
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
File: pBhnIpZRYlTNTMrUSSUeGdG26V0.mft (raw, json)
Hash identifier: 3vDC5JcpGDfI0FJEg75bAvcGX1PIXPkS/GJSIgafBR8=
Subject key identifier: 4C:95:17:96:15:96:C8:C2:41:33:22:BF:59:B4:51:A9:4B:4C:BF:D6
Authority key identifier: A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D
Certificate issuer: /CN=A913FE3D/serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D
Certificate serial: 0606
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
Manifest number: 05FF
Signing time: Tue 24 Mar 2026 22:36:15 +0000
Manifest this update: Tue 24 Mar 2026 22:36:15 +0000
Manifest next update: Tue 31 Mar 2026 22:36:15 +0000
Files and hashes: 1: pBhnIpZRYlTNTMrUSSUeGdG26V0.crl (hash: 0eEp7d08qir0YS8Naatns4idBPfKdzUyXoNwQ4KTFNs=)
2: 679A6FA4E53A11EB8197AD70C4F9AE02.roa (hash: XbMe+8/7/MISes36gY29YrhvwO4Rdf5bho+pNI/z93c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl
rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1542 (0x606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FE3D, serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D
Validity
Not Before: Mar 24 22:36:15 2026 GMT
Not After : Mar 31 22:36:15 2026 GMT
Subject: CN=69c311df-7ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:30:c2:b2:36:63:b7:09:54:24:bb:db:7d:
40:2b:86:0f:b6:8b:63:4e:4f:f5:c9:24:3a:66:34:
a9:cb:fe:f9:75:37:16:29:7a:bb:65:c7:e3:88:3f:
cc:fa:f9:e2:92:69:00:69:5b:63:89:82:40:2f:49:
d7:01:87:0f:d6:f7:61:e6:9f:08:f6:98:38:8c:d8:
25:f9:02:09:d8:80:3e:43:ff:72:28:22:c1:1a:88:
f1:6f:48:c2:96:cd:a2:e4:22:e3:3d:d7:b8:dd:21:
59:dc:c5:12:a8:a4:56:27:9b:15:23:c1:f6:c9:af:
e0:e7:cd:1c:d4:45:55:d2:bf:83:76:0e:93:30:d0:
7b:92:d3:13:f4:a3:32:18:ba:56:b9:bd:8b:50:a5:
bf:09:34:ed:ef:4f:08:be:1b:dd:4c:fa:03:90:ca:
57:d8:3f:43:0a:c8:33:b6:c6:40:0b:8d:e3:0e:27:
b7:89:d5:ee:cc:a1:7c:9f:03:38:2c:a1:56:8d:c8:
35:a5:b9:1c:88:78:8e:49:8b:c1:4b:d0:e0:69:1e:
76:bf:3c:5a:17:cb:a8:3c:9c:a3:b4:52:ae:47:65:
5f:3a:54:20:b1:bb:4e:b7:03:13:67:b1:72:ae:ed:
49:99:15:02:ec:a9:a6:43:c3:ff:12:c0:8b:c4:80:
97:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:95:17:96:15:96:C8:C2:41:33:22:BF:59:B4:51:A9:4B:4C:BF:D6
X509v3 Authority Key Identifier:
keyid:A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:12:45:11:b8:39:d6:24:7b:ed:27:75:5d:e1:db:00:11:74:
34:91:de:a0:a9:47:3a:24:d5:c0:b5:e3:88:30:fc:8a:b4:75:
7a:20:2a:36:f8:04:59:e3:4f:65:57:e7:56:05:02:d0:a7:04:
79:6e:51:37:3f:8f:01:f6:3d:fb:2a:f3:40:02:b8:34:11:19:
b3:06:77:4e:ee:32:74:30:48:6e:3a:de:e7:29:30:2d:3c:e3:
da:1d:b5:47:58:f6:01:7e:a8:58:b6:af:5f:bd:79:a9:35:a8:
14:54:17:e5:39:2a:93:1e:b9:bb:d8:ba:a8:7b:0c:74:1c:6e:
26:1f:08:c3:64:6b:68:ab:7e:4d:69:bb:3c:f5:97:24:89:68:
95:32:e9:14:9e:2a:11:de:40:26:f9:5f:77:85:f8:6d:9c:5e:
79:77:7f:bd:cd:31:7a:33:ce:59:c1:f3:ea:a8:64:b5:09:78:
94:18:7c:d6:2f:df:99:6c:3f:2d:9d:4d:05:00:14:6f:0e:99:
c8:d6:ec:2d:2e:22:74:23:17:75:b4:8e:79:2c:b9:85:3f:bc:
28:fe:55:85:1a:76:00:7b:29:e1:8a:8d:61:30:dc:c4:db:67:
a0:bb:f9:c5:02:f7:ca:f6:24:8d:3b:18:4d:b6:41:ca:14:24:
d0:2d:c2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:11:10 2026 by rpki-client