
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
File: PdCVvno70d2CniomSfx-gafv40w.mft (raw, json)
Hash identifier: x/GY2qIg6o3JFmwQmUhRiDyCO9UXhtFXKs7lYjB8/38=
Subject key identifier: 9E:0C:FA:74:87:63:0D:C9:B8:9F:CF:33:AE:68:51:F8:E8:1B:26:0E
Authority key identifier: 3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C
Certificate issuer: /CN=A91C8307/serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
Manifest number: 0118
Signing time: Sat 13 Jun 2026 06:00:20 +0000
Manifest this update: Sat 13 Jun 2026 06:00:20 +0000
Manifest next update: Sat 20 Jun 2026 06:00:20 +0000
Files and hashes: 1: PdCVvno70d2CniomSfx-gafv40w.crl (hash: mFb9iPxSCGMM8GF2orhwsOiba0K6TSDZTUzMWpav+fo=)
2: DEDB3932BED411EF835BB47AC4F9AE02.roa (hash: WziZMnogtrt5ODR5BwAGdePYHn5IgubVnNvNashcDd8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl
rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8307, serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C
Validity
Not Before: Jun 13 06:00:20 2026 GMT
Not After : Jun 20 06:00:20 2026 GMT
Subject: CN=6a2cf1f4-a4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:d8:17:d2:e2:63:74:b4:8e:ab:8f:f9:0c:
db:ed:5a:82:bd:60:15:ad:fb:51:f7:bb:f6:5c:a7:
58:7b:66:87:c7:93:50:89:dc:55:a7:a5:1d:ea:ae:
57:81:d6:db:9b:6a:07:99:09:b1:36:e3:69:3d:cc:
fc:0c:b2:3e:f8:d2:0c:81:cd:84:63:62:9e:5d:f8:
00:9d:ef:62:0d:14:19:ea:88:a8:b1:13:96:3b:19:
ed:6b:a9:bd:13:d7:97:f0:f0:d1:cd:c9:fa:47:51:
8d:1e:1d:0f:c3:c2:33:e9:3e:1f:e5:f7:e6:a9:9d:
9c:0f:20:20:d5:1c:d2:22:bd:43:ca:f7:05:2b:06:
99:5a:5d:93:4a:03:30:b9:74:59:72:ef:58:b4:61:
a9:b2:23:d8:58:f4:9b:13:f7:84:e6:4c:27:f6:94:
57:4d:61:c3:ec:b4:f3:aa:07:ab:7e:c8:6a:41:7f:
f1:eb:54:6e:d2:18:e1:60:10:71:94:d5:40:c4:83:
d8:8d:81:b0:61:df:d0:91:2c:de:34:bb:02:79:ec:
50:c3:32:cb:7f:da:0e:aa:dc:1e:56:e2:5d:a6:b2:
93:7e:25:4c:05:5d:e6:19:33:c2:28:dd:45:4a:b4:
22:c6:3b:2d:a7:63:e2:03:50:7d:a1:6b:41:37:a7:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0C:FA:74:87:63:0D:C9:B8:9F:CF:33:AE:68:51:F8:E8:1B:26:0E
X509v3 Authority Key Identifier:
keyid:3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1c:58:9d:eb:04:5c:ec:22:7e:5c:d5:dd:02:85:33:75:84:
e0:4a:4e:9e:6b:46:25:2c:44:f1:7b:bc:9d:90:36:80:56:5d:
23:5c:9d:a8:55:b8:7f:60:fb:d0:9b:3a:fc:76:cd:b9:26:ab:
fa:2e:cf:f7:91:36:5f:58:a7:96:c6:29:53:c1:60:21:04:07:
dc:5a:85:0d:9c:c2:37:59:96:22:c8:00:39:94:59:88:de:4a:
9a:67:da:1a:b1:d2:b0:6f:8d:f1:89:67:66:64:28:7c:2c:07:
57:e3:91:dd:e1:a6:75:f3:67:83:86:72:d5:b9:05:3b:04:2c:
6a:da:f0:c1:10:25:4f:28:92:64:b0:68:b4:94:c9:cb:24:50:
11:39:79:e2:e2:26:52:a7:65:5c:ba:3f:0f:c5:77:98:82:3a:
b0:42:a7:14:99:66:5c:a9:57:e2:73:25:c8:fc:c5:b8:54:98:
5e:02:ca:09:9b:13:7e:50:8a:ef:36:64:d3:4e:34:cd:6b:a4:
82:e8:4c:09:c7:f0:4d:fd:dd:de:d7:db:8b:0f:ac:0d:b2:ff:
29:46:1f:49:56:6d:2d:a3:d4:b7:d9:7b:97:86:79:4e:9b:f1:
32:af:ef:be:2b:9c:2b:ed:6b:49:27:a3:62:34:f8:3b:29:62:
b0:28:ad:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:37:24 2026 by rpki-client