
$ rpki-client -vvf rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft
File: PnrrKf5aoynEr0n-NgOYf_HoWJg.mft (raw, json)
Hash identifier: B+FOOe/OuQYWJToJAfzM7sDqtW0HWRiFP3uljKEyDN8=
Subject key identifier: 71:F8:ED:14:33:55:BA:B0:E4:2F:58:F3:35:0C:88:25:37:74:70:6E
Authority key identifier: 3E:7A:EB:29:FE:5A:A3:29:C4:AF:49:FE:36:03:98:7F:F1:E8:58:98
Certificate issuer: /CN=A912465F/serialNumber=3E7AEB29FE5AA329C4AF49FE3603987FF1E85898
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnrrKf5aoynEr0n-NgOYf_HoWJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft
Manifest number: 0E
Signing time: Sun 01 Mar 2026 10:37:24 +0000
Manifest this update: Sun 01 Mar 2026 10:37:24 +0000
Manifest next update: Sun 08 Mar 2026 10:37:24 +0000
Files and hashes: 1: PnrrKf5aoynEr0n-NgOYf_HoWJg.crl (hash: bgLJEzUST7eT+RQLGyy7KDqZgC5hcba3ygTqh6zYMQ4=)
2: D693D3C2064711F1AE681DED2D3D8C67.roa (hash: R08xIozBjqOPEnc9ObPFb2XMyk15jqEtA+6f1tT4Fic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.crl
rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnrrKf5aoynEr0n-NgOYf_HoWJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:37:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912465F, serialNumber=3E7AEB29FE5AA329C4AF49FE3603987FF1E85898
Validity
Not Before: Mar 1 10:37:24 2026 GMT
Not After : Mar 8 10:37:24 2026 GMT
Subject: CN=69a416e4-c27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fe:8b:a8:2f:de:6a:6d:47:0f:44:47:db:42:
30:24:57:6e:65:7e:86:0b:61:b0:66:79:3d:28:3b:
89:94:db:d3:91:cb:bb:34:d2:80:d4:23:ea:95:ed:
01:b3:94:13:e4:5f:38:38:ff:a1:09:cc:4e:42:b9:
1f:66:72:ad:7f:31:eb:d0:e5:7c:d8:38:f9:38:3d:
44:7d:62:0b:73:d2:65:d6:c1:76:0b:af:f1:14:68:
c6:93:7a:1f:37:87:3e:0a:1b:b8:3f:de:b5:6d:78:
40:d9:c3:a5:7b:ad:12:69:45:5c:41:e5:99:60:45:
44:de:7c:a4:1a:33:d7:59:81:af:fa:07:89:e2:7f:
99:24:d8:15:d2:61:1f:bc:8a:11:22:df:11:f2:34:
6c:c7:80:c7:7f:22:34:94:58:34:5e:78:04:36:fc:
21:b9:8f:e0:65:07:7c:b8:f4:a5:de:54:32:e5:c9:
fe:c2:6f:9c:1d:bd:d7:c1:bb:dc:03:12:0b:8c:48:
31:f8:68:fe:14:90:b5:55:bb:a3:16:69:38:99:50:
dd:a7:24:92:8a:33:87:a5:3d:0d:5f:b7:bc:c4:4a:
e6:9d:d5:51:9d:35:6e:58:d6:26:67:6b:cb:02:cd:
21:a0:eb:9a:e8:99:07:7f:a4:49:19:16:19:8a:9e:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F8:ED:14:33:55:BA:B0:E4:2F:58:F3:35:0C:88:25:37:74:70:6E
X509v3 Authority Key Identifier:
keyid:3E:7A:EB:29:FE:5A:A3:29:C4:AF:49:FE:36:03:98:7F:F1:E8:58:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnrrKf5aoynEr0n-NgOYf_HoWJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:98:ab:8e:5d:cb:28:44:e3:d3:fa:e2:50:9a:ae:ff:d3:9b:
54:c7:48:5f:9b:a2:f4:2f:2d:3b:61:f5:60:57:79:c4:44:36:
b1:0b:51:fc:70:18:8e:ea:ea:34:68:d1:b1:da:94:55:6f:69:
fd:a0:40:c2:b5:53:c9:ba:65:a7:44:3c:c6:f7:81:84:9d:5d:
76:fa:7e:c5:bf:14:8d:ec:e5:f6:82:e6:5f:05:e2:6c:66:6d:
ee:cd:cf:25:ac:1d:92:b6:21:83:ba:bd:a6:b8:40:bd:03:84:
14:b5:0c:ba:a0:6b:86:0d:9a:8a:84:b9:e7:b0:38:76:a1:49:
55:a0:49:1a:7f:54:21:f2:bb:26:65:4c:1e:b8:56:a0:b6:ee:
54:fb:37:30:fc:7f:ab:3b:33:ea:52:73:9a:7e:d3:74:42:8c:
ff:2a:77:0d:ac:ac:bb:b4:4d:3b:26:18:61:ba:40:58:47:2b:
d0:a2:96:a2:f0:e1:4d:b2:4a:db:1e:f2:f6:0c:fc:5c:53:c5:
f0:8a:b4:a7:9d:d7:1b:47:4b:e7:fe:01:9c:22:e6:e8:52:42:
59:04:95:25:7e:4d:d8:a4:81:cf:dd:a4:10:e9:67:d1:ec:b9:
f8:b1:7f:f9:a4:1d:11:cb:42:77:82:5f:10:8d:0b:c4:f2:4f:
15:2c:0a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:35:02 2026 by rpki-client