
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft
File: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft (raw, json)
Hash identifier: jLB52T+PLk3iBB0NVnzKj1LGZDm060NIhtwmC1jMoTE=
Subject key identifier: BD:E4:E7:B2:E9:86:79:BC:1F:85:5D:30:25:DC:0C:31:25:3A:13:C8
Authority key identifier: 3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F
Certificate issuer: /CN=A91A423D/serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft
Manifest number: 7F
Signing time: Wed 17 Jun 2026 07:52:54 +0000
Manifest this update: Wed 17 Jun 2026 07:52:53 +0000
Manifest next update: Wed 24 Jun 2026 07:52:53 +0000
Files and hashes: 1: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl (hash: Y7XKBFBQvfuHsOj6SA8EM6PBq2vtZff2KKxxWJj9bvk=)
2: 2ECF71C4B0A111F0B537573FC4F9AE02.roa (hash: 2OKnQg5qjmkKGEleLvBDwSd2bcC+02+QaHkt9b4fvyA=)
3: DEE9FAB2B0A011F0B752B713C4F9AE02.roa (hash: N9DbzZhWjh9222Zzdpzo8MyanGXgo1s4o7cCfBAxME8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl
rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A423D, serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F
Validity
Not Before: Jun 17 07:52:53 2026 GMT
Not After : Jun 24 07:52:53 2026 GMT
Subject: CN=6a325256-de64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ff:a7:31:e3:f8:7a:27:c2:c0:71:0d:e3:03:
5a:70:10:f4:87:d4:2d:57:47:e7:06:d7:26:dd:d5:
ba:ca:57:88:33:31:93:bc:54:bb:bb:2b:7a:06:90:
7c:7a:69:02:fb:8d:79:2b:37:c8:ad:6c:09:99:fc:
7a:b5:27:90:b3:1a:bf:7a:75:12:1a:83:ae:cf:2a:
0c:cd:89:a8:08:b0:cc:e3:a8:ab:37:e7:28:5e:ca:
29:2b:f4:82:d7:17:c0:61:06:00:74:e2:e8:e5:ed:
05:86:e4:86:cc:f0:82:bf:51:21:40:b3:af:74:0b:
1c:7e:e4:83:6f:58:76:f4:9f:d1:6c:0f:db:f2:f2:
bb:c2:e7:88:4e:6d:82:e6:21:82:5b:98:d0:71:f2:
71:22:74:9e:bf:5a:89:e9:fc:3e:83:9a:c3:aa:90:
21:89:45:e1:89:67:4c:37:38:91:d9:fe:c4:cf:32:
ee:e0:d6:a0:ef:68:96:77:05:f5:91:57:a0:4b:71:
44:d1:6c:f3:8a:80:03:ce:be:62:ec:91:6f:67:2b:
66:ef:65:26:9b:03:60:84:86:26:13:ce:92:94:67:
80:23:68:f8:7a:9f:d9:fa:f7:f1:5f:51:89:13:b7:
ef:f9:53:65:6a:44:8e:ad:b3:7a:7f:da:45:c8:dd:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E4:E7:B2:E9:86:79:BC:1F:85:5D:30:25:DC:0C:31:25:3A:13:C8
X509v3 Authority Key Identifier:
keyid:3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:fa:d8:28:97:58:12:84:ea:9b:2e:70:4f:35:32:b0:36:3f:
38:fa:1c:86:46:26:b2:33:ce:d7:59:2e:b3:d9:00:b1:99:26:
ae:a4:32:15:0f:ca:03:00:de:fb:8c:87:23:34:f9:35:17:00:
cb:35:87:ab:81:fc:c7:7a:60:8d:fb:8c:b5:8c:8f:3c:cf:8b:
ca:5f:16:bb:45:b1:98:83:90:15:e8:40:0c:bd:f5:4d:75:2f:
dc:76:3d:2e:1d:64:80:a9:51:af:77:2c:57:11:c0:b5:48:5c:
06:9e:94:18:00:f7:ee:15:1b:8e:3f:38:a3:7c:71:6a:88:8c:
1e:90:1e:ef:59:7a:93:3a:73:98:da:d7:0b:8b:fb:70:d6:d7:
63:ed:c3:cd:80:0c:28:b6:97:ad:27:78:27:f6:5a:6c:5d:da:
9e:f4:b4:89:32:bf:19:93:24:e9:9c:d1:f0:38:c6:1c:1f:f7:
3f:1e:bc:d0:3e:67:b7:65:c2:22:83:48:93:17:0c:c6:7c:02:
5e:62:20:32:49:ee:20:4b:04:e9:c7:29:7d:04:f0:5c:37:0f:
97:d8:ff:c7:36:2c:aa:ba:19:2e:75:ab:20:73:c7:dd:84:1c:
09:fc:7f:46:ba:b7:7b:00:da:45:60:bc:9b:56:da:d5:eb:06:
aa:10:b1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:01:24 2026 by rpki-client