
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
File: PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json)
Hash identifier: HZ7TVX0Ty8oX2Wvnz6so3wNjM/F7u1JxTNKJ9eumXVQ=
Subject key identifier: 4F:EA:7D:BB:D4:D9:50:4E:87:53:DD:54:1C:80:52:C5:35:0B:B1:4F
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial: 2D7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
Manifest number: 2D44
Signing time: Sat 28 Feb 2026 15:32:22 +0000
Manifest this update: Sat 28 Feb 2026 15:32:22 +0000
Manifest next update: Sat 07 Mar 2026 15:32:22 +0000
Files and hashes: 1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: elUTiByLBdhiTW1xgPDKOxHgNsFwSsaNPew+ZnkVtPg=)
2: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: utIpka2m9g7rscMzHbDTXQACJUoOh2JMTGT7Uylt93Q=)
3: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: 1kkHmkctt/6eWi9MzTTycF3KYT1Q0JGI0rMo5fqYhBE=)
4: 14820EDE248611EEB600357DC4F9AE02.roa (hash: uoxhoDVDIdZeIGpmPVYh0+yT+vTsXXRnS1XpZHEpwfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11644 (0x2d7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Validity
Not Before: Feb 28 15:32:22 2026 GMT
Not After : Mar 7 15:32:22 2026 GMT
Subject: CN=69a30a86-e3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:72:d1:84:15:5f:dc:e9:d9:bf:3a:1d:1c:
d9:51:86:1f:31:1d:b5:66:d7:8f:f7:c2:aa:94:93:
09:3f:97:44:18:77:87:10:32:af:57:6f:94:db:13:
10:6c:de:89:66:fe:3e:7c:4e:cd:c5:f2:2a:4e:92:
cf:a9:45:37:ed:02:6b:ee:81:b9:a8:9b:66:d5:3f:
ee:4d:3f:7d:b1:91:d4:2e:fb:9d:b6:f0:7a:78:7d:
fe:d1:20:81:5d:b2:2b:42:c9:c2:4a:66:bf:12:11:
d1:9b:07:32:7a:72:0a:10:c4:4f:50:d4:50:1a:fc:
9a:f6:5b:17:c5:c2:3f:77:fa:d9:7a:2f:c9:35:a1:
9e:d5:80:56:05:ff:83:1a:52:aa:02:ba:78:6c:d5:
b0:9a:17:8d:5a:94:0c:58:2a:1f:41:9d:2b:18:0f:
a6:bf:74:a0:89:41:0d:30:b4:c3:d3:11:f5:2e:5d:
91:f0:bb:d2:48:e4:8c:b0:a2:e3:1b:5a:f5:78:c4:
96:eb:cb:66:b7:4a:f9:7c:f1:05:7d:4d:69:85:cc:
44:ab:ea:91:ca:e5:38:7e:4a:31:e2:b3:f5:e1:be:
2f:8c:41:c9:a3:49:d6:26:18:5d:4b:75:ad:3c:59:
ad:a9:48:64:e9:1a:c7:76:db:88:1b:24:2f:e2:a7:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EA:7D:BB:D4:D9:50:4E:87:53:DD:54:1C:80:52:C5:35:0B:B1:4F
X509v3 Authority Key Identifier:
keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:0c:33:e8:62:d6:97:0f:b6:a2:d3:3a:33:a2:29:bd:fa:df:
d2:9d:ad:cb:90:82:29:72:d1:35:49:2d:9e:ce:30:49:26:e3:
0d:60:94:9b:a4:41:d0:7a:26:69:cb:66:b3:c6:52:3e:a6:3f:
30:35:cf:19:3b:15:28:9f:21:9d:b0:c9:ff:75:4c:6d:d5:91:
b8:a8:4e:4e:3b:a9:9a:60:e9:33:5a:c6:b4:76:25:2d:10:1d:
ac:5e:36:1f:06:6a:f0:5f:93:23:25:11:11:80:f5:58:21:98:
bd:15:b0:ba:01:db:21:81:d0:19:b7:4f:f6:ec:e6:b7:86:d9:
19:cf:5d:38:93:ac:a2:b9:8f:41:34:2e:55:dd:65:70:f7:f8:
04:9b:46:36:14:4b:0e:07:2c:58:1f:4b:1e:e7:1a:04:fe:a7:
6a:11:9b:3f:3d:dd:1b:cf:54:8e:10:9e:6d:30:13:b0:99:bf:
8c:45:41:73:b6:df:30:bc:87:de:57:2f:c5:75:12:f2:15:c6:
ca:c0:c8:86:ce:b6:db:b5:da:f8:f0:18:1c:7a:b0:89:20:6f:
11:9a:9e:82:c0:1a:82:85:b5:f3:65:5f:c8:fd:60:3b:af:3c:
91:92:5f:4d:81:38:a4:f9:76:b8:8e:e4:72:3e:94:79:f6:d8:
97:40:2d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:01 2026 by rpki-client