
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
File: PykJw_UywAsCV7klbHbroxTc0A8.mft (raw, json)
Hash identifier: cZTfprZBbS4sQIZCNVcDfZtzkTF8KCf+2gSeMR36bu4=
Subject key identifier: 60:E3:CC:8D:46:EA:98:49:B3:51:77:D3:7B:92:47:7B:AD:D5:B3:64
Authority key identifier: 3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
Certificate issuer: /CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Certificate serial: 0325
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
Manifest number: 0315
Signing time: Mon 02 Mar 2026 01:54:29 +0000
Manifest this update: Mon 02 Mar 2026 01:54:26 +0000
Manifest next update: Mon 09 Mar 2026 01:54:26 +0000
Files and hashes: 1: PykJw_UywAsCV7klbHbroxTc0A8.crl (hash: w7jyaQt8oFDCVSTJRN16VkBhOnTR2hV5gkYrtorcwKc=)
2: 99A7637060B311EEBA329E54C4F9AE02.roa (hash: O3Ls+9YBYFMKkyDDzAoAnYOjitWoJ58mnyLKpWOVBLM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl
rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 805 (0x325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C71A5, serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Validity
Not Before: Mar 2 01:54:26 2026 GMT
Not After : Mar 9 01:54:26 2026 GMT
Subject: CN=69a4edd4-276b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:85:21:57:01:30:71:f8:f5:1c:02:07:ec:
b8:d3:7f:ec:ef:41:7d:f7:c8:02:d4:a3:8a:9d:6e:
69:25:0e:20:57:0d:58:b2:b8:af:a0:b1:c3:49:f4:
69:a5:c7:e2:5c:f5:34:30:a8:f9:f1:10:43:88:ee:
5e:29:f1:da:e8:9b:90:10:11:ea:35:a2:48:7d:4e:
22:ee:09:6b:03:36:35:e7:f5:4c:3e:b5:1e:ad:65:
70:62:fe:df:c4:e2:a7:11:c2:7a:73:d0:f2:2c:53:
14:91:a7:97:2c:f9:8b:77:19:8d:87:83:53:2d:01:
3f:8a:62:91:51:bd:92:1a:28:e5:76:66:99:30:c9:
d5:b8:5a:80:2d:ce:07:40:ea:f6:43:43:c0:f4:80:
1f:08:55:34:4d:f8:20:4d:31:be:28:27:73:dc:c0:
33:f8:f6:de:1d:ab:31:76:13:8e:a3:9d:c3:c5:d9:
93:5a:37:97:e5:8b:fe:47:ae:64:84:7b:cf:4d:98:
3e:39:ea:f0:6a:3d:6f:c1:6c:94:ff:81:77:57:77:
5b:51:a3:2e:10:ef:b6:74:f5:49:e5:be:8c:e5:36:
6a:dd:31:6e:29:fe:31:eb:f3:e9:d1:70:aa:eb:38:
bb:f8:40:17:74:0d:ab:b9:4c:44:69:0a:37:c2:4a:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E3:CC:8D:46:EA:98:49:B3:51:77:D3:7B:92:47:7B:AD:D5:B3:64
X509v3 Authority Key Identifier:
keyid:3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a7:26:95:7c:52:8e:f6:bf:6b:51:8d:f4:ea:af:98:8c:fa:
64:43:d8:42:e3:15:c9:f6:22:f1:5c:ec:b5:2f:d1:45:d1:a4:
ae:75:7b:08:dc:65:53:aa:8e:06:f4:3b:c2:b5:13:a4:bc:07:
f8:c2:55:d3:d9:71:c4:db:3d:51:71:86:de:ee:08:bc:7b:30:
37:21:4a:80:4d:39:7a:84:be:e2:a8:81:95:5c:d3:79:b0:c4:
ef:7a:e7:c1:7b:bb:bc:b9:bb:f4:3e:87:2b:80:49:bb:3e:32:
f6:cc:a0:70:2c:30:34:bc:ab:c6:fe:d6:58:af:c2:97:bd:1e:
c3:a9:f6:48:90:95:65:29:53:01:25:c6:ba:be:b9:40:47:2e:
f7:47:ae:b7:5a:34:c8:35:61:39:17:2b:a2:26:c5:65:1c:27:
e9:4e:56:04:42:42:01:42:dc:1d:da:82:54:44:1f:ca:fb:3f:
51:d1:11:61:e8:f6:4d:f1:91:57:20:da:d1:3b:38:b1:c2:41:
16:eb:bc:10:8a:ed:f1:ab:1a:95:0c:0e:f0:f8:11:61:eb:bd:
2b:7a:1e:12:4e:18:cc:36:fe:20:36:57:3b:f0:d0:39:41:18:
3d:71:80:25:72:48:4c:89:fd:b6:c7:dd:52:ea:b4:33:e4:b2:
c1:ee:20:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:41 2026 by rpki-client