
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json)
Hash identifier: 01CozJoq3MukxQZl5/SH3TILK52C8FlIvQjTogXJR6k=
Subject key identifier: 86:D2:5B:54:0F:94:A9:EE:17:0E:5C:43:1D:01:20:86:57:3C:92:63
Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02
Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402
Certificate serial: 0474
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
Manifest number: 046D
Signing time: Mon 27 Jul 2026 01:08:38 +0000
Manifest this update: Mon 27 Jul 2026 01:08:37 +0000
Manifest next update: Mon 03 Aug 2026 01:08:37 +0000
Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: VFzrmvav3YuDqmRv8wf5xf1MEJJ0gbn5tcQt80Mwu+4=)
2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: crOzhXkSx5L+vjk+uogxATh7I9S04wmUq19GJ5qDpWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl
rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1140 (0x474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402
Validity
Not Before: Jul 27 01:08:37 2026 GMT
Not After : Aug 3 01:08:37 2026 GMT
Subject: CN=6a66af96-7fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:d2:d6:0d:1d:31:6b:61:80:8e:04:81:ca:
e6:20:17:3f:35:29:23:95:f8:5d:dd:50:94:63:87:
f1:c7:7e:3c:38:b5:ff:43:c5:94:f9:2f:6a:ac:17:
f8:79:1d:fc:91:dd:99:d8:8b:a1:5d:5e:24:42:af:
1f:11:d5:09:bd:02:f4:32:5f:b6:4f:0f:22:cd:87:
51:4e:0d:fc:67:94:73:6d:43:42:ea:c2:ea:b5:dc:
3d:0d:fb:d1:27:f7:26:4b:bc:74:00:4e:d7:62:3e:
84:38:f8:46:2f:15:1a:f4:87:bd:e9:06:ac:9d:73:
e3:4f:d7:4a:d3:d3:33:85:6d:b7:b5:cd:7a:0d:01:
8c:71:4b:78:e0:87:85:fa:73:d2:ef:10:ff:c2:08:
02:05:d4:e1:c7:1b:b7:1b:1f:75:69:c3:1a:ab:a0:
6a:7d:20:88:1e:62:cb:d8:f5:c0:d7:df:8c:ef:49:
88:41:02:e0:f9:88:19:e9:b3:f0:8e:95:9d:fa:57:
c5:d7:f5:4e:bd:41:e9:00:06:5f:f6:d0:95:d5:3f:
cb:2e:bc:e6:32:7f:9d:33:50:3d:98:21:c5:ce:0e:
dc:3c:c8:95:84:15:46:17:46:c0:06:f6:8b:40:e8:
59:38:7d:9e:1b:83:11:a7:9b:34:d1:1d:bc:74:e7:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:5B:54:0F:94:A9:EE:17:0E:5C:43:1D:01:20:86:57:3C:92:63
X509v3 Authority Key Identifier:
keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0f:9e:cb:de:bc:be:9c:13:e6:d3:50:62:4b:ac:71:07:29:
f5:ef:3d:1f:dc:18:7c:79:a0:6d:17:20:3a:fb:3e:2e:b4:ea:
24:02:4a:fc:75:c8:33:e9:cf:a9:b7:ea:e3:71:74:76:21:7e:
e1:b2:63:0f:13:b1:71:fb:3e:eb:96:c5:ee:db:05:8c:c8:3a:
24:6e:b1:19:2b:b1:2a:53:9b:59:cd:72:49:0b:70:78:16:93:
ae:c0:54:59:11:9b:f4:79:91:3c:92:9b:90:7b:ce:a7:4d:75:
12:09:67:06:93:1a:34:aa:8f:dc:2a:c1:61:68:ca:99:d4:71:
93:18:f6:15:6c:c2:e1:2e:71:76:86:7a:07:97:9c:25:37:79:
44:fc:a3:b3:bb:af:e2:c7:ea:6c:d3:c6:18:0b:26:17:56:18:
33:c8:c3:25:13:f8:b4:63:c1:08:91:cb:e2:87:82:16:67:52:
8c:11:eb:dd:2e:5f:1c:4d:cc:bf:61:b1:1d:10:5f:95:b2:47:
5d:2d:64:b3:f1:16:3a:c4:b2:df:87:d6:03:97:c5:bb:03:71:
ce:05:96:61:c2:fa:ca:e0:50:8e:28:1a:8d:11:91:cc:10:f9:
6a:fd:31:0c:a8:88:e4:96:5d:ba:91:a1:9e:0a:d9:f0:03:04:
c4:b7:f5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:17 2026 by rpki-client