
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
File: PdrbASYCUFD16FZsRh2atz5J5Uo.mft (raw, json)
Hash identifier: o2ulhy/Q5GTttBZhcrPTdBy8dHtBZ8qi0s3lDuIbvsE=
Subject key identifier: 3A:31:62:15:1B:8F:8E:2B:07:99:55:E2:0E:DA:00:E2:BB:03:76:64
Authority key identifier: 3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A
Certificate issuer: /CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
Certificate serial: 1592
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
Manifest number: 157D
Signing time: Sun 01 Mar 2026 23:59:07 +0000
Manifest this update: Sun 01 Mar 2026 23:59:07 +0000
Manifest next update: Sun 08 Mar 2026 23:59:07 +0000
Files and hashes: 1: PdrbASYCUFD16FZsRh2atz5J5Uo.crl (hash: zErwjPlRXxBgrmndtVjHg/AaKiXrqkMT98clA//6t24=)
2: 4967F6B8533511E8A678701BC4F9AE02.roa (hash: Qn+0huqeBwXglwQJRxVRLR40yUlrfMuqSCsx/03VN8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl
rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5522 (0x1592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A803, serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
Validity
Not Before: Mar 1 23:59:07 2026 GMT
Not After : Mar 8 23:59:07 2026 GMT
Subject: CN=69a4d2cb-c633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:da:26:52:3d:bb:0c:0e:32:64:15:4b:ca:14:
a4:68:fe:b3:bd:92:87:48:39:11:50:85:e1:d0:ca:
f3:0d:c3:cc:ae:a2:51:62:f2:84:fc:00:27:e6:75:
bd:0d:35:90:d3:6a:09:f4:c6:26:1f:69:18:24:2f:
48:c1:ce:b1:fe:9d:61:3d:9d:69:ea:d6:e5:b2:00:
ba:84:e1:fd:ea:19:37:5b:9e:03:c9:74:f1:d1:33:
6d:b2:e7:cc:49:0c:e2:f0:d1:45:01:bb:7c:05:83:
5b:2e:5f:b0:41:da:19:bc:ab:16:4d:d4:3f:c2:7b:
5e:2e:d6:ff:ea:e4:fb:a6:0d:8d:3a:ac:3a:56:1a:
89:51:9f:0a:97:9b:93:80:57:b2:47:c0:56:f2:a8:
3e:c0:4d:ed:ad:62:1a:5f:4a:0b:ea:00:a3:b2:0c:
d7:0e:33:41:fe:21:e5:10:3b:da:9b:7d:5b:06:86:
21:6f:a1:3d:6d:69:ae:d1:a1:4d:6c:14:3f:24:bb:
99:d4:f2:53:da:fa:a5:3a:e9:ac:9b:7e:92:9f:ca:
88:bc:58:02:52:05:4e:06:10:1b:1e:bb:6c:95:58:
f9:aa:e1:b1:4f:1f:44:05:73:01:53:9e:08:18:be:
a0:63:81:15:57:e8:04:f5:2f:e3:50:56:da:6c:a6:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:31:62:15:1B:8F:8E:2B:07:99:55:E2:0E:DA:00:E2:BB:03:76:64
X509v3 Authority Key Identifier:
keyid:3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9a:42:04:8f:86:40:45:d4:ad:08:62:ce:b4:1b:b4:af:77:
e0:31:3b:e2:56:75:10:2f:17:1d:26:7d:2e:c3:12:59:7c:09:
c3:a8:93:14:97:8a:0b:0f:08:47:e6:61:e5:f3:6e:7a:8f:92:
25:e1:c5:bf:f2:09:86:28:e5:71:bb:27:e6:7e:f1:c5:e9:90:
d5:15:43:f5:f1:f0:10:4e:aa:a8:78:15:d8:92:2f:4a:cc:43:
9f:ec:64:c5:62:53:06:cb:73:e8:be:61:c0:c1:a5:19:bb:7c:
06:8b:34:34:5d:a8:42:6c:6d:2b:b8:76:60:68:24:81:bb:89:
5b:d8:63:ca:47:9a:97:86:c9:41:fb:0a:8a:dc:e2:37:49:12:
70:40:6c:92:ce:5d:f8:c1:0c:b8:04:27:0d:cc:f1:05:70:0f:
93:80:34:c8:fe:6c:06:3d:ff:e7:d7:7e:50:0c:cb:11:4c:ca:
6c:34:34:f4:29:29:86:d0:d4:99:de:60:50:30:02:77:05:50:
94:4b:42:58:a5:8f:8a:d7:3c:19:61:4f:8c:bb:82:30:16:e1:
ba:5e:5b:a4:df:ae:68:04:5c:2f:af:e9:22:e6:66:39:70:66:
c8:ba:f0:44:3d:54:a9:9b:23:aa:ae:22:a8:d2:63:14:3d:44:
0c:94:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:45:28 2026 by rpki-client