
$ rpki-client -vvf rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
File: PyDCnh1-UV3z49hapE51H4Fycxo.mft (raw, json)
Hash identifier: MNKjCXJOcnY5p1QTVIsMF2CoAr2ZpMvGlUSg34gunE4=
Subject key identifier: AC:CA:F0:22:31:27:E4:EA:8E:F1:F5:AB:75:87:40:77:CB:94:D5:C6
Authority key identifier: 3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A
Certificate issuer: /CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A
Certificate serial: 0214
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
Manifest number: 020C
Signing time: Mon 27 Jul 2026 04:37:49 +0000
Manifest this update: Mon 27 Jul 2026 04:37:48 +0000
Manifest next update: Mon 03 Aug 2026 04:37:48 +0000
Files and hashes: 1: PyDCnh1-UV3z49hapE51H4Fycxo.crl (hash: MhIPdtsjWlFC4OiFqK3VVezg7pvJFd0J7EdPAleW9S0=)
2: 503E43126E5E11EEB39D9E48C4F9AE02.roa (hash: 0Pp/jipwHz+dDFZW3SdujQfWz5D9Ej7JkD74IDbQ7uI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl
rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91210E0, serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A
Validity
Not Before: Jul 27 04:37:48 2026 GMT
Not After : Aug 3 04:37:48 2026 GMT
Subject: CN=6a66e09c-0c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:0c:1c:f3:3e:fc:2f:11:0a:aa:23:70:67:
7d:0b:4d:92:c3:7c:f4:b2:bb:fd:ad:9c:0e:b0:da:
65:70:13:ae:8c:e0:23:33:d9:a1:f1:1a:5d:e5:69:
dc:61:98:27:35:8f:9c:38:53:4b:2e:47:0c:d9:ed:
39:11:16:03:a1:e9:78:71:a6:c0:9d:1d:3d:33:ae:
50:75:a5:46:69:f7:50:4a:6f:d6:43:d8:c1:45:ec:
96:77:f0:13:32:10:18:31:62:2d:4d:7b:14:33:e8:
ad:cb:f0:cd:0f:fc:4c:99:f1:c0:f4:17:5e:c7:cd:
01:0f:22:7e:a0:09:0f:1f:53:bf:95:0d:6e:01:6e:
81:35:86:11:07:4e:1f:c9:ae:36:91:f3:26:23:0e:
90:97:ec:f9:9c:c5:a1:cf:90:a3:3b:16:97:da:c7:
6a:a8:19:83:a4:b9:ea:5c:9c:fb:13:df:da:d6:0f:
d5:0c:03:a9:6d:21:20:30:c1:b6:ba:f1:4d:9d:d8:
d0:4f:cc:a0:00:1f:47:34:ef:15:d2:b9:00:6e:7a:
8b:d1:a0:5e:f2:dc:7a:c6:84:20:a2:e4:e6:2f:c3:
56:18:cf:91:5e:b3:f5:26:65:91:72:bb:90:8c:c4:
bc:28:7f:49:21:d4:43:b1:66:6b:f2:3e:32:6b:7f:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CA:F0:22:31:27:E4:EA:8E:F1:F5:AB:75:87:40:77:CB:94:D5:C6
X509v3 Authority Key Identifier:
keyid:3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:36:42:25:61:40:d1:f0:3a:21:49:a0:45:8a:39:5a:4a:2e:
59:8a:f3:be:62:a9:d9:75:8f:91:25:eb:ed:1c:e0:8e:de:00:
90:a3:0e:c8:da:be:9f:2f:90:88:2e:2e:4b:a2:a0:b7:71:ac:
d4:6a:70:7a:7f:e0:9e:51:56:85:1a:71:4f:7e:d7:99:47:ea:
fc:e6:fe:fe:21:50:81:e4:fb:49:60:fb:fc:95:4d:7d:3b:68:
c8:b3:1b:40:5e:5b:bf:6f:85:07:5d:af:74:a0:8f:fc:fa:ff:
ca:ae:ba:ee:77:e0:17:41:cf:ca:a1:3a:27:bc:19:84:17:f2:
e8:e3:9f:1f:10:50:29:15:ab:7a:11:d1:b5:c7:e3:84:56:25:
af:0c:f1:f0:db:1f:00:8e:e2:86:b4:45:fe:a7:96:31:ff:82:
06:ff:dd:cb:33:42:91:dc:d5:26:ea:89:32:da:c7:86:b2:22:
9f:ec:f0:db:0d:b9:bd:aa:4d:d8:d9:6e:40:0e:c4:ca:50:10:
e6:84:6a:fe:80:5d:27:b4:28:5a:ad:72:10:a3:0f:49:f4:2c:
b7:4c:13:1c:76:93:d6:42:9b:23:44:92:2c:f3:f5:76:f1:da:
73:81:f8:d7:14:0d:1b:9d:0a:bb:c6:1a:55:06:9f:88:94:ce:
fd:a4:1f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:20 2026 by rpki-client