
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
File: PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json)
Hash identifier: w21DJNUkKbir2I7/nCJsDkQ/hJKShezHzQOzaYT/r3w=
Subject key identifier: 65:FF:1A:46:01:38:89:29:3A:5F:F9:71:61:D4:30:41:A6:6A:58:FD
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial: 2DCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
Manifest number: 2D82
Signing time: Fri 12 Jun 2026 15:29:42 +0000
Manifest this update: Fri 12 Jun 2026 15:29:41 +0000
Manifest next update: Fri 19 Jun 2026 15:29:41 +0000
Files and hashes: 1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: bDndYZmewXvsfWK8jQmRe2D2oWnWkca28r0lgtdEmjU=)
2: 14820EDE248611EEB600357DC4F9AE02.roa (hash: ILtVZce+EeOlerO/s4x6aPfHR6PK7/NY4qOIZJx05so=)
3: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: RXO1XpKpDHd4WaDK6duD7CX+yNyzIe2Ehp9KECdzKRc=)
4: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: aHD9k1CO/91sgZuODhSSCG/52z7yS492WmwyS5uktA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11725 (0x2dcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Validity
Not Before: Jun 12 15:29:41 2026 GMT
Not After : Jun 19 15:29:41 2026 GMT
Subject: CN=6a2c25e6-2400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:98:4a:61:9b:57:ea:a7:54:5c:36:29:17:
76:72:88:d0:1f:be:3d:06:5c:e2:06:d2:48:67:f0:
5c:e9:19:9d:f4:31:6f:8a:01:bb:ca:8f:bc:0f:b0:
c6:e4:87:1e:3e:01:36:0e:15:2d:19:94:39:42:21:
34:cf:c1:1a:4f:d8:b9:5b:a8:07:ff:bc:8f:00:ce:
0c:f4:06:0c:fb:3d:05:6b:2e:d8:80:a6:46:15:ef:
7a:e7:52:f3:38:f5:1c:56:47:4a:f9:c9:4d:51:c9:
28:68:06:48:d2:1c:59:54:a2:8a:27:40:4e:c6:9b:
8d:9a:0e:3d:ff:76:b5:9b:c1:a6:5c:3f:01:18:f0:
72:c1:e0:16:7c:cb:92:61:e5:f5:38:03:fe:0f:2f:
e1:7a:d2:be:98:88:34:d2:6b:9d:57:6d:97:25:c8:
70:a7:d0:82:0a:62:60:e3:50:8f:d3:12:03:f9:d3:
84:83:73:43:db:c4:ab:e4:ac:51:ba:2e:b6:df:66:
a5:1d:89:72:29:09:0d:21:a1:cb:fe:e9:07:45:84:
b8:39:ff:96:e3:b0:6f:a6:cf:90:26:ec:a5:2f:69:
39:ae:4a:13:e9:ba:58:a6:4c:44:53:0e:88:dc:09:
82:8b:26:d9:9b:f3:23:f6:b4:13:36:38:2e:13:8c:
92:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FF:1A:46:01:38:89:29:3A:5F:F9:71:61:D4:30:41:A6:6A:58:FD
X509v3 Authority Key Identifier:
keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a3:ee:4d:bd:95:42:f9:07:f1:c8:7b:eb:e0:c2:97:91:c1:
67:12:0f:48:07:df:f5:86:e1:0c:f8:26:fe:1f:20:08:2d:97:
00:f3:bb:ea:6a:94:81:20:56:b2:39:cb:37:91:32:6c:5f:d9:
1f:e4:3c:49:d4:31:b0:7a:ca:53:c2:14:43:6d:f5:4f:f3:2b:
28:56:a5:4f:cb:3a:7d:d8:4a:0c:09:99:50:fd:4d:9b:da:b9:
31:7d:b2:89:a0:47:8a:ee:57:0f:0e:7f:63:23:70:ef:72:ff:
50:2a:00:2d:05:c4:1e:54:bf:ce:7c:35:ed:82:72:cb:a6:7d:
51:07:fd:71:1f:89:d5:33:ad:70:47:8c:0f:f7:a1:0a:d8:7f:
03:9c:be:1e:49:c7:fa:e1:84:0e:40:4f:25:b6:68:b3:cb:5a:
30:02:51:1f:67:07:8c:ba:6c:4d:76:c8:61:e6:71:09:07:d4:
0c:9d:6d:e9:62:fa:95:4c:93:a8:04:00:34:59:c7:9b:b7:4a:
61:49:7e:f3:fe:af:6d:98:fb:a6:5a:f7:63:46:7c:28:80:58:
cc:5d:a8:88:b7:34:f3:ac:50:6c:4c:ab:e3:df:18:49:53:94:
98:a6:aa:8a:0e:8b:7a:45:de:9a:59:65:59:1e:ec:5c:d7:cf:
c9:b5:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:58 2026 by rpki-client