
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
File: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft (raw, json)
Hash identifier: r9dv2kcFTrIlq0dNIZ/OrifPBqq9KKub6QdRe1lJBUE=
Subject key identifier: 70:50:D9:D8:6D:DA:7F:31:7D:89:27:AB:EA:64:BF:E5:B4:D0:AA:F9
Authority key identifier: 3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B
Certificate issuer: /CN=A9134B4A/serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B
Certificate serial: 0176
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
Manifest number: 0165
Signing time: Fri 17 Apr 2026 04:42:20 +0000
Manifest this update: Fri 17 Apr 2026 04:42:19 +0000
Manifest next update: Fri 24 Apr 2026 04:42:19 +0000
Files and hashes: 1: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl (hash: ik3PiGROoPC0BeA2ub9pl9e3QyqV93vjVnAY9Kxkba4=)
2: A63B6120238711F08D2B4460C4F9AE02.roa (hash: Mv5NMKJDaa/NzdWkVZKytiM/KM2CZjH4Y/CRHIPgYiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl
rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134B4A, serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B
Validity
Not Before: Apr 17 04:42:19 2026 GMT
Not After : Apr 24 04:42:19 2026 GMT
Subject: CN=69e1ba2c-af9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:a6:58:b8:b2:3b:e6:da:aa:34:fa:c3:93:
ca:a3:61:9b:03:b2:68:05:b5:72:e1:7e:a8:40:99:
72:86:3a:71:f2:ed:60:cd:d1:c1:aa:41:e3:e2:84:
7d:ad:d1:cf:60:8a:0a:f8:74:4a:60:2f:20:16:53:
3a:b5:c2:c7:aa:a6:85:c5:9f:e0:a2:23:ea:da:02:
d1:d0:d0:db:50:90:0a:fd:3e:0e:80:bc:ce:25:9e:
60:c8:89:d0:06:6e:11:5a:8b:a4:2c:e1:91:4d:07:
7d:0e:9d:c1:f4:bb:7e:13:b8:d2:c7:dd:67:31:7d:
6b:a0:e7:ad:97:a7:3a:e7:56:d4:65:b4:6a:eb:bb:
b0:45:56:81:2e:87:a7:1d:9e:3a:ad:37:53:35:d2:
9a:86:37:b4:8e:d0:b8:7c:4a:59:22:92:51:fe:d8:
aa:6c:26:44:c5:ff:3c:96:43:52:74:59:1c:2a:da:
77:ec:a5:14:00:22:69:75:2c:d7:be:a2:21:32:24:
da:e3:71:9d:27:36:0f:92:5a:b7:30:97:99:e9:c9:
61:fd:de:e0:67:0a:ff:d5:9b:5b:22:8d:a1:74:db:
2a:8b:cd:00:55:18:cd:8a:f0:75:5d:07:d7:ca:b9:
dd:2b:d7:6c:6a:5c:d8:2f:e0:64:66:e0:d6:24:8f:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:50:D9:D8:6D:DA:7F:31:7D:89:27:AB:EA:64:BF:E5:B4:D0:AA:F9
X509v3 Authority Key Identifier:
keyid:3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ca:ec:68:7d:32:dd:83:be:1f:cf:6b:f3:23:84:11:65:17:
b0:7c:a7:8b:13:0a:b0:d8:a9:a4:58:64:62:79:c1:fc:ba:ab:
df:63:53:1a:ef:84:01:d3:dd:66:c4:6d:2d:62:6c:0d:34:5f:
2d:78:e8:a8:e5:d1:32:f5:f2:0a:93:bf:86:3d:c9:55:77:40:
0a:e8:49:48:4e:b2:9a:f0:fd:c4:66:d1:31:62:92:da:7c:43:
ef:12:79:fc:82:93:f5:3e:57:29:b8:7a:fe:96:67:b4:23:df:
d0:0e:e2:ea:23:5f:55:2a:4d:dc:5a:67:cb:e9:3a:a3:02:f0:
be:55:f5:20:9c:c4:fe:1f:f3:51:42:c2:e4:64:28:26:89:bd:
9d:66:75:a2:17:41:bb:37:be:d8:c6:e6:67:27:e4:5d:8a:21:
95:7b:f9:fe:7e:b5:8f:5d:a3:09:6e:98:0d:bc:8d:ba:e9:b2:
1b:ae:b9:8f:1d:76:81:a1:70:6c:6c:b6:eb:f6:09:fc:89:29:
2f:d6:64:4e:81:81:ca:9d:0e:0f:f2:c2:70:11:e9:b7:30:5c:
e0:47:1f:9b:2b:04:12:77:32:d7:08:68:86:ef:41:cd:66:fe:
8c:7f:64:84:fc:3e:62:a2:93:1a:fc:b3:bf:87:04:9a:b6:32:
bc:21:0a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:17:40 2026 by rpki-client