
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json)
Hash identifier: IsKDkgekfQUaATRqs+EENDm7tBlxmTOxvlB0/ku9juA=
Subject key identifier: 4A:5C:3E:81:53:04:3E:FB:D5:4A:54:D6:78:2C:6C:EC:5D:DB:CA:39
Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3
Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
Manifest number: F4
Signing time: Mon 27 Jul 2026 08:26:22 +0000
Manifest this update: Mon 27 Jul 2026 08:26:21 +0000
Manifest next update: Mon 03 Aug 2026 08:26:21 +0000
Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: ByvVacScLohgOCyVRbzCQxsMcFWS+5pupzR0V9rmQQ0=)
2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: Fl3h9ZkMvSkwu9/oPEGDkM57SG4asbpHPkhkIhKcKIA=)
3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: 47LsXWcwIKUuRyL+mT9zvEQa6j2H0OGo9Q7GJ+csjfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl
rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3
Validity
Not Before: Jul 27 08:26:21 2026 GMT
Not After : Aug 3 08:26:21 2026 GMT
Subject: CN=6a67162e-8cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:02:3d:c2:fb:8d:c9:44:3b:f6:1b:6a:62:
d0:5e:40:5e:83:d3:98:8a:7e:28:c3:01:33:b1:bd:
73:ac:c6:fe:00:bb:9d:ac:13:9f:8c:16:01:a3:12:
2f:24:bc:f0:62:71:5e:06:23:8e:a2:42:01:f5:e9:
d7:94:1b:92:94:8b:26:27:11:6f:86:21:f5:96:72:
b4:09:86:32:4e:f7:a1:c3:0a:ac:0b:5d:73:9e:34:
66:3f:c8:4b:2e:6c:e6:ab:f7:67:31:b9:5e:35:01:
7a:65:47:52:17:2d:18:8a:c2:f2:a4:1b:70:26:84:
69:c0:53:4a:22:f5:ef:5e:21:59:6b:25:e2:87:fa:
a2:7a:61:8b:06:53:80:57:0a:38:99:bc:69:6d:e0:
48:dd:19:75:0d:86:48:cd:fa:e6:2d:55:0d:b4:27:
40:af:e5:d1:26:4e:66:bf:29:7a:2d:d1:35:b6:b8:
29:18:8f:8c:44:1a:2c:4e:0a:b0:76:c1:63:94:a6:
6e:27:73:a6:64:99:ac:1a:7f:05:c5:d9:79:e2:75:
07:b0:c9:bd:c7:8f:70:9d:0d:6a:f2:24:6b:8a:81:
23:ec:bb:44:45:44:0d:09:34:c7:3d:1b:81:7d:dc:
5f:53:35:3e:23:39:c0:43:ae:59:61:c0:06:b2:72:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5C:3E:81:53:04:3E:FB:D5:4A:54:D6:78:2C:6C:EC:5D:DB:CA:39
X509v3 Authority Key Identifier:
keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ad:8b:04:26:f0:6b:6b:7c:3a:29:e7:d0:2e:6b:cd:0a:92:
4f:8e:bd:b8:2c:f5:07:2b:fc:36:82:7f:ba:5e:75:41:53:81:
a2:4b:b4:68:0a:15:72:39:da:c2:03:70:df:c6:b1:8c:ec:82:
d5:00:57:e1:42:78:a1:f4:db:0f:8f:12:16:d8:19:49:68:fc:
4b:71:eb:7c:b6:e2:65:5c:6d:e5:46:cf:ca:51:c3:c9:79:26:
25:74:ed:50:2d:a2:08:74:f2:30:3e:8e:c3:10:a1:08:c9:88:
e4:a4:e3:bb:08:e2:ce:c8:69:8f:ef:ff:3c:e9:78:40:2f:37:
a5:7d:94:64:b6:4b:b4:d2:c7:81:bf:b1:c7:18:70:18:d9:31:
2b:80:f2:f6:92:9a:5f:ed:93:cd:d5:2c:20:e0:83:ec:68:9b:
3d:09:3e:34:d6:4d:75:d0:d4:d5:ce:ff:fb:07:92:b2:3d:89:
01:fc:1b:7f:eb:1f:a0:b8:21:2c:5e:61:b0:d9:82:65:a8:0c:
fd:b0:90:b3:02:85:70:59:78:ea:4c:20:39:53:c8:13:d6:be:
f2:4f:b0:5a:2c:19:f0:4f:a9:c1:28:d0:f5:9a:36:1f:f1:21:
05:d0:8d:54:55:74:ad:99:6f:66:17:80:b0:e5:c7:75:c1:21:
b6:62:fb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:13:12 2026 by rpki-client