
$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
File: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft (raw, json)
Hash identifier: y3CTWTy858yFMMMnP9EsaSqsXyW+6IwK+8sA0dOAM5c=
Subject key identifier: 3E:A1:9E:3A:20:3C:36:09:D5:15:80:77:2A:54:6A:FE:27:B6:E1:0F
Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C
Certificate issuer: /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
Manifest number: B8
Signing time: Fri 17 Apr 2026 06:47:04 +0000
Manifest this update: Fri 17 Apr 2026 06:47:04 +0000
Manifest next update: Fri 24 Apr 2026 06:47:04 +0000
Files and hashes: 1: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl (hash: 4BFW8KEHVLGA7jXDjXguidYNgswm/U+ETaPyZ48iz+0=)
2: A7E91DCE275A11F09892587AC4F9AE02.roa (hash: 87D6nuf5v49Tli4xwHZuhqMSGj+/KqzNB34sSWREAF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl
rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:47:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C
Validity
Not Before: Apr 17 06:47:04 2026 GMT
Not After : Apr 24 06:47:04 2026 GMT
Subject: CN=69e1d768-ff02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:54:aa:d8:32:da:1e:3a:37:86:08:b4:f3:
fa:b1:7e:bd:9f:f2:67:d7:ee:c9:7d:60:d7:42:f0:
63:6d:94:b2:b7:f1:15:e0:17:f9:a9:86:09:52:c0:
db:b7:fe:ee:22:34:e4:e4:24:29:0e:29:e2:e3:3b:
16:aa:b6:51:90:f4:a8:f3:f7:f1:d5:d9:84:7a:f0:
09:88:7d:36:04:15:e9:2a:e8:b8:b3:72:85:44:75:
53:b0:4a:fa:95:26:3a:74:bd:2b:3f:85:73:82:42:
64:8c:ba:6d:19:8a:81:9f:a9:0c:02:77:36:a4:98:
72:a8:e0:57:c4:20:a7:97:7d:f0:77:6e:6a:49:c6:
4a:b2:40:89:6a:3e:fb:9e:78:ae:52:e6:ad:24:f0:
cb:3e:41:c9:01:7a:ac:57:8c:b2:8b:e3:8f:ea:d1:
03:14:05:15:ef:d7:40:6b:2b:47:9c:e9:11:f1:b6:
89:a9:b7:00:2d:58:9f:27:8b:dc:c0:6c:30:18:7c:
b2:61:8f:cc:69:00:f0:aa:59:82:be:e6:c4:cc:f2:
d5:9b:a4:07:7e:b7:3b:f2:94:18:3d:b8:95:08:96:
5e:2c:98:fd:95:bc:4c:e1:75:f4:4f:22:7a:2e:22:
7f:86:40:75:59:01:14:97:4d:26:51:19:ab:88:88:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:9E:3A:20:3C:36:09:D5:15:80:77:2A:54:6A:FE:27:B6:E1:0F
X509v3 Authority Key Identifier:
keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:09:a2:35:a5:60:46:f0:8c:e9:33:fc:c9:f4:63:aa:e8:b0:
78:7e:4e:7a:dc:0b:71:15:06:b4:e1:59:11:c5:7b:94:e4:e3:
ef:22:61:de:a5:dc:91:52:a6:73:50:76:50:ca:d0:e5:6a:59:
97:59:bb:0f:ba:e7:e3:0b:54:8a:a3:f0:f6:f0:c7:5f:4d:60:
f7:e5:5a:f9:95:8b:8e:56:7f:c6:b6:8d:66:8d:64:ef:76:22:
4c:be:bc:23:58:3f:2e:ac:4f:75:39:22:15:84:96:b9:e9:3a:
54:bd:ea:66:d5:2e:da:28:42:11:eb:ca:61:bc:ea:c2:34:24:
78:66:53:23:ba:c7:f8:47:e2:42:69:94:2a:49:eb:d1:06:33:
a1:2c:a9:b1:f9:f1:4f:60:4e:31:6a:69:a0:32:da:34:ef:71:
f6:67:ad:8a:eb:6c:e0:6e:f3:6a:f7:f6:24:d8:7d:8c:5f:0f:
48:a2:9b:1f:f8:8e:1d:64:56:d6:49:7a:d1:a5:a2:57:8b:3d:
2e:95:8d:e3:4e:02:8b:f0:50:77:65:17:88:e9:36:ea:3e:3a:
74:95:23:df:cf:e2:66:d2:cb:5d:20:8b:05:87:3c:2f:ca:66:
fd:e4:21:e5:4c:38:fc:1f:31:fb:15:f6:ac:d3:a3:bd:70:08:
4b:75:9b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:01 2026 by rpki-client