
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
File: PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json)
Hash identifier: 52ubmAlVGmw35mNHVqwck/aQ1TNwHDqXtoOjY8fMi0U=
Subject key identifier: A3:1E:EF:A0:C1:AA:39:69:33:F6:F4:6A:D8:44:40:47:E0:A4:B9:1F
Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
Certificate issuer: /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Certificate serial: 07AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
Manifest number: 079B
Signing time: Thu 16 Apr 2026 21:25:22 +0000
Manifest this update: Thu 16 Apr 2026 21:25:21 +0000
Manifest next update: Thu 23 Apr 2026 21:25:21 +0000
Files and hashes: 1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: S+cUHjO3UsFdNO+RJoeHZ0+UouSJDEaMmggcK9WwB1M=)
2: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: O87q+bxguIFbMrAZ7VUYrSbILFtjGYHtuiggLNAaxfM=)
3: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: snnjjcJSmnSfiLGuLhSOWtXc8qgvzMcRQujW7d1nbB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965 (0x7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C0AE, serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Validity
Not Before: Apr 16 21:25:21 2026 GMT
Not After : Apr 23 21:25:21 2026 GMT
Subject: CN=69e153c2-a820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:86:d4:2d:3f:47:19:2b:ad:f6:c4:dc:03:
bb:82:42:20:6f:d7:95:2a:dc:a0:93:33:2d:fa:56:
a5:89:0b:9a:bf:38:8a:97:89:cb:97:ef:11:77:1d:
df:af:9d:fa:2e:80:da:a9:8c:3b:4f:e5:05:d6:25:
e7:bb:f1:eb:2c:2f:58:cb:a5:f0:71:c2:5b:b0:64:
3e:0a:b0:a0:4c:a5:d8:c1:04:b9:b9:b5:0b:fb:fa:
f8:cb:0f:1b:5c:e2:22:b8:2e:0d:4e:31:99:e5:26:
b9:37:f8:76:ab:76:4c:bc:04:6a:82:b8:24:c7:3b:
e8:59:f7:d1:90:af:41:7d:fc:52:a0:94:89:bf:50:
c1:90:2a:01:f2:d7:d1:3b:8a:cc:a4:2a:f1:e4:fb:
e3:67:a1:11:bd:ec:69:9b:89:d4:24:4f:9a:df:61:
e5:d7:4b:2e:9c:a8:b0:ee:f7:8e:6b:5b:c4:5d:93:
7d:6f:84:af:91:41:5b:e6:96:11:58:6b:cd:17:86:
56:bd:25:17:75:a6:9f:94:c8:c1:fd:54:e6:58:8c:
bf:fe:fd:8d:2f:7f:a4:7b:6b:71:63:fa:40:8d:b1:
cb:c2:c9:7d:4f:29:a6:9f:46:2e:b2:c8:45:f4:6f:
2d:31:ba:d2:89:8c:02:27:bc:29:e3:7b:7e:ea:51:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1E:EF:A0:C1:AA:39:69:33:F6:F4:6A:D8:44:40:47:E0:A4:B9:1F
X509v3 Authority Key Identifier:
keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:ed:8c:cd:31:ba:aa:ad:6c:30:65:63:1a:84:0c:49:b0:
a8:bb:76:1c:7b:26:ea:ad:28:7d:50:f3:08:56:93:be:11:71:
ca:36:be:25:3b:0a:34:ff:3a:d1:38:d6:5e:fb:6b:f3:13:8d:
c1:4f:08:72:8b:da:8b:b3:33:bc:61:4a:a8:77:4b:de:8c:57:
2b:82:35:55:33:e4:de:66:cf:42:f0:37:de:17:d8:5d:ca:df:
e9:89:40:9b:97:d2:32:06:3a:3e:0c:87:cf:f4:62:8e:64:36:
7d:52:5f:19:fa:1b:5b:35:86:de:d1:73:74:e2:87:49:1d:7c:
08:67:ff:5e:05:d0:c6:4b:92:05:8d:44:75:93:d2:05:48:da:
d7:90:1f:c9:21:98:90:90:00:99:c7:13:c3:74:6b:d3:3e:34:
72:e3:f0:7e:54:73:bf:69:c9:28:d3:dd:3a:9e:bc:ae:fe:92:
71:f3:6c:ba:16:29:c4:2b:ce:28:1e:b6:5a:7b:18:41:86:ae:
00:13:ff:15:c6:8c:ac:91:ab:43:34:37:b8:5d:69:4b:e9:73:
54:6f:f5:ec:8e:81:19:10:87:cc:ac:02:53:3c:a4:eb:e9:1c:
65:36:55:44:2e:94:b3:60:a3:cb:fa:8e:c6:14:be:60:12:47:
72:a9:0f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:14 2026 by rpki-client