
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
File: PdrbASYCUFD16FZsRh2atz5J5Uo.mft (raw, json)
Hash identifier: VLYGaWzCl///s31OgD+kKXikXzas/BnV4BYq/iTAn80=
Subject key identifier: F1:8C:14:14:DC:02:18:CC:A2:DB:A3:B6:C3:C1:FD:44:E8:18:95:7D
Authority key identifier: 3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A
Certificate issuer: /CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
Certificate serial: 153E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
Manifest number: 1534
Signing time: Tue 04 Nov 2025 16:53:36 +0000
Manifest this update: Tue 04 Nov 2025 16:53:36 +0000
Manifest next update: Tue 11 Nov 2025 16:53:36 +0000
Files and hashes: 1: PdrbASYCUFD16FZsRh2atz5J5Uo.crl (hash: RwWYRvBlVAgJ/zTmSk+S9ZH+oO4l+a9s6sFQca4F9T0=)
2: 4967F6B8533511E8A678701BC4F9AE02.roa (hash: 1riiNEo45WZ6XH/Os//x78+gBRpcFmxijL/HJsGk51k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl
rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5438 (0x153e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A803, serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
Validity
Not Before: Nov 4 16:53:36 2025 GMT
Not After : Nov 11 16:53:36 2025 GMT
Subject: CN=690a2f90-9553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:33:55:ce:17:75:2b:d8:04:87:c0:13:3b:
fc:d3:f4:81:4d:28:6e:56:6c:21:0a:ed:c9:57:29:
91:08:50:55:63:69:09:50:e6:14:85:48:fd:39:5c:
4f:fd:cd:5a:86:d6:b7:aa:c5:55:e2:72:6b:13:84:
c7:27:34:10:b2:7c:d4:59:81:b6:66:09:c1:84:d8:
c5:64:a7:d9:a7:94:aa:d0:39:41:17:81:cf:e5:48:
46:d6:60:1b:43:08:8c:d7:99:78:18:b9:72:a4:09:
6d:cb:42:af:c9:f7:ce:8f:63:7a:12:1d:c1:84:f1:
dc:ec:6a:05:be:8d:4d:f3:99:e1:16:e2:ee:2c:bc:
81:7e:60:b0:92:3d:b4:9f:d3:4e:4c:42:15:05:4d:
29:ff:28:3e:44:f2:02:d8:1a:d8:74:28:a4:2d:d9:
8c:a2:6f:ac:54:d7:b8:bd:f7:d1:ee:fb:23:59:23:
01:29:4d:46:43:67:4a:1b:96:4f:d5:1d:41:aa:ba:
27:78:a5:2c:25:e4:ff:f8:44:95:b5:ff:df:ab:52:
e3:17:53:2e:ad:b9:64:63:45:0e:56:43:88:37:b5:
b1:3f:61:23:fa:76:66:a6:c8:41:75:bc:b2:c0:43:
8b:32:f6:b8:41:17:a7:c7:41:53:8d:b4:1a:81:7f:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8C:14:14:DC:02:18:CC:A2:DB:A3:B6:C3:C1:FD:44:E8:18:95:7D
X509v3 Authority Key Identifier:
keyid:3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b9:af:6e:a3:ad:a4:56:28:1e:89:da:24:32:8f:b3:d2:da:
79:69:e4:88:7e:a8:6b:59:e6:ec:58:80:fb:d4:d9:91:71:9a:
ce:10:94:88:2b:18:62:3a:2c:96:16:63:6b:4d:6d:d4:ac:09:
54:d1:11:d2:4b:5d:81:f7:34:00:b5:b2:9e:4b:91:e7:e4:10:
64:fb:b0:ef:8f:74:1c:cc:d1:a8:87:e0:9c:1a:b4:5e:43:7a:
70:5e:b3:df:29:7d:1c:39:43:50:4e:9e:af:b8:c2:67:27:f6:
ea:d5:77:ed:ae:07:ca:a6:42:4d:15:96:19:4c:11:47:fb:1d:
57:e2:70:7a:cf:d4:db:7f:2f:46:c0:bb:46:f2:e0:d6:51:3f:
2a:48:f9:9b:39:57:80:95:9a:19:32:ae:86:fa:0b:24:63:02:
0b:53:f4:52:25:80:33:8a:9e:25:ef:3a:62:16:25:bd:46:dd:
e9:20:ba:92:73:c6:9a:da:a6:c2:6d:cb:c3:01:89:d8:a3:94:
42:79:b0:f2:ee:dc:be:fe:ac:65:79:5c:33:76:71:22:b0:0b:
1c:94:3b:7f:9a:e0:93:68:37:5a:98:77:9e:71:af:2a:b9:f7:
ad:c6:a5:d3:10:83:05:d3:ac:2c:60:f5:d2:94:4d:49:fe:7b:
ba:57:30:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE4MDMxMTAvBgNVBAUTKDNEREFEQjAxMjYwMjUwNTBGNUU4NTY2QzQ2MUQ5QUI3
M0U0OUU1NEEwHhcNMjUxMTA0MTY1MzM2WhcNMjUxMTExMTY1MzM2WjAYMRYwFAYD
VQQDEw02OTBhMmY5MC05NTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtU4zVc4XdSvYBIfAEzv80/SBTShuVmwhCu3JVymRCFBVY2kJUOYUhUj9OVxP
/c1ahta3qsVV4nJrE4THJzQQsnzUWYG2ZgnBhNjFZKfZp5Sq0DlBF4HP5UhG1mAb
QwiM15l4GLlypAlty0KvyffOj2N6Eh3BhPHc7GoFvo1N85nhFuLuLLyBfmCwkj20
n9NOTEIVBU0p/yg+RPIC2BrYdCikLdmMom+sVNe4vffR7vsjWSMBKU1GQ2dKG5ZP
1R1BqroneKUsJeT/+ESVtf/fq1LjF1MurblkY0UOVkOIN7WxP2Ej+nZmpshBdbyy
wEOLMva4QRenx0FTjbQagX+odQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGMFBTc
AhjMotujtsPB/UToGJV9MB8GA1UdIwQYMBaAFD3a2wEmAlBQ9ehWbEYdmrc+SeVK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgwMy81NDZFRDczQTUz
MzQxMUU4QjRGQzZCMTlDNEY5QUUwMi9QZHJiQVNZQ1VGRDE2RlpzUmgyYXR6NUo1
VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BkcmJBU1lDVUZEMTZGWnNSaDJhdHo1SjVVby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTgwMy81NDZFRDczQTUzMzQxMUU4QjRGQzZCMTlDNEY5QUUwMi9QZHJiQVNZQ1VG
RDE2RlpzUmgyYXR6NUo1VW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7ua9uo62kVigeidokMo+z0tp5aeSIfqhrWebsWID71NmRcZrOEJSI
KxhiOiyWFmNrTW3UrAlU0RHSS12B9zQAtbKeS5Hn5BBk+7Dvj3QczNGoh+CcGrRe
Q3pwXrPfKX0cOUNQTp6vuMJnJ/bq1XftrgfKpkJNFZYZTBFH+x1X4nB6z9Tbfy9G
wLtG8uDWUT8qSPmbOVeAlZoZMq6G+gskYwILU/RSJYAzip4l7zpiFiW9Rt3pILqS
c8aa2qbCbcvDAYnYo5RCebDy7ty+/qxleVwzdnEisAsclDt/muCTaDdamHeeca8q
ufetxqXTEIMF06wsYPXSlE1J/nu6VzDt
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:28:53 2025 by rpki-client