
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
File: pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft (raw, json)
Hash identifier: bv6ITOB3Qdda0475zkUd8EzS+NDC2d2yGgptD5ucOsk=
Subject key identifier: DA:6E:11:07:D8:4E:07:0E:43:7D:D0:62:80:32:EF:97:B1:B1:BA:6E
Authority key identifier: A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC
Certificate issuer: /CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
Certificate serial: 05EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
Manifest number: 05E7
Signing time: Tue 12 May 2026 23:03:22 +0000
Manifest this update: Tue 12 May 2026 23:03:22 +0000
Manifest next update: Tue 19 May 2026 23:03:22 +0000
Files and hashes: 1: pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl (hash: nOJRWkFBjw8E9fnlExkqQuSZBcXDGdDq8GaWjzBXBWU=)
2: 4CBECA5CF9C311EBBA064C70C4F9AE02.roa (hash: F6f3sqC/VrCexYL7KiqhHMWOLZTVDuTXvmAuEtkPuPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl
rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1519 (0x5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DCFB, serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
Validity
Not Before: May 12 23:03:22 2026 GMT
Not After : May 19 23:03:22 2026 GMT
Subject: CN=6a03b1ba-a6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:5d:1f:2a:87:01:e9:6a:5f:3f:67:06:df:
3c:e6:a0:96:b9:9b:f0:7b:e8:27:12:7a:7a:77:84:
3a:0e:dc:cd:0b:b6:fe:1d:f5:e4:cb:c6:1c:d5:86:
77:d4:d0:84:f8:0c:15:e5:25:90:f1:4a:cc:d6:e4:
75:77:f0:83:df:9d:80:ef:f3:2a:ad:52:05:ca:f9:
bb:9c:59:3c:bc:40:2d:c8:4f:09:8b:86:d8:9c:d7:
64:fa:9a:1b:ef:a7:11:01:ed:e2:1f:09:fb:d2:0f:
f3:92:aa:aa:27:8b:20:64:db:4a:ad:85:7d:39:fe:
a8:b8:77:1e:19:9c:67:28:55:31:7f:62:7b:6b:2d:
22:70:02:56:be:71:20:1b:68:d7:8b:64:4f:f4:d3:
cc:7f:1f:11:e8:88:15:b3:77:98:4e:b0:43:af:54:
63:0b:f7:04:6b:31:88:92:2a:ee:ec:63:3f:c7:c9:
b8:d2:05:4a:54:d7:a2:6c:da:40:1e:93:20:fa:9a:
8c:ff:e8:3d:28:9d:a8:0b:3a:43:97:67:c4:5d:21:
fd:ef:df:2a:5c:fb:57:f2:f1:7b:8e:c7:aa:3b:a5:
b9:38:8d:90:26:fb:11:28:f3:99:f3:b7:01:f6:0d:
04:22:36:80:dd:8b:26:66:33:c7:12:2c:91:7d:9f:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6E:11:07:D8:4E:07:0E:43:7D:D0:62:80:32:EF:97:B1:B1:BA:6E
X509v3 Authority Key Identifier:
keyid:A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a4:0f:19:76:f7:1e:12:7e:6a:f0:fd:40:2c:7f:11:57:42:
b5:49:d9:42:7b:c5:f4:28:2e:54:76:b0:3b:62:90:e8:c7:49:
b1:ba:46:6d:2a:08:06:25:a3:9f:86:59:ec:74:1a:72:8b:35:
8a:d8:3d:67:70:9f:a4:91:08:29:91:4a:23:e1:26:8a:d7:f4:
85:77:6c:29:07:fe:f9:65:b2:a1:3a:9b:0b:30:0f:a8:a2:f5:
2e:70:f5:bd:3b:2b:95:6e:48:48:45:4c:a3:39:cc:af:64:b3:
9e:d6:98:8e:e2:13:46:18:e1:ed:5e:00:b0:92:3c:c7:59:4f:
74:ee:dd:d8:68:70:61:f2:9e:9e:b5:30:90:9b:0a:5f:48:cd:
a9:ad:69:bb:0d:8c:d2:0c:21:22:d4:e2:8c:b5:06:5f:5d:df:
11:5d:60:e3:9d:46:7a:fe:70:bf:4d:ce:28:99:d9:5d:f2:9c:
79:88:c6:82:93:d6:3b:61:29:82:00:85:61:ce:18:47:c4:17:
d6:4c:be:58:1c:3c:01:ec:fe:7b:bb:5a:99:c0:7e:45:b4:36:
28:61:d7:51:fd:05:05:8c:92:e2:20:fc:5a:db:4f:ce:69:43:
b2:b3:b0:e9:33:01:80:53:03:83:ab:c3:9a:b7:5e:10:5c:75:
20:8c:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:25:31 2026 by rpki-client