
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
File: pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft (raw, json)
Hash identifier: +qQLDx33agY6hH1mIxwv8NSH/ctVDP53+++GW9Z3gk4=
Subject key identifier: 6D:60:57:92:DA:F3:3B:8C:02:E4:12:61:8A:C0:FE:4A:5B:25:31:19
Authority key identifier: A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC
Certificate issuer: /CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
Certificate serial: 05CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
Manifest number: 05C2
Signing time: Mon 02 Mar 2026 02:49:18 +0000
Manifest this update: Mon 02 Mar 2026 02:49:17 +0000
Manifest next update: Mon 09 Mar 2026 02:49:17 +0000
Files and hashes: 1: pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl (hash: AKAxMvsJddwMGPLh5amUVlViBRI2JEvyycf5T57CnLE=)
2: 4CBECA5CF9C311EBBA064C70C4F9AE02.roa (hash: F6f3sqC/VrCexYL7KiqhHMWOLZTVDuTXvmAuEtkPuPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl
rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1482 (0x5ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DCFB, serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
Validity
Not Before: Mar 2 02:49:17 2026 GMT
Not After : Mar 9 02:49:17 2026 GMT
Subject: CN=69a4faae-001a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:25:f9:46:0d:67:b6:13:ae:11:3a:f6:b6:
5a:31:6f:9a:e5:dc:a7:01:cb:f5:31:2d:cd:c0:b2:
20:81:f4:38:be:57:87:5d:96:a9:bb:36:9a:20:94:
6f:49:75:80:0e:5e:40:ca:1c:35:58:2d:5d:7f:74:
3b:be:ab:40:3c:f2:61:69:a9:11:cb:67:03:42:11:
c7:9a:bc:bf:32:b8:05:4d:e9:9b:81:73:d4:59:e5:
a9:91:77:33:96:e8:78:1c:6f:24:cc:c5:b6:61:cb:
cf:f0:b4:8e:13:68:59:37:ed:34:e6:dd:2a:a4:67:
d6:fe:fa:a3:fc:52:e1:80:89:e4:35:2d:0a:01:3a:
52:47:11:5b:d3:a5:81:3f:96:ec:a6:1e:b1:f7:78:
e3:6e:77:3c:73:6a:c2:14:70:f5:a2:6c:b0:b0:14:
c3:c3:24:7d:4d:c2:b2:c6:3b:dc:96:7a:53:fb:69:
35:e6:45:86:00:0a:ba:90:d7:50:af:86:2e:15:e8:
dd:49:d5:22:69:ee:d9:de:4e:ce:5b:61:4d:e8:cd:
29:99:6a:86:a8:9c:6b:75:d3:3a:de:9e:19:c0:4b:
1a:f0:95:33:e6:c8:d3:35:ed:d4:4e:52:69:e2:0d:
da:99:28:d5:dd:38:91:9d:dd:76:6b:a7:0d:63:3b:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:60:57:92:DA:F3:3B:8C:02:E4:12:61:8A:C0:FE:4A:5B:25:31:19
X509v3 Authority Key Identifier:
keyid:A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:5f:19:14:20:de:98:06:16:3f:f3:d6:b1:65:c3:b1:13:0a:
17:83:de:ca:b4:e9:3b:84:2c:f5:d1:59:bb:e0:2a:d1:bd:41:
89:b2:2c:02:79:b1:0b:70:b4:a3:3b:41:84:f4:4b:12:7f:c4:
52:4e:c6:ba:db:16:f9:ca:42:25:d4:d7:92:77:f6:15:11:8c:
de:6b:94:5e:dc:b7:d1:ad:f1:5b:67:bb:a6:c1:a1:d4:01:fd:
6c:a8:7b:2e:0d:3d:55:34:f1:a4:82:27:01:f4:48:6a:ac:d1:
f1:0b:bc:96:d9:72:ac:56:aa:28:52:65:18:a6:49:27:52:3c:
83:e6:13:71:e4:74:1d:02:5f:7c:42:a0:9d:91:02:1d:10:21:
26:7c:40:de:05:05:5c:7d:eb:72:cf:bf:85:25:5b:73:38:17:
3b:57:4e:5a:f6:1a:56:2f:6a:ac:d9:68:39:2d:90:f0:da:57:
30:01:03:c3:a1:38:09:53:d6:b8:d2:4f:49:22:ec:d8:d0:fe:
19:db:57:a5:b7:2b:9d:67:91:d9:7f:da:a8:2a:39:05:fe:ae:
b1:f8:38:2e:c9:fd:46:53:eb:c6:e6:c6:46:b7:cd:0d:d9:ea:
52:ea:bb:7b:6b:21:73:12:d8:34:32:c9:93:f1:07:a3:5a:21:
44:2b:4b:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURDRkIxMTAvBgNVBAUTKEE1MTc0MURDMTlDQjkzOTA0MDI2NzZBMDNBMUZEQUVC
RTBFN0YyQkMwHhcNMjYwMzAyMDI0OTE3WhcNMjYwMzA5MDI0OTE3WjAYMRYwFAYD
VQQDEw02OWE0ZmFhZS0wMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsywl+UYNZ7YTrhE69rZaMW+a5dynAcv1MS3NwLIggfQ4vleHXZapuzaaIJRv
SXWADl5Ayhw1WC1df3Q7vqtAPPJhaakRy2cDQhHHmry/MrgFTembgXPUWeWpkXcz
luh4HG8kzMW2YcvP8LSOE2hZN+005t0qpGfW/vqj/FLhgInkNS0KATpSRxFb06WB
P5bsph6x93jjbnc8c2rCFHD1omywsBTDwyR9TcKyxjvclnpT+2k15kWGAAq6kNdQ
r4YuFejdSdUiae7Z3k7OW2FN6M0pmWqGqJxrddM63p4ZwEsa8JUz5sjTNe3UTlJp
4g3amSjV3TiRnd12a6cNYzt18wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1gV5La
8zuMAuQSYYrA/kpbJTEZMB8GA1UdIwQYMBaAFKUXQdwZy5OQQCZ2oDof2uvg5/K8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRENGQi9BQUVBMERDMEY5
QkYxMUVCODAyNDVFNkFDNEY5QUUwMi9wUmRCM0JuTGs1QkFKbmFnT2hfYTYtRG44
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BSZEIzQm5MazVCQUpuYWdPaF9hNi1Ebjhydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RENGQi9BQUVBMERDMEY5QkYxMUVCODAyNDVFNkFDNEY5QUUwMi9wUmRCM0JuTGs1
QkFKbmFnT2hfYTYtRG44cncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdF8ZFCDemAYWP/PWsWXDsRMKF4PeyrTpO4Qs9dFZu+Aq0b1BibIsAnmxC3C0
oztBhPRLEn/EUk7GutsW+cpCJdTXknf2FRGM3muUXty30a3xW2e7psGh1AH9bKh7
Lg09VTTxpIInAfRIaqzR8Qu8ltlyrFaqKFJlGKZJJ1I8g+YTceR0HQJffEKgnZEC
HRAhJnxA3gUFXH3rcs+/hSVbczgXO1dOWvYaVi9qrNloOS2Q8NpXMAEDw6E4CVPW
uNJPSSLs2ND+GdtXpbcrnWeR2X/aqCo5Bf6usfg4Lsn9RlPrxubGRrfNDdnqUuq7
e2shcxLYNDLJk/EHo1ohRCtLdQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:19 2026 by rpki-client