
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
File: PbNMuLW9apns99UpKJE-ZSWnHF8.mft (raw, json)
Hash identifier: jqoOhnjxOEFkvB6qwZNbmWb9Ep5W0EYdVZBVxoSeMuY=
Subject key identifier: 60:FB:15:25:64:51:52:BE:05:D9:6B:35:D4:87:D1:73:A5:18:D5:9D
Authority key identifier: 3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F
Certificate issuer: /CN=A91B2D85/serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
Manifest number: 3B
Signing time: Mon 27 Jul 2026 10:55:05 +0000
Manifest this update: Mon 27 Jul 2026 10:55:04 +0000
Manifest next update: Mon 03 Aug 2026 10:55:04 +0000
Files and hashes: 1: PbNMuLW9apns99UpKJE-ZSWnHF8.crl (hash: ncYB//568JzIRCp3FJ1fffn6Uwio0m3yK1M3YbOpB/w=)
2: F41AA87837C311F1976C4134BE833773.roa (hash: +641YeMPVXU1XF3EY/Wo8DEhhBoEin7Q7KVnql2z71o=)
3: E21E9FE0347F11F19DF6F99AA9833773.roa (hash: D7+bSA2LIBJFLG6B18pSyvGelNlmr8zMF7Fhiy0Ow1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl
rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D85, serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
Validity
Not Before: Jul 27 10:55:04 2026 GMT
Not After : Aug 3 10:55:04 2026 GMT
Subject: CN=6a673909-9da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:13:e4:75:aa:ab:82:e4:0b:10:76:74:6c:
90:88:83:c5:7f:63:da:88:be:04:ba:3d:03:44:cc:
4e:0c:2f:2c:72:2a:2c:56:ed:76:06:e2:64:3a:7a:
2d:e7:57:cf:53:b6:9a:cd:9a:96:1d:c1:93:02:35:
3a:ee:a0:0d:a5:8e:29:e9:be:d3:82:4d:cd:e7:5b:
f8:85:26:d8:3c:aa:8a:e4:5a:b8:d6:c6:46:48:fe:
9b:b7:7d:e0:b2:2e:bf:54:fd:98:d2:b3:55:11:08:
4b:f4:f6:c9:4f:7b:15:9a:d5:74:9f:a7:ea:e3:43:
70:f6:87:6a:3f:6a:3b:8e:d4:86:6c:c9:4b:4e:28:
fc:7b:a5:95:47:38:67:1e:df:ec:d1:9a:3f:c1:3a:
ec:8e:2f:0d:16:04:5f:28:cd:ff:a0:67:b0:9e:fb:
bf:21:dd:1d:d6:de:c0:c7:b8:40:e9:b1:51:64:a5:
99:1f:45:88:1b:5d:29:5c:b3:98:66:3c:f2:13:2d:
3b:92:29:ea:83:81:e0:bb:62:1d:28:9b:12:41:67:
54:39:20:ab:61:65:06:43:9d:4f:d4:6a:b8:03:70:
45:55:b6:d5:c5:5f:99:ff:15:07:48:dd:cd:65:fb:
95:71:6a:fd:28:9f:96:40:fa:6e:9b:34:58:f3:80:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FB:15:25:64:51:52:BE:05:D9:6B:35:D4:87:D1:73:A5:18:D5:9D
X509v3 Authority Key Identifier:
keyid:3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e8:ca:65:d8:ef:e7:14:bb:2b:f4:2d:0a:c3:85:88:e7:61:
be:0b:c9:0d:59:f9:eb:ee:72:52:c6:5f:2a:86:24:97:ea:1a:
f4:6e:cd:cf:df:56:ab:c9:85:19:dd:42:87:c2:d0:57:7d:d9:
32:55:0e:b5:a7:b2:96:11:2a:71:83:1c:03:48:ca:6e:9c:9a:
65:82:6b:c9:93:b9:17:5a:4b:05:7f:08:a0:c9:b6:34:d3:18:
cb:f4:f1:b7:c7:52:2b:5b:a4:01:56:35:a0:32:88:13:b1:b4:
73:c3:74:77:e4:65:77:bd:a9:29:47:f5:a2:d8:cf:6f:67:e8:
ef:8a:8c:d3:a2:58:2e:98:a9:4a:b5:0d:d8:25:54:13:19:45:
3f:fc:ab:4f:2b:05:7f:a4:8d:47:12:d5:dd:71:27:6c:f7:16:
31:59:73:66:05:b9:69:bd:f8:a0:1f:1c:81:bd:b5:a6:4d:cd:
de:c5:d1:96:e5:9a:ad:dd:e1:18:61:95:31:b9:1f:22:6a:59:
34:a9:08:0f:d1:5c:22:98:4f:b8:c5:ff:72:08:53:a8:98:16:
a8:aa:10:2f:08:3f:3e:bd:d0:c5:28:b7:98:9b:28:18:94:2a:
6d:4d:69:f3:54:cb:7a:6a:e6:b2:47:6d:43:e0:56:46:40:79:
82:8a:1e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:25:59 2026 by rpki-client