
$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File: peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier: NbKfXj1WmwcW1v5gak14Y+1qp4z1Vb7Te0XxUpBcEbo=
Subject key identifier: F4:52:BE:48:F9:B4:0C:F7:FF:5E:40:20:F0:AF:C7:6A:6A:53:6E:B8
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer: /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number: 026C
Signing time: Sun 01 Mar 2026 02:34:51 +0000
Manifest this update: Sun 01 Mar 2026 02:34:51 +0000
Manifest next update: Sun 08 Mar 2026 02:34:51 +0000
Files and hashes: 1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: 8mu6gNqwSXFiOjpt2pwJE7K6xdBmaBHmvM7ktuftpYE=)
2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: vYjDKJoL/LVvPBznc+DyGkQ1jp9r0XRmWXYGOVlx3uA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Validity
Not Before: Mar 1 02:34:51 2026 GMT
Not After : Mar 8 02:34:51 2026 GMT
Subject: CN=69a3a5cb-38da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:3b:87:9b:f1:8d:de:48:82:e4:7f:52:f5:
9b:e1:ed:70:02:92:71:66:d5:54:d3:61:36:1a:53:
9d:00:ae:4b:d6:c3:46:48:ab:73:46:c5:97:55:e5:
e0:78:1d:8f:f4:87:35:dd:4a:a4:01:ec:39:67:8e:
90:56:3e:f4:8c:a1:29:61:e2:11:06:f1:01:32:4c:
98:bd:e1:80:89:45:3a:0b:35:cd:cc:28:d4:ed:98:
3c:7b:8e:e4:db:06:91:e8:5a:ac:bf:19:ae:d7:49:
2a:a9:99:72:93:03:80:c6:8d:a9:40:54:e7:e5:0e:
6e:2b:6f:1d:c0:c2:e8:cb:28:d7:93:e9:d9:6b:eb:
6a:21:a1:28:be:ee:d7:4f:da:96:a9:84:c4:1f:59:
04:2e:34:e6:16:96:15:4a:0a:d2:27:2e:29:08:68:
a7:23:77:8a:4a:a8:de:24:7c:f9:df:60:d7:d5:68:
85:3b:5e:9e:07:df:19:88:f1:fa:8d:d5:6e:5f:17:
2e:3b:a3:29:e3:77:4a:92:5a:32:31:7e:27:d8:6f:
e8:af:e3:47:b7:fd:08:9b:4f:dd:53:fb:47:c8:a8:
11:c0:a6:89:71:c8:d8:05:da:0d:0e:e9:a9:11:62:
77:6a:c4:cb:57:88:04:3e:33:55:ed:86:83:38:ba:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:52:BE:48:F9:B4:0C:F7:FF:5E:40:20:F0:AF:C7:6A:6A:53:6E:B8
X509v3 Authority Key Identifier:
keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:2d:98:ac:ed:87:8c:46:b6:50:88:7c:d9:eb:73:e0:7a:37:
61:c6:86:ad:41:bb:8b:29:da:16:5c:46:21:58:0d:ec:49:5f:
07:8a:15:14:1a:41:31:d1:1f:17:b2:ca:d8:04:33:7d:b9:81:
78:ea:86:4f:d6:ec:ad:c9:a6:96:74:bd:09:16:27:df:1d:79:
84:c2:5a:aa:51:e4:95:5b:f9:19:32:63:e5:5f:c1:6c:9a:bc:
64:45:39:73:e3:59:fc:06:54:40:73:1a:a1:75:36:7b:fd:e6:
41:2e:39:6f:6b:14:8d:b8:e9:0b:c6:c1:40:d7:a5:2c:99:b1:
63:99:d5:9b:eb:09:ac:f4:1e:bd:7c:ab:e5:7d:d1:07:d2:20:
2d:ab:68:5a:db:4e:08:39:75:e0:82:39:4c:ef:41:26:db:da:
1c:71:0a:61:18:05:d8:73:f3:13:26:0b:46:c3:99:a4:c2:c1:
7c:7f:f5:32:d3:b6:af:7a:8e:78:a8:60:2e:2d:4f:d5:4b:a5:
ca:e7:48:25:94:64:1f:72:ad:5c:3d:f5:ac:a5:59:1c:36:62:
c0:97:d3:75:54:de:66:09:56:11:d1:04:4c:44:ef:73:ba:f5:
db:17:3e:64:a8:a0:cd:5c:2c:23:91:20:fe:c3:66:b7:64:be:
ea:2c:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:50 2026 by rpki-client