
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
File: pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft (raw, json)
Hash identifier: ogdSs3w9Egj4puON6TjbICuSrE3I64fysVNfZ03fvQg=
Subject key identifier: AB:DF:C5:1E:30:A7:E9:6C:5A:06:67:DD:67:8B:61:A5:01:0A:DC:31
Authority key identifier: A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC
Certificate issuer: /CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
Certificate serial: 0636
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
Manifest number: 062D
Signing time: Tue 22 Sep 2026 22:26:22 +0000
Manifest this update: Tue 22 Sep 2026 22:26:21 +0000
Manifest next update: Tue 29 Sep 2026 22:26:21 +0000
Files and hashes: 1: pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl (hash: SxMaXOVU7Edx0jkOlLG+TBBmrDYhhUBQcXGukaX6NVY=)
2: 4CBECA5CF9C311EBBA064C70C4F9AE02.roa (hash: oGgE9YL0l71OjqSUI9CCSHMTmtmqHzEUM2urYheCFM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl
rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1590 (0x636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DCFB, serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
Validity
Not Before: Sep 22 22:26:21 2026 GMT
Not After : Sep 29 22:26:21 2026 GMT
Subject: CN=6ab3008e-dcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:7d:44:51:74:57:b6:ee:d0:a9:57:4e:de:
99:9f:ff:fb:3f:78:cb:3c:a5:6a:fb:11:97:a9:47:
a7:00:83:f9:38:1d:c5:45:7e:20:2e:3f:af:ea:a3:
df:0e:22:7e:2e:63:8d:e0:36:fa:2e:6a:47:a3:b1:
aa:7e:12:67:2d:f8:e3:5b:63:86:38:43:8a:ba:0a:
fa:96:c8:60:0b:c2:98:ba:6d:8a:a4:6f:73:bb:28:
1f:dd:9d:6b:9c:aa:26:71:4f:24:05:26:63:c3:16:
46:08:cf:d5:4d:47:e1:82:bb:aa:62:e7:b4:11:63:
9e:3f:e5:9e:99:33:ee:fd:7f:ac:8f:08:c7:ea:10:
f1:f6:01:d4:8a:5b:5f:8a:71:df:1a:81:32:80:02:
4d:b6:5a:51:4c:ee:1a:a1:39:f4:9a:02:49:61:3a:
f2:0a:88:8e:ff:ea:b4:cb:32:6e:32:f1:24:6b:84:
13:17:37:37:06:61:9f:6c:d0:14:48:8f:1d:01:85:
80:43:a5:ea:b3:33:91:5d:2c:24:00:3c:ab:9d:32:
17:af:13:67:cf:7a:e0:d6:22:59:5a:19:d0:44:86:
86:ca:35:2c:9e:42:eb:2b:d5:d2:fd:36:b9:82:00:
d8:83:30:df:b9:a6:e3:38:ed:2e:ea:41:54:49:60:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DF:C5:1E:30:A7:E9:6C:5A:06:67:DD:67:8B:61:A5:01:0A:DC:31
X509v3 Authority Key Identifier:
keyid:A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:3b:8c:6b:22:87:61:09:30:a2:ee:35:2f:0d:a2:40:0e:29:
a7:a2:22:df:90:08:18:84:17:06:30:19:c9:99:1d:72:d6:56:
a4:b1:9f:cd:f5:47:df:c1:02:f2:93:b5:98:e3:87:3d:2a:14:
71:ef:76:e1:2b:87:54:b5:c3:45:06:20:14:70:24:39:13:97:
f9:e3:8d:22:f4:38:6c:0f:3b:31:7a:1c:f5:fd:d6:35:f3:01:
70:e9:74:73:8a:65:a1:91:e5:8a:bd:9f:25:cf:d1:68:27:7b:
26:b2:94:bf:a2:cf:43:94:4e:39:ec:d1:0a:b8:98:52:d1:35:
b6:7f:22:d9:1b:44:58:3e:f9:0d:4a:33:46:bb:ea:2c:25:aa:
35:e8:02:de:2f:1c:0e:a3:ee:71:ff:a4:03:dc:0c:e6:38:b0:
ef:78:07:89:e1:08:38:53:f3:5b:bc:8f:b1:09:74:7d:96:cb:
4b:37:0e:af:5b:99:ae:f5:84:17:19:f2:e8:a4:8e:f6:15:11:
9e:a0:82:67:87:bf:af:75:a3:f0:df:20:87:30:db:f1:6f:12:
d7:e2:7b:e9:35:c9:5b:7e:2f:74:c2:a6:9f:f8:bb:a6:64:3a:
a0:d2:94:f4:92:5e:3b:cc:a4:ad:d0:f9:bd:4e:d1:fb:a9:d2:
02:de:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:51:22 2026 by rpki-client