:25:FE:37:83:36:34:40
X509v3 Authority Key Identifier:
keyid:3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:d5:01:70:ca:a0:2e:1f:75:14:00:73:88:16:46:c7:2c:5e:
d5:7e:96:d6:6a:53:28:37:49:c8:e7:de:c6:0e:b7:4b:64:f6:
cc:69:4f:7d:89:21:09:86:6b:16:f1:20:ec:68:7c:ff:5a:9f:
bf:72:9c:cc:e8:d9:42:65:6d:a0:90:45:d8:c8:78:c2:6a:19:
78:ca:e5:38:cf:81:6f:82:09:c4:05:e6:1b:7c:bd:d3:f7:f6:
2e:e9:83:51:c9:77:2a:7b:31:84:6d:05:90:cd:66:0e:8e:43:
5b:54:6a:3a:92:a4:5a:86:2b:80:df:24:2f:de:f1:92:09:18:
b9:65:9e:2c:e4:e5:3d:3a:70:32:4f:6d:1e:e5:9f:c4:a5:f9:
e0:5c:e3:64:de:60:fa:77:67:01:83:99:6c:0c:11:e7:58:9e:
fc:d9:77:83:d1:5c:69:99:b4:d7:78:9f:cd:dd:2d:df:f5:d4:
ae:06:ab:03:b3:ff:c8:6a:cf:57:7b:e3:7a:be:50:fd:71:08:
16:90:75:aa:8f:8e:b5:07:f5:c4:ff:82:58:e5:de:b8:09:17:
8f:23:33:67:27:ff:7f:f7:0a:25:ed:fb:90:ab:1c:2c:17:fa:
c7:89:ef:18:0f:21:ad:93:1a:7d:46:54:0a:93:3e:78:0e:53:
c0:7a:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:07:00 2026 by rpki-client