
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier: wmO3uik7WoxC+KsB0U5NPaTijsVO/ZijOnUzV4+Pc0c=
Subject key identifier: FE:B0:F5:10:2B:B0:03:A7:20:56:97:3B:71:0C:D5:AC:3B:44:5C:25
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number: 010C
Signing time: Wed 29 Jul 2026 07:27:27 +0000
Manifest this update: Wed 29 Jul 2026 07:27:27 +0000
Manifest next update: Wed 05 Aug 2026 07:27:27 +0000
Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: ooTYIG+nfLx8W2EtSrwiZ99SuXnOcvtydMmd/djCIkc=)
2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: pKM2r60kiKPj1EOj5o/9P1X4OcOTkc7kjSEawMzaPfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 06:58:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Validity
Not Before: Jul 29 07:27:27 2026 GMT
Not After : Aug 5 07:27:27 2026 GMT
Subject: CN=6a69ab5f-a034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:6a:cc:4a:77:f0:25:80:1c:d1:fb:9f:fc:
e0:3e:12:37:f0:83:1d:6e:94:bf:2f:18:d2:eb:29:
e5:67:f7:8a:15:f2:91:c2:80:4b:9c:31:f8:6b:ae:
8d:21:8b:f6:3f:45:ef:84:53:93:38:01:8d:a1:7f:
f1:cc:c7:3c:8f:12:48:13:7b:0f:dd:32:06:44:fc:
e1:0c:5a:5b:06:82:ff:96:90:07:03:8d:a1:34:26:
8e:bb:07:ef:3e:ca:ae:74:16:fd:dd:5e:e9:75:af:
79:38:d1:39:67:31:12:03:ed:74:50:d2:cb:0a:75:
d9:35:02:7e:77:d5:b1:ac:75:46:8b:6b:16:65:04:
a1:87:09:a5:7e:7d:29:4f:b4:a7:09:9c:e2:7a:fb:
a2:79:f7:91:a2:dd:a5:57:29:75:51:a3:a6:b8:f0:
ea:6b:28:dc:6c:68:bf:83:5a:9a:d9:56:22:67:ef:
96:72:af:ed:5b:e3:4a:3a:98:78:3f:80:29:53:ab:
d1:4a:5c:a5:4c:48:22:52:af:f4:8a:bf:e1:9e:ed:
57:4e:d1:9a:4c:f7:06:3a:57:03:e3:7e:fd:c5:30:
94:af:48:05:a1:0f:86:a6:14:ef:b5:94:a7:85:0d:
e5:28:da:c5:29:2e:6b:f5:7a:eb:60:2e:52:23:8c:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B0:F5:10:2B:B0:03:A7:20:56:97:3B:71:0C:D5:AC:3B:44:5C:25
X509v3 Authority Key Identifier:
keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c7:a6:13:fd:f7:0c:c5:65:20:40:fc:c3:ca:dd:fa:46:aa:
c6:93:9c:98:1f:35:69:97:fe:d4:19:c6:cb:de:66:81:cd:b9:
f6:92:03:db:93:68:12:5e:98:46:77:b8:7e:cc:08:15:fd:84:
44:1b:f2:12:75:b3:58:02:4b:46:a0:72:15:c5:07:6c:85:cd:
05:04:ce:d2:c1:2a:90:79:3f:f7:1a:81:ba:d5:aa:54:36:f2:
3b:02:a2:87:97:16:9c:50:be:e6:d8:28:1d:d7:22:1b:00:39:
2d:c4:64:4c:25:bf:19:3f:1b:57:29:33:d1:a6:33:4a:8b:11:
fe:0a:62:e0:55:13:f2:7d:0e:6b:bf:3f:e6:db:52:3d:51:f8:
c8:1a:1b:4f:74:e8:61:67:5c:63:a8:94:be:5e:8a:8e:4e:1d:
33:4d:e7:a7:7d:62:20:3b:71:ed:5e:79:49:73:29:7d:d2:d5:
18:f5:b3:95:16:bd:3f:cb:fb:68:c9:27:c4:6c:cd:18:cc:9f:
cf:4b:9b:14:8c:8d:2c:99:62:0f:fa:18:1b:ad:48:e9:39:11:
3c:cb:81:4e:47:b9:8f:7d:95:c6:bd:8b:6e:d8:63:25:5b:32:
6e:3e:38:47:bc:29:64:b3:2c:c7:36:b8:1d:6e:b2:af:d2:34:
3d:4a:c5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:12:36 2026 by rpki-client