
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
File: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft (raw, json)
Hash identifier: 8+epZrVR4sWJUqMFPN0ir+nSwxU2QZiHJLOlZVSOozk=
Subject key identifier: 29:97:01:41:0C:DC:D8:B4:E8:A1:DA:9C:22:D8:D7:0D:1F:AE:DF:FC
Authority key identifier: 3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B
Certificate issuer: /CN=A9134B4A/serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
Manifest number: 014B
Signing time: Sun 01 Mar 2026 06:19:27 +0000
Manifest this update: Sun 01 Mar 2026 06:19:27 +0000
Manifest next update: Sun 08 Mar 2026 06:19:27 +0000
Files and hashes: 1: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl (hash: SRZINOsMj8O3NIEn6vYtoTOBXVGsxACBQKGKgiCQaDo=)
2: A63B6120238711F08D2B4460C4F9AE02.roa (hash: OMBfI+nHRaL8yyAWZKMqye5oo33aQnkkup2yUiK7Glg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl
rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134B4A, serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B
Validity
Not Before: Mar 1 06:19:27 2026 GMT
Not After : Mar 8 06:19:27 2026 GMT
Subject: CN=69a3da6f-d4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d3:bd:75:7a:9e:20:fa:e4:bb:3b:d9:57:f1:
c8:e4:63:2f:08:6e:2b:3e:9b:c9:54:8f:15:6a:49:
70:60:2a:d1:5f:2f:11:ae:76:27:cc:64:ff:48:85:
73:de:d2:ee:70:ff:fe:dc:9f:2f:af:25:2e:58:c7:
b8:97:21:de:4b:00:14:6a:02:b3:ae:0c:0f:87:6a:
0d:42:8a:ed:94:df:83:a8:8c:4a:0b:5f:7a:18:65:
32:04:58:53:c5:5a:a2:35:a3:c4:52:68:4e:a0:c3:
17:03:17:6c:71:d2:83:f4:e1:78:b1:63:e2:32:45:
40:54:1e:63:88:db:93:62:c4:a2:12:60:54:f1:d7:
b2:ed:55:8e:d6:96:d6:14:fe:48:1b:63:e6:2d:a5:
1e:20:97:91:1a:2c:06:3b:75:3e:0c:d5:99:4d:dc:
29:32:32:f8:bf:1b:4e:b8:86:63:dd:8f:b1:4d:b6:
22:dc:4e:43:9a:93:c0:d6:99:14:8e:db:fe:0d:5e:
0d:52:73:88:0f:b1:2a:99:a2:0a:2a:63:25:cc:05:
c5:64:7e:ad:0e:67:e3:de:99:be:7b:92:8b:f5:1f:
af:98:92:ed:cb:e7:42:0f:20:e2:a1:cd:25:1b:be:
18:a9:e4:c0:fc:33:13:8d:c1:43:d0:3f:df:0c:7a:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:97:01:41:0C:DC:D8:B4:E8:A1:DA:9C:22:D8:D7:0D:1F:AE:DF:FC
X509v3 Authority Key Identifier:
keyid:3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:63:8e:78:c5:95:a5:ce:6d:26:ce:8d:d7:53:d0:8d:2d:76:
ac:30:c0:bc:a4:7a:7a:c9:40:84:d4:c4:3e:f1:5a:d5:94:ea:
ee:f1:13:a7:25:47:db:2c:6e:45:d6:55:32:86:16:0a:a0:76:
85:c1:eb:49:c2:c2:80:a1:7e:d1:c0:31:9e:0d:87:c8:08:7e:
10:89:c1:d2:fb:9a:9a:9e:ac:b5:5b:8e:62:21:c2:b8:f0:26:
6c:66:3c:01:f4:5a:43:70:d9:d0:3e:14:3d:aa:02:73:99:44:
5a:e3:9d:db:0f:5d:9e:4c:87:4d:61:eb:01:2b:ea:02:5f:0d:
0b:b7:82:7f:0c:e5:8b:6e:76:a3:1a:82:cf:ae:75:dd:28:f3:
a2:fc:6e:b1:99:17:a4:37:8f:a9:f8:c2:37:01:cf:41:0a:38:
68:13:da:4c:af:52:75:aa:d2:72:21:17:00:f6:11:b4:e7:4f:
e8:21:d5:fc:0a:94:66:4f:05:b8:7a:53:98:29:b6:95:ea:66:
4b:3a:fa:88:5e:0b:da:e1:d0:7f:9d:c1:e4:9e:e4:51:28:4c:
09:4e:eb:b9:63:d1:85:34:3a:13:dd:a9:b9:5e:1a:6a:c0:be:
79:2a:ba:44:8d:30:ce:28:3d:1c:cb:38:5b:a5:7f:dd:ca:f4:
3f:2a:2d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:58 2026 by rpki-client