
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
File: pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json)
Hash identifier: 8TMOaFkC2NJ4jWP/xULvCnKB2kXayD44wwhEccg4gtc=
Subject key identifier: FB:4C:43:5A:B8:70:8E:C9:17:4E:80:0B:67:08:7A:38:38:9C:BB:87
Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1
Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1
Certificate serial: 027C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
Manifest number: 0275
Signing time: Mon 27 Jul 2026 03:23:50 +0000
Manifest this update: Mon 27 Jul 2026 03:23:49 +0000
Manifest next update: Mon 03 Aug 2026 03:23:49 +0000
Files and hashes: 1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: GKGYaxXRyIXY/XqoUXSymiJowZ0BWUBD0ZcoAdZQIBE=)
2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: oPoTgdYw+Xp4zsCLRgOst4RRIJvgrTE9ExRg+Am+0NI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl
rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1
Validity
Not Before: Jul 27 03:23:49 2026 GMT
Not After : Aug 3 03:23:49 2026 GMT
Subject: CN=6a66cf46-b342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:4e:f0:f6:14:92:8e:dc:f3:6f:06:30:33:
46:0d:23:af:99:e1:15:2e:be:f8:6b:08:e6:62:25:
6f:9e:76:e0:33:08:c9:e8:87:df:7a:35:58:b5:52:
eb:6a:eb:29:b5:ab:e4:56:81:7e:3a:07:58:29:67:
e8:e9:5d:f6:fc:37:86:0a:11:4b:a0:40:b4:89:9f:
80:2e:20:65:d5:67:c0:c5:01:5b:c8:27:bd:2a:43:
a1:be:bf:1e:05:79:c9:7f:58:45:75:a5:59:8f:3c:
44:1e:58:22:e7:e2:d2:46:c5:1e:a4:5d:82:cc:0e:
1c:c7:03:03:de:3f:00:f6:b7:fc:9a:90:7b:0a:7e:
ec:7d:af:5b:11:93:80:b1:bf:32:97:e2:d8:e8:60:
49:2e:5f:d5:80:44:0b:4a:ef:76:0e:3e:70:f4:fd:
92:26:ab:da:69:df:5a:0d:a3:0d:22:e9:f8:ba:87:
89:6c:b5:63:5a:c5:9f:b6:ba:8d:cb:95:1c:35:b2:
67:0e:2b:2d:01:12:fb:ab:24:8c:b0:42:1b:db:ac:
3d:6b:60:47:35:30:ce:58:95:7d:d8:54:1e:fd:fa:
0c:31:46:8c:c4:68:9c:f7:e1:6f:2b:c5:51:14:0d:
b7:19:b2:15:eb:45:a8:b8:73:60:c3:9b:95:fd:3c:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4C:43:5A:B8:70:8E:C9:17:4E:80:0B:67:08:7A:38:38:9C:BB:87
X509v3 Authority Key Identifier:
keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:bf:45:8e:d5:d3:9f:8a:6d:2e:d3:4d:cd:fd:4e:da:20:4a:
7b:a1:a3:ad:82:78:7b:ac:2b:5d:ff:b0:bd:76:ed:eb:d4:66:
30:40:75:6d:ef:27:f0:6e:a9:aa:db:6f:fa:cd:09:c2:4f:96:
7f:11:6f:1d:f6:8b:d1:68:36:9b:2e:c3:6e:3b:45:82:72:96:
78:55:55:4e:9e:7a:95:69:5e:93:2d:b4:d7:9f:b7:e9:5c:30:
60:e4:3d:4e:e7:37:d8:88:c9:17:db:4d:e7:65:f0:3b:f7:a7:
f8:47:a1:ea:9b:f2:0d:26:51:08:8d:0f:9f:79:33:40:c5:a2:
26:05:f2:f0:8f:86:c5:80:5a:07:07:3f:a6:e5:21:4d:b4:e2:
d7:0e:04:08:bb:f4:03:83:97:d4:30:55:bc:50:33:34:16:32:
44:4e:a4:c3:4d:4f:61:73:22:51:85:74:3b:ce:59:53:4f:af:
05:aa:db:59:ac:74:5e:0f:8d:97:0b:6c:de:aa:22:7f:76:0f:
1e:3f:fe:ba:a5:89:3f:09:90:df:c5:17:f6:6e:3b:bd:7b:f8:
17:33:ef:c1:0a:8e:d0:84:88:be:4e:e0:b8:e8:ee:1e:af:6b:
38:55:33:82:4c:46:73:cd:e5:93:a6:7f:d0:94:0e:86:00:a3:
56:a7:ed:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:40 2026 by rpki-client