
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
File: PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json)
Hash identifier: Fk/YY483deR6O7iS7ODdT6eJulvcCJkNvduoQq1/ucY=
Subject key identifier: 1F:36:C9:7A:41:3C:D8:76:66:FF:77:B6:E6:EC:F9:8F:09:E1:11:FC
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial: 0586
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
Manifest number: 0562
Signing time: Thu 16 Apr 2026 23:21:41 +0000
Manifest this update: Thu 16 Apr 2026 23:21:41 +0000
Manifest next update: Thu 23 Apr 2026 23:21:41 +0000
Files and hashes: 1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: mmNNBbaGyVVmZVTp3FWvWK/K2vVrAwVJBrDG8XgjCyc=)
2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: N/0bVIyC0MPM6KEQ2d3ilkuUkeyn80eIzEQ24nUZdi8=)
3: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: arq5+h3KHX6t5y5Zj2CBCAg4COLqYpvoHOLbprQdcjc=)
4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: MgGvtEJxOhpocdjEABKQeXDE9AITBRXrKCKdxOChgec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1414 (0x586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Validity
Not Before: Apr 16 23:21:41 2026 GMT
Not After : Apr 23 23:21:41 2026 GMT
Subject: CN=69e16f05-e5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ff:f1:ba:c4:7a:1a:e4:c8:3d:7e:e1:a6:0d:
8c:3b:7c:33:0c:d8:b4:60:d2:9a:ff:bc:be:d5:28:
f7:33:85:d1:2d:46:5e:91:81:30:9d:b2:0e:1c:77:
48:3e:97:03:29:39:8e:98:e3:f5:a0:31:14:9c:4b:
20:f7:f5:f5:6a:a8:92:2a:35:42:95:fa:9d:d3:ca:
0f:9e:e1:95:00:e4:8e:5d:05:0b:40:5b:9f:47:a9:
5a:e5:9b:25:6a:b7:59:88:3a:19:ef:4d:b4:bc:53:
3d:16:7a:75:b0:09:c1:5c:5f:d9:b8:4c:b8:36:0d:
d9:69:ff:cc:bb:1d:cc:6b:7b:e5:cf:69:48:a7:a6:
59:f7:4d:8b:7b:ec:24:6d:a9:7c:fe:16:ee:81:19:
aa:ec:e4:d7:dd:27:8f:1a:ca:f1:67:af:e3:77:19:
66:8b:cd:2e:f9:bb:27:3c:03:52:d9:c5:01:e8:60:
3c:73:27:d6:36:10:e2:87:c8:c7:19:dc:a8:4a:82:
e2:de:18:fe:88:97:18:b0:ac:67:c8:d1:22:c1:16:
f8:3c:29:86:ce:4a:9f:6b:b2:71:55:8a:0a:44:1c:
0a:c3:8f:31:c5:af:66:bd:91:65:a2:24:cd:4d:9c:
c0:7f:68:f9:33:b4:42:e1:0a:82:54:5e:71:67:00:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:36:C9:7A:41:3C:D8:76:66:FF:77:B6:E6:EC:F9:8F:09:E1:11:FC
X509v3 Authority Key Identifier:
keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:0e:a3:93:c3:63:0c:c0:cb:80:08:c9:3c:c4:ab:54:28:db:
01:ed:36:23:ed:25:3b:d4:b4:d2:d1:b6:d8:d8:ea:12:25:05:
09:4c:d9:2f:4d:29:c7:9d:b5:cc:75:0e:23:ae:96:65:e4:2c:
b4:f5:b3:f2:2d:4b:b0:c8:ea:8d:07:b2:b3:76:3f:fb:60:79:
b3:b1:ba:66:75:09:ee:4a:85:96:69:60:65:4a:46:c0:20:28:
3f:d6:d2:18:f1:0b:6d:c0:57:cc:b9:a0:cd:19:b0:4d:0b:e7:
fd:27:18:de:39:8f:b5:98:5e:4a:6f:66:4b:e5:14:24:05:74:
dd:32:13:bb:39:bf:b4:9d:06:88:c9:01:fb:65:a5:2b:05:46:
43:5e:da:56:ce:8d:57:1d:d0:2c:a7:a6:eb:cc:20:70:2a:87:
1a:9f:e3:aa:e3:16:68:b9:93:53:47:ea:70:0d:75:4b:3b:15:
80:79:21:c4:99:ab:0b:13:f9:69:d0:4d:f1:3b:73:03:bc:e2:
e6:00:14:12:0a:f0:b6:a4:33:cb:64:11:27:bb:32:8c:47:f2:
d5:60:38:76:11:62:0d:0e:1d:0f:24:91:5b:81:47:aa:62:b1:
4d:cf:f6:17:ca:16:7a:46:e0:9d:52:59:1d:82:d6:67:62:fe:
55:03:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:09:25 2026 by rpki-client