
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.mft
File: pbtkBP5TtawGtBCz1s2gNKITHpA.mft (raw, json)
Hash identifier: Ao4olaM/VYYPw1X7SPTAlSyYEUul5s+LcnwXBGEEjQ8=
Subject key identifier: 45:F5:E0:7F:40:9E:39:F9:98:C8:37:08:71:5F:5E:E3:FF:7E:83:15
Authority key identifier: A5:BB:64:04:FE:53:B5:AC:06:B4:10:B3:D6:CD:A0:34:A2:13:1E:90
Certificate issuer: /CN=A915DE6C/serialNumber=A5BB6404FE53B5AC06B410B3D6CDA034A2131E90
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pbtkBP5TtawGtBCz1s2gNKITHpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.mft
Manifest number: 8A
Signing time: Sun 01 Mar 2026 08:52:35 +0000
Manifest this update: Sun 01 Mar 2026 08:52:35 +0000
Manifest next update: Sun 08 Mar 2026 08:52:35 +0000
Files and hashes: 1: pbtkBP5TtawGtBCz1s2gNKITHpA.crl (hash: 33oudyA/ZmOhY6Ng/jkqec95zuV4pJ21k74Jzy32cHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.crl
rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pbtkBP5TtawGtBCz1s2gNKITHpA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:52:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DE6C, serialNumber=A5BB6404FE53B5AC06B410B3D6CDA034A2131E90
Validity
Not Before: Mar 1 08:52:35 2026 GMT
Not After : Mar 8 08:52:35 2026 GMT
Subject: CN=69a3fe53-281b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:a2:59:f0:ee:c9:d2:a8:d5:e0:05:7b:a2:
b6:1f:fc:3c:3a:cd:3c:8d:b0:0b:07:a0:77:52:31:
38:6e:1c:d2:df:c8:8d:da:0f:61:8d:d3:b8:9c:a2:
2d:04:27:79:ab:bf:de:10:76:c1:dd:20:b0:a9:74:
98:70:7d:8c:98:12:77:b8:54:4d:c3:80:77:2b:52:
da:c5:cc:7d:f0:f3:7a:cd:5a:93:7a:b8:75:fe:ca:
fe:d9:36:a9:be:ee:4d:c0:dc:a1:fa:52:52:d9:3e:
12:60:c9:6d:ae:c3:53:27:e7:18:09:94:bd:13:61:
89:8f:98:84:e6:af:2a:c9:11:68:20:3e:5f:51:e6:
b9:30:86:10:c3:d4:f2:7c:e7:2f:34:a3:15:c7:5d:
b2:1c:3a:37:4d:32:9e:7e:48:0c:a7:67:00:f1:49:
d4:e2:d2:4d:5e:ec:85:de:92:c1:e7:56:81:2d:88:
22:a7:e8:5c:a5:52:3d:08:b5:47:a3:c3:52:1d:42:
18:93:7c:16:8c:d4:2f:00:7c:73:0b:27:0e:e3:f4:
fb:0a:b9:27:4c:90:ff:3e:5f:f1:ee:2b:b8:39:ce:
39:f3:0d:1b:4e:7d:a5:54:4e:ac:8b:fc:c9:5b:80:
75:7b:16:5c:2c:95:3d:51:7f:6c:62:d1:06:7f:ad:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F5:E0:7F:40:9E:39:F9:98:C8:37:08:71:5F:5E:E3:FF:7E:83:15
X509v3 Authority Key Identifier:
keyid:A5:BB:64:04:FE:53:B5:AC:06:B4:10:B3:D6:CD:A0:34:A2:13:1E:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pbtkBP5TtawGtBCz1s2gNKITHpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/74FBB3D643D411F090B47668C4F9AE02/pbtkBP5TtawGtBCz1s2gNKITHpA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:90:ff:95:87:10:fd:d8:de:a7:70:e8:3a:30:ff:15:f8:ff:
53:c2:87:08:f5:ab:f1:69:35:6b:49:e2:bb:dc:34:a0:c8:e2:
bf:b8:87:ef:5f:86:1e:10:61:cd:27:84:c5:6f:66:79:e9:e2:
4a:eb:95:cc:b7:8e:02:76:c5:19:d6:c3:7c:8e:71:bf:73:83:
6a:0d:ca:59:79:ed:30:74:9b:06:6b:d4:b7:55:72:b2:58:84:
6a:e0:51:da:53:f2:28:e8:6e:0a:52:ee:95:aa:96:e2:c0:df:
c1:9b:cc:c9:d8:83:1b:11:45:d2:b8:47:6e:dd:5c:75:c4:82:
bc:06:2b:94:cd:c6:eb:e5:7b:b2:0c:44:31:72:e7:7e:8b:59:
82:47:34:c3:f8:b2:86:38:d1:d8:8e:b8:1d:49:eb:8a:f4:00:
45:75:c7:db:d8:8c:af:bb:45:75:dd:2d:21:e1:2a:21:6e:b3:
12:30:07:17:ea:41:72:3e:b9:8d:80:93:b9:eb:e2:69:71:06:
b6:62:f6:1b:dc:d0:26:df:67:92:24:8b:c9:5c:62:5b:36:79:
63:e8:f4:9b:ea:78:55:91:76:74:15:50:f1:ab:44:21:19:c2:
4f:f7:8e:73:cd:a4:9e:66:c2:20:29:31:96:d5:72:d7:11:cf:
b0:5f:4d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:00 2026 by rpki-client