
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
File: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft (raw, json)
Hash identifier: fNhMIilw7zkTSNDTxY8UgH9rkSd18IQdgNnhkRMiV74=
Subject key identifier: CE:CB:44:D7:F2:BB:CE:77:E5:95:9E:BC:53:4D:11:8C:26:EE:51:C1
Authority key identifier: A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD
Certificate issuer: /CN=A91A995E/serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
Certificate serial: 0135
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
Manifest number: 0131
Signing time: Sun 11 Oct 2026 06:16:25 +0000
Manifest this update: Sun 11 Oct 2026 06:16:25 +0000
Manifest next update: Sun 18 Oct 2026 06:16:25 +0000
Files and hashes: 1: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl (hash: AjOCWdFbS1PmoE6eYzdL9rrBb44ER5q5vz3V7xNE5L8=)
2: B3E4D03621B111F089CE216DC4F9AE02.roa (hash: VaEKIuiVVa+34T0EyOyaQnSXrGSJwgYFoH12QYWKH4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl
rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 06:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A995E, serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
Validity
Not Before: Oct 11 06:16:25 2026 GMT
Not After : Oct 18 06:16:25 2026 GMT
Subject: CN=6acb29b9-e7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:e3:f7:cc:d7:11:14:b1:6f:79:6e:72:e5:
fc:28:06:ea:87:d2:af:02:50:0f:05:0c:ea:b4:e9:
cf:d9:a4:46:91:f2:45:5f:42:84:93:ed:e5:c5:f4:
85:d4:91:32:ea:7c:7a:d1:ec:c7:68:88:48:f3:2c:
53:d7:62:00:40:34:48:70:b3:04:5d:99:df:cc:65:
38:a5:51:59:fa:5a:de:0c:18:bd:4d:64:5b:65:2d:
be:5d:e0:6b:83:42:21:e9:0b:23:ad:19:30:7e:bf:
c7:19:e1:c3:58:04:99:64:ab:ba:d4:1c:45:c7:b8:
39:47:e3:ef:f7:fe:2d:02:c6:83:2f:15:26:bd:f8:
ea:1a:e6:d9:3a:e2:24:78:ce:d0:1c:19:48:3f:b0:
1d:1f:42:5d:52:29:1d:a3:27:20:8a:4c:2f:57:d4:
d6:3a:a4:99:72:8f:9f:96:ee:f3:c0:6e:cd:6a:56:
d9:d8:41:ea:80:41:e7:f3:d1:23:c0:f7:05:9b:3c:
00:49:53:0e:76:35:01:68:d7:0f:d3:54:85:33:c4:
9e:a1:d0:10:8e:a3:07:87:45:35:e1:8b:3d:33:6d:
ce:41:ff:7c:1d:16:59:52:bd:bf:38:cd:e2:a9:bd:
42:c4:d8:89:21:0a:4d:b3:f8:d8:36:1a:90:7b:4e:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CB:44:D7:F2:BB:CE:77:E5:95:9E:BC:53:4D:11:8C:26:EE:51:C1
X509v3 Authority Key Identifier:
keyid:A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:27:58:de:0b:15:3e:dc:eb:03:57:48:af:11:f8:0a:b7:87:
9f:4f:88:24:33:11:5d:c4:eb:f5:22:86:98:0a:1a:f7:33:dd:
18:95:db:b7:f7:9b:1e:7b:8e:cb:b3:9d:72:1b:71:45:9a:c2:
c3:d3:4b:0f:39:c2:e8:41:f8:b8:85:08:01:88:e2:8a:93:cc:
32:f7:31:c6:dd:a2:ad:97:05:5c:4d:5f:5e:f1:3a:18:e4:93:
7c:9c:f1:07:53:23:c8:f0:f7:3b:d1:7e:e0:cb:17:d3:bb:a2:
e9:43:f1:26:3e:15:12:3a:9e:ff:d3:8c:99:ac:82:68:fe:a4:
3b:a1:38:ef:eb:2c:4b:ea:44:8a:01:e9:44:d6:7b:bc:dd:1e:
70:9d:41:a2:00:46:e8:96:e8:5b:30:5f:85:a2:6e:d1:64:41:
cf:fc:12:8c:90:ef:50:6f:9e:eb:ef:68:ab:9c:9a:b2:88:3c:
22:6d:39:2b:72:f3:93:11:a9:dc:8e:95:b6:25:97:08:e4:25:
4a:26:af:9c:7d:62:d6:68:a6:94:b8:3e:09:1f:38:a9:58:69:
e0:72:67:7d:0c:ac:de:1b:8f:f2:6d:07:a0:aa:92:f2:b9:69:
bc:37:29:73:32:f6:5d:0f:bf:a8:61:2a:ff:18:e9:c7:dd:75:
94:9b:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:03:36 2026 by rpki-client