
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
File: PdCVvno70d2CniomSfx-gafv40w.mft (raw, json)
Hash identifier: uYWTnD4A1U4lUsgZY1oCj4gFE0oGgLoK/wx5zMMUJgw=
Subject key identifier: A6:7E:79:25:C0:DE:54:9A:25:D6:31:FE:6C:34:A0:7B:B7:5E:0D:00
Authority key identifier: 3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C
Certificate issuer: /CN=A91C8307/serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
Manifest number: FC
Signing time: Fri 17 Apr 2026 05:56:28 +0000
Manifest this update: Fri 17 Apr 2026 05:56:27 +0000
Manifest next update: Fri 24 Apr 2026 05:56:27 +0000
Files and hashes: 1: PdCVvno70d2CniomSfx-gafv40w.crl (hash: LGo3UOHiT9WR25/9sEDnCDg0ySc1eopAE9b2f7Vfmiw=)
2: DEDB3932BED411EF835BB47AC4F9AE02.roa (hash: WziZMnogtrt5ODR5BwAGdePYHn5IgubVnNvNashcDd8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl
rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8307, serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C
Validity
Not Before: Apr 17 05:56:27 2026 GMT
Not After : Apr 24 05:56:27 2026 GMT
Subject: CN=69e1cb8c-3c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:29:dc:c0:b5:ee:23:3f:99:06:21:56:39:
2e:f7:d1:bd:59:82:db:a3:b2:68:31:98:22:40:6b:
a2:02:7c:bd:95:27:49:b4:47:38:2e:5f:e5:51:37:
d4:6f:45:6b:d0:d8:2d:2e:ba:64:8e:1f:b3:37:bd:
fb:b3:d3:df:af:58:aa:b3:84:c7:b7:84:bb:92:7a:
07:13:3f:e7:15:8c:87:49:57:2c:9a:f6:5b:57:30:
4d:8c:fc:59:88:24:df:44:08:3f:59:47:de:ee:dc:
d8:1e:23:78:9c:b7:a1:93:8c:3f:7f:df:3b:7a:8e:
9c:0b:4d:f1:49:dd:b8:ea:a9:ab:88:91:c1:86:72:
1a:c5:b8:b0:f6:69:1e:30:b2:2e:d0:8f:1d:21:6c:
37:97:a2:eb:59:75:86:e5:22:7b:ad:c0:4b:6e:cd:
c8:ef:7e:2b:76:a9:84:20:bf:67:2a:01:fb:fa:0b:
b5:51:96:36:be:0a:aa:72:7c:9c:d7:5d:89:ae:f5:
d7:1a:4e:a1:c3:f3:b2:f1:b9:3f:80:27:f4:bd:93:
f2:6e:9d:dd:f5:e9:ac:9a:23:cf:08:9a:60:b3:3c:
ad:12:12:31:4f:f0:9c:df:fc:8a:20:18:ef:9c:25:
60:e3:16:66:f5:ca:db:ac:63:a2:a9:ec:97:26:2f:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7E:79:25:C0:DE:54:9A:25:D6:31:FE:6C:34:A0:7B:B7:5E:0D:00
X509v3 Authority Key Identifier:
keyid:3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:b1:86:c3:29:fd:79:18:7b:69:98:fc:e4:89:ae:7f:3a:90:
74:22:51:02:6e:cd:b2:7e:5e:94:82:f2:d2:00:22:73:e6:b0:
b6:dd:4b:ff:e1:f6:1e:83:fa:86:76:fb:9d:b2:cd:1b:43:1f:
64:bb:94:0c:ff:4b:9f:b2:a1:24:2c:3a:d5:fc:bf:37:9d:b3:
27:e4:2b:4b:d4:31:c7:e0:da:a7:79:5f:43:3a:5a:91:41:1b:
6b:48:a8:db:26:a4:44:00:08:3f:cc:eb:a6:84:a1:8c:c6:3a:
bf:09:92:72:1c:f0:0d:aa:c6:35:68:a8:02:f4:ee:ca:06:f0:
d4:87:b8:82:62:8b:95:86:ad:0a:59:75:bb:93:48:e2:21:cc:
76:b2:a3:06:47:7c:35:b7:3b:d9:c4:1a:55:bc:9e:25:e8:16:
42:41:93:16:9b:5f:5a:3d:b0:97:0e:a3:8f:7e:58:b5:2b:00:
90:f7:22:19:f5:22:c6:90:ef:09:03:ca:29:91:fe:bb:1e:13:
db:0d:25:4c:8b:cc:fb:1f:52:3c:94:af:1a:db:78:c0:09:3c:
f9:01:f6:15:49:ec:57:87:7c:97:4a:97:f2:2a:01:09:7f:13:
ce:73:e1:ac:c2:0b:24:42:fa:c3:49:7e:49:b7:f8:f2:36:13:
d1:40:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:27 2026 by rpki-client