
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json)
Hash identifier: AE49TjZwL2RtHRskEjW5MdepEUZ/w7Y4SNjD6B3f7RY=
Subject key identifier: E3:81:89:7E:CE:F5:8E:99:A5:01:29:F1:18:A6:F6:12:97:BF:79:CB
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial: 038A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
Manifest number: 0384
Signing time: Sun 01 Mar 2026 01:39:58 +0000
Manifest this update: Sun 01 Mar 2026 01:39:58 +0000
Manifest next update: Sun 08 Mar 2026 01:39:58 +0000
Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: SuXt7cLXVix7sxwWusJO8XEXwcMYU/xgbNVYPC3nEkw=)
2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: +p5cj7LwT5hXMy0c3PlvgwDnOhrwUIuzknInRNhRtuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906 (0x38a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Validity
Not Before: Mar 1 01:39:58 2026 GMT
Not After : Mar 8 01:39:58 2026 GMT
Subject: CN=69a398ee-c164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:5a:de:f5:2c:64:d2:bc:97:5b:97:90:b7:
7f:6e:fb:63:0d:3b:ec:11:8b:31:7a:27:f0:2f:ea:
4d:fe:52:45:4b:29:79:6b:fd:43:e0:97:88:55:92:
96:34:5d:72:54:de:59:bb:da:78:10:29:b0:e1:98:
a8:44:8b:e8:86:8b:b0:1a:83:8c:cc:ef:ed:c0:f9:
b6:17:ae:a2:ec:a7:b8:54:35:a3:bd:39:42:c9:8e:
9c:ac:2f:5c:bb:c7:25:54:84:67:cf:cc:b9:ac:46:
a8:38:ff:22:36:7e:f3:db:a6:8a:52:9b:72:27:f7:
6e:22:ef:32:77:0b:4a:85:27:27:d1:a9:70:fe:f2:
96:3e:62:a5:b0:29:da:95:65:7b:f9:fe:0b:2e:c6:
a6:df:88:07:9c:1f:52:8c:c2:aa:6d:76:02:5f:66:
4c:89:9e:6c:3f:68:83:35:27:6d:85:6a:35:42:76:
25:90:80:26:27:f5:5f:a8:70:ec:12:db:13:da:cc:
3c:07:f2:5b:bf:61:cf:4f:62:5e:54:8d:9b:88:06:
80:92:fd:54:50:8f:3c:ef:ed:94:1a:d1:15:36:0d:
dd:c3:54:95:0e:71:f5:53:6f:e0:55:bb:b0:bb:43:
5c:09:40:32:af:1d:1d:4a:90:0e:98:fc:b4:91:39:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:81:89:7E:CE:F5:8E:99:A5:01:29:F1:18:A6:F6:12:97:BF:79:CB
X509v3 Authority Key Identifier:
keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:c8:21:45:aa:5c:dc:e8:c5:f6:ae:df:ff:1e:d0:f3:2e:45:
45:41:d2:19:37:ea:1e:19:28:a0:e3:2a:41:60:1d:d1:1d:7a:
3f:b3:46:fd:ac:52:6b:06:d5:8c:be:5a:54:71:bb:bc:4c:43:
8f:17:04:09:d9:a4:d4:e1:d0:58:e8:cf:61:04:c6:32:08:69:
7f:88:02:ec:20:57:95:6b:56:be:51:12:5e:13:1a:4d:29:65:
52:8e:93:95:a3:e4:97:da:57:4b:8c:c5:c1:62:d1:50:53:da:
e1:4d:fc:5d:32:8e:da:21:01:eb:ab:e3:52:13:03:a4:d5:6c:
5f:90:06:f3:b7:67:c3:1f:81:75:f4:c9:1b:02:3a:df:05:83:
7c:41:b4:e4:cd:7a:7d:57:52:23:4d:c7:8c:29:79:10:62:6d:
69:0a:c4:ac:db:85:78:4e:04:8d:66:ac:79:58:4b:1d:bc:45:
c4:ca:51:19:45:7d:85:63:1b:62:ed:f4:29:58:d4:96:50:45:
5c:34:72:e3:3d:a1:df:32:3c:1f:9f:0c:08:73:91:49:13:a9:
7c:0a:61:5b:9c:70:74:39:db:0f:bc:46:0e:45:ff:63:72:e0:
80:d7:3b:fa:5f:b0:d8:d0:6a:ab:3e:10:d7:a6:c3:c5:6a:9c:
5f:9a:0a:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFBNTQxMTAvBgNVBAUTKDNFNjdEQkY3ODIyMDI4OTNGMUZCNUFGN0Q2RkMwOUQw
MDE4RkRGMDYwHhcNMjYwMzAxMDEzOTU4WhcNMjYwMzA4MDEzOTU4WjAYMRYwFAYD
VQQDDA02OWEzOThlZS1jMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxRZa3vUsZNK8l1uXkLd/bvtjDTvsEYsxeifwL+pN/lJFSyl5a/1D4JeIVZKW
NF1yVN5Zu9p4ECmw4ZioRIvohouwGoOMzO/twPm2F66i7Ke4VDWjvTlCyY6crC9c
u8clVIRnz8y5rEaoOP8iNn7z26aKUptyJ/duIu8ydwtKhScn0alw/vKWPmKlsCna
lWV7+f4LLsam34gHnB9SjMKqbXYCX2ZMiZ5sP2iDNSdthWo1QnYlkIAmJ/VfqHDs
EtsT2sw8B/Jbv2HPT2JeVI2biAaAkv1UUI887+2UGtEVNg3dw1SVDnH1U2/gVbuw
u0NcCUAyrx0dSpAOmPy0kTlLNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOOBiX7O
9Y6ZpQEp8Rim9hKXv3nLMB8GA1UdIwQYMBaAFD5n2/eCICiT8fta99b8CdABj98G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE1NC9EODhDRDlENkRD
MzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tKUHgtMXIzMXZ3SjBBR1Az
d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BtZmI5NElnS0pQeC0xcjMxdndKMEFHUDN3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QUE1NC9EODhDRDlENkRDMzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tK
UHgtMXIzMXZ3SjBBR1Azd1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkcghRapc3OjF9q7f/x7Q8y5FRUHSGTfqHhkooOMqQWAd0R16P7NG/axSawbV
jL5aVHG7vExDjxcECdmk1OHQWOjPYQTGMghpf4gC7CBXlWtWvlESXhMaTSllUo6T
laPkl9pXS4zFwWLRUFPa4U38XTKO2iEB66vjUhMDpNVsX5AG87dnwx+BdfTJGwI6
3wWDfEG05M16fVdSI03HjCl5EGJtaQrErNuFeE4EjWaseVhLHbxFxMpRGUV9hWMb
Yu30KVjUllBFXDRy4z2h3zI8H58MCHORSROpfAphW5xwdDnbD7xGDkX/Y3LggNc7
+l+w2NBqqz4Q16bDxWqcX5oKiQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:59 2026 by rpki-client