
$ rpki-client -vvf rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
File: peado7v7jl3TlkjmpD4A-nI95lg.mft (raw, json)
Hash identifier: SPva4HT6GlDPGCjamFsD+xvMNfezxKGg2QvsTDHFnkU=
Subject key identifier: 0A:C9:8C:F5:24:E5:A5:5C:D6:26:97:54:BE:4E:95:DF:A9:56:79:FD
Authority key identifier: A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58
Certificate issuer: /CN=A91190B4/serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658
Certificate serial: 0B4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
Manifest number: 0B40
Signing time: Tue 24 Mar 2026 19:25:03 +0000
Manifest this update: Tue 24 Mar 2026 19:25:02 +0000
Manifest next update: Tue 31 Mar 2026 19:25:02 +0000
Files and hashes: 1: peado7v7jl3TlkjmpD4A-nI95lg.crl (hash: fgOIb58nPElKs6Y6ydeR7KA1pWIvM9EvaZfBFGjCnqk=)
2: 55BC5674573F11EAA8901D3EC4F9AE02.roa (hash: jnfVdDyG/gAAbTwrDOOWxQtaj+CmTfAz9fmqwOAZ664=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl
rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2890 (0xb4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91190B4, serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658
Validity
Not Before: Mar 24 19:25:02 2026 GMT
Not After : Mar 31 19:25:02 2026 GMT
Subject: CN=69c2e50f-3f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:8e:3c:4d:b4:d2:66:16:26:d2:68:0e:84:
99:19:3f:82:fc:01:5a:5a:27:46:04:74:00:49:d8:
95:28:5d:09:4e:73:ac:3a:24:7c:2c:16:2f:cc:a0:
53:b5:8d:d9:5c:07:12:91:b4:10:d4:04:57:c6:a3:
b8:48:7f:38:16:20:7e:20:d4:57:21:07:df:09:be:
42:ce:45:ff:5d:3b:f1:e0:a3:30:9d:20:d9:fe:2b:
3f:8b:a2:ce:f2:9f:6a:3a:e8:2f:4e:75:80:40:56:
30:bf:95:2f:58:de:e6:c9:79:a0:a3:9a:bf:32:9d:
70:2f:43:4f:e6:cb:83:55:aa:54:40:80:06:82:55:
77:22:d8:d5:df:a5:50:41:4f:9c:93:d2:7a:86:50:
15:a9:3f:05:c4:b6:f5:50:4f:de:90:e6:c5:42:24:
c9:09:69:71:5a:16:25:56:0d:2e:ee:e8:cf:9a:83:
f0:3c:4a:5e:13:78:09:af:1f:97:77:a6:ca:d5:bd:
a2:58:32:a9:c6:cc:fb:61:18:30:c8:82:a1:21:34:
4a:5d:6a:03:78:b0:93:cb:b0:ff:42:15:eb:b2:26:
b8:a4:6c:fb:62:6b:98:3c:36:f2:d7:9b:59:09:4a:
c7:95:d0:e9:2d:26:22:f7:47:a1:2c:e3:6d:5f:64:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C9:8C:F5:24:E5:A5:5C:D6:26:97:54:BE:4E:95:DF:A9:56:79:FD
X509v3 Authority Key Identifier:
keyid:A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:56:3d:55:8e:3e:f4:69:de:10:48:5e:01:b2:8a:83:c1:f9:
f9:8d:61:bb:08:b5:84:3a:9f:22:21:9f:0a:a6:fc:56:7c:cb:
7c:0b:bc:95:4d:21:be:04:b3:ab:13:d7:3c:ab:9b:77:c4:ce:
4e:70:99:7b:a8:f2:6f:31:1a:d2:70:c1:5c:39:fc:4f:8b:47:
f2:e6:e3:0a:8f:7d:d9:03:4d:5b:c3:2b:80:af:da:c1:df:82:
c1:c1:22:57:79:d5:6c:a0:71:b1:64:36:52:98:d2:fd:a2:4f:
ed:33:53:f6:94:41:82:39:50:bf:ec:af:33:2e:f3:2c:3c:eb:
28:07:26:18:09:b5:44:cd:a1:1c:63:3d:00:de:f4:1e:37:0f:
bc:e1:e3:dc:09:0b:6c:86:e5:c3:1b:4a:79:5a:d5:8d:d9:83:
85:b6:ef:2a:dc:a9:eb:ec:ff:6b:32:5c:db:4c:61:c1:28:10:
bd:f5:9d:95:98:ba:9b:51:92:44:e2:19:38:2d:ff:b1:cc:39:
05:e0:37:c6:19:42:58:83:0c:77:59:7c:3b:ed:76:4c:26:c8:
94:28:2b:30:fc:d1:45:b7:6e:d3:81:40:fb:87:86:63:c2:24:
4a:8f:e2:ad:0d:85:ef:dc:4f:21:8c:7f:bb:a0:4e:4b:ce:ad:
e4:71:16:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:49:05 2026 by rpki-client