
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
File: PdCVvno70d2CniomSfx-gafv40w.mft (raw, json)
Hash identifier: vUAc6Wx/ZIa+Lx2xWAJ52maphht8Ig+NRepumorxkYQ=
Subject key identifier: 98:99:E8:EE:B7:BE:20:55:43:A2:C1:83:E5:A4:38:C0:D3:D1:02:F9
Authority key identifier: 3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C
Certificate issuer: /CN=A91C8307/serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
Manifest number: E4
Signing time: Sun 01 Mar 2026 23:32:29 +0000
Manifest this update: Sun 01 Mar 2026 23:32:27 +0000
Manifest next update: Sun 08 Mar 2026 23:32:27 +0000
Files and hashes: 1: PdCVvno70d2CniomSfx-gafv40w.crl (hash: HxTHd7G8kByR33JzkKxGUT2wL/BqK/A+ooh1AASVTbI=)
2: DEDB3932BED411EF835BB47AC4F9AE02.roa (hash: WziZMnogtrt5ODR5BwAGdePYHn5IgubVnNvNashcDd8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl
rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8307, serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C
Validity
Not Before: Mar 1 23:32:27 2026 GMT
Not After : Mar 8 23:32:27 2026 GMT
Subject: CN=69a4cc8c-fd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:41:e5:55:1b:ae:e0:0c:00:ef:43:26:ff:
d5:40:59:96:c5:c2:9f:7f:c3:df:65:e1:18:2b:b4:
9a:48:47:37:d9:4c:92:56:c9:19:e3:c0:e5:ad:5d:
55:83:26:5e:9a:7d:0d:1f:e6:29:40:d3:1d:ed:05:
f6:91:94:7e:1a:8d:e5:fc:e7:54:54:83:3f:9f:b3:
07:54:0b:1a:51:cf:5b:3e:72:cd:c7:33:ba:1f:3d:
70:81:2e:f5:54:1b:e9:f4:f2:b8:ce:fa:48:f2:ae:
9e:20:98:75:a8:e7:49:57:f5:dc:f7:63:83:95:8a:
aa:2e:5e:be:00:90:e3:dc:d3:3c:b2:3d:ed:47:b7:
0a:37:72:74:6e:d0:87:e9:bb:87:bd:39:60:af:62:
a2:b8:bd:5a:73:36:95:3a:fa:bb:8e:c2:8d:d0:d7:
de:49:1b:35:0e:d3:f8:c2:60:1c:a4:c2:7f:b6:b1:
e5:23:ce:ee:54:ef:5f:b7:90:89:d4:05:2a:18:7c:
36:4b:f3:86:99:99:a9:73:19:f7:b7:c6:e4:06:ed:
58:36:74:7e:e6:b8:13:ab:3e:d4:9b:be:dd:7d:4d:
0c:9a:6b:c4:d9:60:58:58:c5:98:c3:ec:12:81:fd:
6e:da:a2:3b:be:4f:3e:bb:ee:86:05:c4:2d:5e:76:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:99:E8:EE:B7:BE:20:55:43:A2:C1:83:E5:A4:38:C0:D3:D1:02:F9
X509v3 Authority Key Identifier:
keyid:3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:95:61:8a:5f:a2:c7:a0:40:77:37:70:8f:40:6f:cb:8b:2a:
72:3f:3d:8a:c0:5c:ae:26:64:ee:e6:68:d3:6d:b4:82:b5:62:
64:7f:84:33:88:a0:a5:9a:1f:4d:44:42:22:88:b2:da:f6:03:
7e:6f:d3:64:19:1b:56:9d:09:73:f9:d3:bc:61:6f:03:1e:44:
91:d5:30:27:a9:95:98:a5:cb:c2:cc:fd:bf:97:0d:73:ba:30:
11:64:7f:05:48:26:01:c5:7e:be:b8:ae:2d:38:01:bf:57:cf:
da:5e:c8:ad:d9:e4:43:75:81:a0:70:71:2f:ea:60:14:a3:c2:
d4:a6:ba:4d:be:d4:88:a7:99:92:90:b8:eb:be:51:19:7f:d9:
2e:c7:b0:2c:6b:7e:0e:fb:cd:e3:56:73:f3:d9:73:cd:df:ce:
f2:6f:3c:29:ca:79:14:35:7c:c1:df:b3:ad:28:38:dc:c9:89:
2d:6f:52:20:27:f5:c9:22:01:02:d0:c3:d4:6a:06:9e:8f:af:
23:88:c3:53:4c:56:97:71:0d:2f:5a:3b:23:27:02:4c:a6:77:
49:b7:31:65:90:01:98:e6:e6:1f:91:b0:43:05:9c:d3:83:c0:
f6:72:b2:80:e1:8c:1c:5b:5a:e3:47:e3:fd:dd:bf:e3:60:32:
f1:f0:c5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:59 2026 by rpki-client