
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
File: PgYolveWFAxkBV5H1FMISCOnCCQ.mft (raw, json)
Hash identifier: OTf08YjX+9SxuS0CG6X+/Fo4xtfikAfF8MAvChF9V0c=
Subject key identifier: C5:17:C1:1C:6F:1F:EA:D9:3C:D4:5F:56:3D:2E:44:F1:BE:9C:FC:81
Authority key identifier: 3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24
Certificate issuer: /CN=A917E65B/serialNumber=3E062896F796140C64055E47D453084823A70824
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
Manifest number: EA
Signing time: Mon 27 Jul 2026 08:32:50 +0000
Manifest this update: Mon 27 Jul 2026 08:32:50 +0000
Manifest next update: Mon 03 Aug 2026 08:32:50 +0000
Files and hashes: 1: PgYolveWFAxkBV5H1FMISCOnCCQ.crl (hash: 3xWuB/Yn9uRAcGBKrEk9JzzbQe1l1TjrSxfh/ReiB8k=)
2: B7498170318011F0A5A76C39C4F9AE02.roa (hash: UbYb0P8FE3F+HvemibXz0dMD4w6gFMZ7kKT3m10twQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl
rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E65B, serialNumber=3E062896F796140C64055E47D453084823A70824
Validity
Not Before: Jul 27 08:32:50 2026 GMT
Not After : Aug 3 08:32:50 2026 GMT
Subject: CN=6a6717b2-d47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:69:6f:9c:bd:ed:d0:e7:13:ba:53:cc:78:
25:a6:30:09:7e:29:cf:6a:c7:c8:7d:1a:bd:97:01:
3a:e1:58:43:ab:fa:01:de:4d:27:12:ac:b0:dd:a1:
f3:77:29:7d:66:b1:6f:68:a4:b8:e5:fd:86:4d:ac:
39:fd:60:39:9a:9f:b7:20:f0:a3:22:23:c0:53:f9:
bc:b5:4f:44:6c:0b:44:cf:0f:5a:c3:1a:25:1f:1e:
ec:d7:01:09:3f:b6:82:b5:3c:e8:7b:ab:0f:5b:bf:
51:e6:72:8e:22:ca:31:9a:93:d3:fb:1b:88:54:4d:
8b:12:f8:d6:d2:bf:d7:8f:99:b6:cf:a2:ec:6d:b3:
02:03:5c:2c:85:b7:9f:75:4a:a6:c2:fe:af:c4:77:
f6:78:f6:00:98:ec:cc:0a:89:b2:80:18:de:89:4f:
2d:ac:85:0d:98:81:a6:7f:66:da:a0:13:ff:e6:7a:
16:2e:87:d7:ef:52:98:1c:af:17:49:d5:cd:bd:66:
0e:15:6c:8d:81:25:99:d1:d9:a0:46:d5:5e:4b:0d:
50:39:13:f8:3b:16:27:f3:7f:d6:9f:43:1e:89:bb:
c6:2d:ed:84:ff:cc:65:70:ef:57:82:34:f9:90:8a:
98:06:41:d4:af:98:2b:fd:85:db:5c:5d:0c:ff:85:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:17:C1:1C:6F:1F:EA:D9:3C:D4:5F:56:3D:2E:44:F1:BE:9C:FC:81
X509v3 Authority Key Identifier:
keyid:3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:66:58:6e:97:0e:01:74:b5:e0:af:45:fe:60:45:78:1d:9a:
02:ac:0a:7a:2d:66:e2:aa:a4:76:cd:6a:ac:93:c7:f7:b6:10:
ed:59:48:34:9d:97:67:34:5e:8d:e5:b4:97:5e:85:ae:cb:3d:
c7:65:86:85:b3:c9:cd:33:aa:dc:b2:cf:e8:01:f2:fc:6a:fb:
a6:e8:9e:4c:97:9e:42:a1:de:ea:d1:bf:28:b1:fd:78:3d:b3:
4a:ab:e6:7d:32:cb:7b:8a:90:0d:20:20:98:02:66:58:a2:84:
1b:73:24:c7:83:c2:1c:22:f1:bc:20:3a:e6:03:6f:84:1c:de:
85:95:c8:14:bc:cf:01:ca:a3:69:92:89:d9:5d:51:f9:28:c2:
92:69:6c:43:b7:50:3f:00:8b:2a:44:91:5a:67:27:1d:59:be:
f8:05:4a:44:51:d7:ec:a8:8c:4f:18:a6:ff:f2:50:ad:ba:28:
74:2c:ab:88:e8:5b:17:bf:e6:92:c6:92:27:e9:18:0d:2e:41:
dd:d4:87:b5:b1:e9:53:70:6b:48:69:a6:2f:86:d5:0e:d9:54:
20:4e:6c:be:49:1a:f5:4e:71:a2:cb:cf:3c:fa:db:42:75:20:
23:fb:20:da:4a:f9:80:de:44:0b:2c:f7:86:a3:d4:77:53:a1:
d8:85:69:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:23:05 2026 by rpki-client