
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
File: pBhnIpZRYlTNTMrUSSUeGdG26V0.mft (raw, json)
Hash identifier: nO8YdjFPQhsmQHDPGxVlsYnQmVZx/sosjjOVt0ve7Xo=
Subject key identifier: EF:C9:A3:33:B6:CE:1C:8F:84:46:5B:DC:3F:0D:A9:DA:54:A1:F7:31
Authority key identifier: A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D
Certificate issuer: /CN=A913FE3D/serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D
Certificate serial: 0612
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
Manifest number: 060B
Signing time: Thu 16 Apr 2026 22:47:16 +0000
Manifest this update: Thu 16 Apr 2026 22:47:15 +0000
Manifest next update: Thu 23 Apr 2026 22:47:15 +0000
Files and hashes: 1: pBhnIpZRYlTNTMrUSSUeGdG26V0.crl (hash: Geji3mvYDCek9AVs7/VGETt+I1CGs5Vd3YzYjDLqs7g=)
2: 679A6FA4E53A11EB8197AD70C4F9AE02.roa (hash: XbMe+8/7/MISes36gY29YrhvwO4Rdf5bho+pNI/z93c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl
rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1554 (0x612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FE3D, serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D
Validity
Not Before: Apr 16 22:47:15 2026 GMT
Not After : Apr 23 22:47:15 2026 GMT
Subject: CN=69e166f3-18e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:64:02:36:41:cd:04:41:4b:09:2a:4e:26:32:
96:69:dc:c9:5f:26:b4:34:14:7d:7f:e4:51:8c:81:
e2:e0:20:51:45:73:2e:e3:70:b9:b7:00:a4:23:4f:
de:63:33:ee:da:00:66:a9:a2:e5:e0:25:09:6e:f2:
be:77:41:b3:d4:14:88:b4:3d:69:55:0e:10:59:a1:
98:b4:25:f3:93:56:90:3d:84:43:ee:3c:03:a4:d1:
4b:a6:42:10:4e:bd:ef:64:24:c0:13:98:ed:5d:ce:
30:d1:2c:a2:f7:70:99:0a:99:91:43:6b:11:0a:c0:
84:8e:1f:a7:cc:b2:67:89:ae:7e:8b:3d:85:dd:b9:
52:41:fd:40:23:8d:23:a8:b1:06:2b:85:ce:75:81:
2f:3e:73:d8:e3:9f:77:58:66:78:a4:9a:74:11:6a:
24:73:1d:83:00:b9:56:72:c4:03:82:6d:69:5a:f1:
37:c5:78:f8:64:2d:c0:39:4a:c7:4b:7b:ff:a7:bd:
86:ac:2a:8d:69:ad:c4:b0:08:be:17:e6:00:94:47:
7b:aa:2d:d7:9d:f5:ee:7a:30:ee:97:08:30:c9:29:
ea:7f:d7:90:d9:65:37:2a:57:94:06:c1:6b:45:15:
32:5f:47:a1:d8:87:45:64:ec:ea:9f:e3:71:4c:9c:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C9:A3:33:B6:CE:1C:8F:84:46:5B:DC:3F:0D:A9:DA:54:A1:F7:31
X509v3 Authority Key Identifier:
keyid:A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:88:f8:5a:16:a6:fe:32:40:98:3c:7f:10:62:c8:ad:ad:f4:
69:06:af:df:7b:f4:5f:ac:d9:25:1f:47:50:5f:4a:a0:74:16:
eb:99:28:d1:4c:da:39:14:11:25:62:bb:5e:6d:0b:e0:d4:a6:
c2:87:0f:ee:f9:eb:24:76:bf:10:24:9d:dc:8d:df:32:2f:a8:
a6:be:8c:a3:c4:65:83:9f:84:31:45:e8:2a:1b:c9:e9:d5:bc:
6d:2e:5a:9f:06:84:b7:12:2c:91:18:e8:15:d6:85:6a:bb:42:
4b:2f:32:ca:c7:54:3e:0f:6c:29:fe:58:9f:2e:ff:59:7a:8f:
67:b5:95:d6:f1:14:4f:f6:3f:f0:84:8f:3e:34:b1:d0:b5:66:
0a:c6:99:62:2c:42:29:5d:ca:58:82:a1:f9:78:38:e9:39:13:
af:1d:b8:a2:18:d6:8f:42:98:8f:d2:0f:92:38:c2:21:c5:82:
eb:2f:5e:0c:b7:66:49:c5:f0:71:36:3a:5c:00:51:61:b1:83:
13:9f:dc:38:20:3f:3b:30:61:1f:97:ed:36:77:0c:a7:1c:71:
6e:12:47:df:24:49:81:32:dd:d8:64:37:04:4a:fb:13:17:70:
88:25:04:ce:33:8f:94:8b:c0:d8:2a:05:2e:84:13:3e:17:09:
85:d7:d1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:59 2026 by rpki-client