
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
File: PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json)
Hash identifier: DzW8N8Dd+TyiuGs5x7Lhux1VrR3ANrGk9veG6Ygu+zE=
Subject key identifier: 8C:D3:D5:48:25:66:B1:25:3B:90:85:DA:D0:46:F9:AF:A1:97:2C:59
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial: 2DAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
Manifest number: 2D60
Signing time: Sat 18 Apr 2026 15:28:22 +0000
Manifest this update: Sat 18 Apr 2026 15:28:22 +0000
Manifest next update: Sat 25 Apr 2026 15:28:22 +0000
Files and hashes: 1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: xn/XhVecXBWt/lzRbGK4M4gL7cehfPfdceMSOdFCBOI=)
2: 14820EDE248611EEB600357DC4F9AE02.roa (hash: ILtVZce+EeOlerO/s4x6aPfHR6PK7/NY4qOIZJx05so=)
3: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: aHD9k1CO/91sgZuODhSSCG/52z7yS492WmwyS5uktA4=)
4: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: xXPAl2rdlXbRKGiZrQ383xk0pehWZEjj7jMTsKVw0eI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 15:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11690 (0x2daa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Validity
Not Before: Apr 18 15:28:22 2026 GMT
Not After : Apr 25 15:28:22 2026 GMT
Subject: CN=69e3a316-9a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:f3:0b:70:85:01:20:27:6d:cf:0d:c6:8a:
37:8e:bf:e4:60:e6:e8:6b:ca:9d:ce:de:a5:7f:0f:
02:81:29:5b:8e:5f:62:ec:b5:44:73:5f:44:c6:06:
ea:a0:6b:b4:65:79:e6:6b:6e:60:3b:d3:ec:67:0d:
7e:8a:31:b3:26:9a:12:95:ed:3d:ed:94:8b:ea:e9:
47:a7:9e:05:df:52:de:c7:f6:86:1a:ed:25:0a:bb:
60:c0:0b:59:dd:2d:84:19:6c:a6:cd:fc:7e:8b:ad:
9e:7b:c8:2f:c3:c5:02:5d:14:b5:cc:7c:d1:6b:5d:
aa:7a:c9:c1:35:3f:c5:94:60:e7:42:7e:fc:1b:f5:
b3:f7:9a:be:a8:24:14:f5:27:d5:e8:c9:41:e2:b7:
6e:55:ac:f3:2e:16:a1:b6:94:a9:c1:ea:56:5e:da:
a9:e1:fc:85:e7:67:66:ba:84:90:b1:a7:33:f6:fb:
ff:85:52:fe:00:93:2c:f7:05:84:d7:9c:5a:cb:74:
aa:4b:a5:2d:fe:4f:49:b2:c4:d8:4a:88:ec:54:42:
17:98:8d:3e:a1:31:3e:84:14:76:c4:4a:45:89:22:
8a:6f:d0:75:78:8b:51:77:e3:ac:29:f2:a9:7f:60:
9c:9e:7b:1f:63:fe:65:f3:2f:ea:28:6f:81:ce:3c:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D3:D5:48:25:66:B1:25:3B:90:85:DA:D0:46:F9:AF:A1:97:2C:59
X509v3 Authority Key Identifier:
keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:e2:67:ea:d7:92:cc:cc:9a:65:51:77:17:7b:21:39:89:88:
11:99:0b:fd:48:9e:10:c6:48:bd:11:5d:88:98:d4:43:18:5c:
fe:3f:c3:13:e7:ff:97:56:b0:7b:14:cd:47:7c:2f:2f:cc:b3:
54:8d:eb:66:9c:2e:2f:17:36:99:c5:a7:44:71:98:ce:58:1f:
89:48:61:cd:43:11:b5:17:34:e1:e0:b0:27:be:21:0d:5e:9e:
28:a4:90:60:0f:d6:5e:c5:0f:5c:8f:f7:d5:ea:1c:2c:60:dc:
62:ae:10:41:3d:18:cc:86:7f:80:12:f6:fe:b9:e5:f1:55:59:
1d:e1:a2:56:3a:e5:8c:d2:7f:58:b4:e5:e6:22:7c:d9:52:84:
29:d4:93:9a:03:25:6d:cc:7f:eb:ee:fe:ce:f8:d2:4a:11:77:
4b:4d:9e:4e:ed:f1:ea:f1:0a:e9:a5:52:2e:d9:ea:eb:a3:68:
85:8f:39:75:77:b1:27:05:5a:55:3c:fe:fb:7c:53:ac:47:5d:
a6:c1:7d:f3:db:41:31:d2:52:06:84:0e:33:9f:a5:78:db:f8:
d6:cf:fd:92:6b:84:53:84:fc:0b:c8:74:a1:82:3d:71:6c:a8:
e7:dc:91:a9:2f:36:69:6c:9f:ae:b5:64:64:c2:54:28:b8:47:
cf:55:7b:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5
MTA5MEY5MjEwHhcNMjYwNDE4MTUyODIyWhcNMjYwNDI1MTUyODIyWjAYMRYwFAYD
VQQDEw02OWUzYTMxNi05YTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApYzzC3CFASAnbc8Nxoo3jr/kYOboa8qdzt6lfw8CgSlbjl9i7LVEc19Exgbq
oGu0ZXnma25gO9PsZw1+ijGzJpoSle097ZSL6ulHp54F31Lex/aGGu0lCrtgwAtZ
3S2EGWymzfx+i62ee8gvw8UCXRS1zHzRa12qesnBNT/FlGDnQn78G/Wz95q+qCQU
9SfV6MlB4rduVazzLhahtpSpwepWXtqp4fyF52dmuoSQsacz9vv/hVL+AJMs9wWE
15xay3SqS6Ut/k9JssTYSojsVEIXmI0+oTE+hBR2xEpFiSKKb9B1eItRd+OsKfKp
f2CcnnsfY/5l8y/qKG+BzjwNEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIzT1Ugl
ZrElO5CF2tBG+a+hlyxZMB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4
OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTJENS81Rjg2MUVFNkI4OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWdu
S1dOcThQT2pkZE9SQ1EtU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWeJn6teSzMyaZVF3F3shOYmIEZkL/UieEMZIvRFdiJjUQxhc/j/DE+f/l1aw
exTNR3wvL8yzVI3rZpwuLxc2mcWnRHGYzlgfiUhhzUMRtRc04eCwJ74hDV6eKKSQ
YA/WXsUPXI/31eocLGDcYq4QQT0YzIZ/gBL2/rnl8VVZHeGiVjrljNJ/WLTl5iJ8
2VKEKdSTmgMlbcx/6+7+zvjSShF3S02eTu3x6vEK6aVSLtnq66NohY85dXexJwVa
VTz++3xTrEddpsF989tBMdJSBoQOM5+leNv41s/9kmuEU4T8C8h0oYI9cWyo59yR
qS82aWyfrrVkZMJUKLhHz1V7kQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:17 2026 by rpki-client