
$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json)
Hash identifier: vmJSIVIwStbtPGHd7RH1t+WVaYwlmuRFmBHdMoNy8E0=
Subject key identifier: 09:0D:A9:25:DB:0E:CC:F6:DB:02:AD:80:28:B0:72:F1:10:BE:31:04
Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1
Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
Certificate serial: 0C05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
Manifest number: 0BFA
Signing time: Sun 01 Mar 2026 23:45:49 +0000
Manifest this update: Sun 01 Mar 2026 23:45:47 +0000
Manifest next update: Sun 08 Mar 2026 23:45:47 +0000
Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: shqDPfMqnqACx6I8BWCtFjO9W/+lhbE7wC095HYDL0A=)
2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: CX6yXnKGdi8jjMTybg2rPNEGWkbIU8U8qz9wOXbOt/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl
rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3077 (0xc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
Validity
Not Before: Mar 1 23:45:47 2026 GMT
Not After : Mar 8 23:45:47 2026 GMT
Subject: CN=69a4cfac-ee5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:64:e4:ba:e7:d0:cc:e9:31:57:86:c9:f4:7d:
b0:d0:f3:8d:3e:47:a9:04:e5:09:af:fa:f1:9d:0f:
77:e2:8b:d7:64:cd:9c:a9:61:d3:40:38:bd:b7:7e:
f4:14:01:09:22:ef:8b:f1:6a:85:03:fe:b5:c0:1e:
b3:1e:4b:23:e3:f7:ed:89:85:9a:a5:d5:33:77:f2:
31:02:bf:93:58:3d:00:73:93:70:19:44:4f:1b:9f:
62:b2:ea:26:21:d4:2a:cd:43:19:1f:21:bd:4b:13:
c9:05:ff:19:f6:a0:e5:e0:32:c5:e7:64:fe:85:ae:
b4:ed:02:5d:77:65:c9:10:1b:5c:ef:f5:bd:80:fb:
df:53:1b:b3:99:a8:a0:5c:65:e2:72:d9:91:3b:5f:
23:05:f1:29:3c:04:01:c4:9f:06:fa:03:77:36:67:
5f:cf:1e:56:1c:da:ca:8e:7c:c9:93:0f:14:76:db:
9f:3e:4c:1f:4a:11:63:ed:e0:df:fb:4c:ae:c9:d9:
ff:87:ca:f6:60:61:27:f9:a4:a4:f0:4d:10:cb:4f:
31:3a:a4:92:df:9a:7b:54:f5:fa:be:e4:e3:65:82:
c3:c3:c9:e4:35:11:36:c1:87:38:bf:66:c0:75:ee:
93:ee:ae:8e:69:ce:b6:fd:ce:a0:05:bd:d5:8f:31:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0D:A9:25:DB:0E:CC:F6:DB:02:AD:80:28:B0:72:F1:10:BE:31:04
X509v3 Authority Key Identifier:
keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:de:38:ab:fb:3f:22:1d:3d:be:32:54:3a:a0:66:ef:e0:be:
ae:8c:86:63:9d:44:81:ef:44:4d:91:35:24:0d:e3:17:ce:c7:
c7:58:a0:69:5c:82:23:87:7c:05:b2:10:6f:78:87:a5:23:0d:
af:85:d8:a6:13:79:34:ac:31:8d:be:c7:a3:79:67:d7:90:24:
08:0c:20:8d:05:e6:70:d9:c8:cc:e3:f2:3a:85:10:ad:3e:32:
5c:96:a0:d5:a2:55:10:3a:db:60:64:3d:7e:1d:51:97:32:44:
a2:80:72:6c:48:4c:f4:11:ae:af:81:86:f1:67:ff:58:33:db:
69:36:91:65:cf:65:53:b7:45:fa:03:0a:f7:62:19:d1:41:c1:
72:a3:af:c1:4b:89:1b:87:7a:16:c2:37:3e:8b:c1:df:8e:4e:
b6:2e:5c:07:2e:e3:17:05:4e:17:1f:0e:b5:6b:b1:b2:72:f6:
ac:8e:21:fc:63:0f:bc:2f:f2:1a:3c:ca:e7:c9:3b:e0:33:34:
86:04:29:50:08:48:d1:3e:74:9f:fe:1e:e5:73:fd:57:29:74:
4c:29:ff:4f:a9:3d:16:5a:e3:b7:b6:29:7b:c9:56:ff:69:b6:
b8:f8:6d:35:b5:0b:78:6b:51:28:e8:e4:c0:f2:f9:11:9a:50:
02:07:2d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:30 2026 by rpki-client