
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
File: pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft (raw, json)
Hash identifier: o31HvRViD7If1VGMo6eOa6bbbWrAF/keelnv9807PdI=
Subject key identifier: 7C:D5:DD:64:76:56:97:46:36:1E:2F:6D:26:CB:2E:FD:0F:4F:05:A1
Authority key identifier: A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE
Certificate issuer: /CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
Manifest number: 023B
Signing time: Sat 13 Jun 2026 02:32:31 +0000
Manifest this update: Sat 13 Jun 2026 02:32:30 +0000
Manifest next update: Sat 20 Jun 2026 02:32:30 +0000
Files and hashes: 1: pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl (hash: 2PvJQkchrWe4L7Jyv2JHn5E2R4jMazTQGY87xfKao8U=)
2: C6AA9D48E5DC11EE867C6F21C4F9AE02.roa (hash: hO6PbUNEUDYDx8q2G2jC3TNcZMOAduJffHd5z5YsA5o=)
3: C5CD32AAE5DC11EE867C6F21C4F9AE02.roa (hash: aTa0Ex+ed/6RoAGLJRjFgmZUYz8uz7xIClALbDUey8s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl
rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC9FE, serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE
Validity
Not Before: Jun 13 02:32:30 2026 GMT
Not After : Jun 20 02:32:30 2026 GMT
Subject: CN=6a2cc13e-ed53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:3b:64:ba:8f:d2:d1:71:da:64:92:ea:45:
fd:7a:4f:5a:fd:39:52:4d:77:53:cd:dc:cf:5a:a6:
2b:b4:bc:52:b6:2f:ad:d4:55:b3:5a:de:b3:12:07:
a4:40:eb:1a:7c:d8:3c:3d:8f:1e:3a:1b:18:6f:45:
e8:2d:61:11:04:21:59:26:7b:45:e8:45:8b:41:9a:
60:fa:ed:5b:0a:0b:60:44:4f:aa:04:f8:fa:31:a2:
cd:71:38:d5:f5:58:10:7d:08:76:53:4a:23:cc:53:
18:d7:1d:d0:dc:36:33:69:6b:fd:3e:f5:1c:0a:ac:
bf:6d:ec:5d:b6:75:be:a0:41:d8:f2:d9:c8:40:37:
eb:ec:b6:86:17:21:e9:e7:87:0d:48:d6:e3:be:2a:
6e:34:fc:d8:c6:73:26:8e:cc:f3:98:63:77:0a:96:
e5:08:d0:d1:4c:12:9e:45:16:36:26:52:f8:99:d2:
d0:c5:f3:61:0e:c7:eb:fa:ad:3e:0c:df:f5:73:82:
3a:98:f9:95:2e:de:bc:cd:75:3f:e3:07:1d:53:e1:
df:1e:51:7c:11:bb:31:44:17:3e:bb:f3:55:98:16:
af:c8:3d:09:fa:82:cc:ba:b6:30:92:48:aa:dc:92:
c9:a9:bb:2e:4e:f9:16:b0:9c:d0:00:80:54:bc:b9:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D5:DD:64:76:56:97:46:36:1E:2F:6D:26:CB:2E:FD:0F:4F:05:A1
X509v3 Authority Key Identifier:
keyid:A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:16:02:9b:a6:a7:c0:5b:8d:29:bb:0d:96:38:9e:93:1a:15:
ae:bd:d4:a8:01:6e:cd:d8:62:f9:7e:8e:bd:98:7f:c8:cd:ec:
4a:ae:35:bd:eb:c2:cd:d0:84:7d:35:c0:20:5f:0c:0c:7f:39:
0b:14:59:8f:47:d6:16:b0:c3:6e:50:01:75:1e:b4:21:9c:4d:
48:1c:33:84:da:3b:ef:4b:68:cf:dc:1e:f2:33:70:08:1a:5a:
f7:63:1c:eb:b2:e6:f4:6c:e6:e4:46:c2:88:8f:0a:04:1b:ce:
5b:64:a5:62:8c:f8:79:e2:d1:33:fa:b5:7a:aa:13:68:52:f8:
83:c7:e0:6d:96:db:6b:88:9d:43:50:c8:4a:40:41:7a:08:82:
62:ac:e4:a3:49:b1:9d:09:21:35:80:a2:26:f1:ad:ef:ed:10:
10:4c:38:f7:ec:1a:44:26:49:3c:1a:88:b7:42:99:af:c9:4b:
18:2f:d7:8b:f9:9b:ce:0c:29:98:cd:e5:75:0b:27:7e:9f:b6:
4f:3d:34:da:91:95:27:e0:03:9e:82:35:50:55:a6:06:08:06:
21:21:a0:ed:51:d5:5d:37:ea:4b:11:12:ad:ec:29:ae:f9:16:
7b:07:b7:fb:12:b3:02:ae:fc:a6:d1:12:cf:25:b8:d8:c4:d8:
58:0a:b7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:59:16 2026 by rpki-client