
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json)
Hash identifier: AP4sx42VQFwa+EiqcjKnvMb8ddedeJ26gPBJipmmouc=
Subject key identifier: 4A:36:E6:BE:EA:2C:A9:33:A4:CF:30:D5:EA:87:76:94:DA:7C:94:B9
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial: 03E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
Manifest number: 03BE
Signing time: Sat 13 Jun 2026 00:40:46 +0000
Manifest this update: Sat 13 Jun 2026 00:40:46 +0000
Manifest next update: Sat 20 Jun 2026 00:40:46 +0000
Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: hCc1g4TtLNadCdhIwxrDbATGlX3niI0jXqY7fH0+10U=)
2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: 3oTJlo3dfPqUJV51FEFIq1H9zuUKyATog/K2P6FYqTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Validity
Not Before: Jun 13 00:40:46 2026 GMT
Not After : Jun 20 00:40:46 2026 GMT
Subject: CN=6a2ca70e-ba9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:fd:14:9b:60:16:95:81:e2:08:bd:fc:0e:
9f:dd:47:ac:d5:75:d7:dc:ae:5d:c9:0f:39:37:78:
53:99:be:af:78:bc:df:24:1f:3f:20:3f:cb:92:48:
70:59:d9:c8:f4:0d:d0:d1:3b:c8:51:72:b3:42:63:
0e:ed:f5:50:55:c8:ec:79:84:92:af:38:1f:29:05:
8d:23:43:95:37:13:f4:93:2f:7c:1d:4d:4b:0d:34:
5c:a9:32:c2:dd:8d:1d:9a:de:2c:bd:f4:b2:e6:89:
61:a7:48:ab:c7:2f:44:1c:93:ab:bf:ad:40:b6:3c:
29:04:93:34:9b:1c:9b:bf:bb:87:17:1c:31:ec:12:
f9:58:b0:64:3c:6a:54:04:00:be:24:09:63:03:ef:
90:02:91:be:59:ca:31:47:f3:6e:40:d8:50:1e:ef:
63:b0:1b:d4:e4:ae:b3:01:4e:60:91:37:c4:ef:f5:
80:46:74:51:cb:2b:9c:d8:7e:e4:8b:20:27:cc:a7:
d8:91:e6:ba:d9:af:b8:e6:ff:48:48:c9:b1:1e:02:
0e:c3:8f:b0:bd:cb:e1:50:a8:a4:bc:dc:93:cb:91:
86:aa:ec:9e:9e:75:4f:09:9a:d5:10:fa:b6:d4:ce:
1c:a0:10:24:6b:4d:67:66:66:de:d4:cf:3a:c0:8f:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:36:E6:BE:EA:2C:A9:33:A4:CF:30:D5:EA:87:76:94:DA:7C:94:B9
X509v3 Authority Key Identifier:
keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4d:03:16:d5:ee:89:5a:d0:e0:f2:5b:54:c3:87:62:b7:86:
e6:35:f7:f0:bd:7b:c6:92:06:04:c0:ff:89:0f:59:67:57:71:
33:87:f7:d3:a2:72:be:34:01:52:21:76:12:76:7b:53:cd:bf:
d6:79:c0:04:c6:b2:b1:16:58:03:fc:30:2b:36:a5:21:d5:35:
74:37:83:30:77:c8:2e:da:bd:4f:13:5e:56:9d:78:25:91:8f:
41:34:35:b0:34:60:38:5e:83:0b:ef:10:9d:59:e7:cc:c3:6e:
26:8f:5a:78:3a:ac:bc:26:9f:88:a1:03:ed:35:f5:29:78:88:
9b:f7:99:d9:19:51:92:d8:41:19:d3:f7:4f:48:e6:7d:fc:b7:
a8:28:8f:e8:41:22:f6:c2:4f:15:09:7e:30:5a:cb:96:c9:74:
c3:51:50:d8:59:22:ea:93:9f:bf:fa:10:5c:68:bc:58:1b:34:
bc:a2:d6:20:25:10:2a:b3:21:29:b3:13:53:f2:f4:44:54:ed:
00:f7:13:20:db:39:63:72:26:86:25:31:de:35:0f:67:b7:09:
5d:ef:71:69:24:c0:a1:dd:12:db:b7:10:9d:8f:07:fa:19:d1:
49:89:b9:11:0c:43:db:39:dd:fc:3b:1f:29:da:e3:c3:9c:f4:
9e:03:52:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:36:05 2026 by rpki-client