
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
File: PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json)
Hash identifier: lQh/HxrW22lT62qSQuhotYNfiD4c/QVrO+3E+OFUcgs=
Subject key identifier: D8:BB:8C:B2:1E:F4:94:37:BC:34:5A:6B:59:EF:1B:76:09:02:97:99
Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE
Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
Certificate serial: 0854
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
Manifest number: 084B
Signing time: Tue 24 Mar 2026 20:33:33 +0000
Manifest this update: Tue 24 Mar 2026 20:33:33 +0000
Manifest next update: Tue 31 Mar 2026 20:33:33 +0000
Files and hashes: 1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: po5fBKa/BNXXybbM6r4QzG5YNHQQu2+NOwSrbzsPjiQ=)
2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: N/PJeJGpe5jwVdTA+VhHOpYYFuL79+kPqluBOU8PIYg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl
rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2132 (0x854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
Validity
Not Before: Mar 24 20:33:33 2026 GMT
Not After : Mar 31 20:33:33 2026 GMT
Subject: CN=69c2f51d-55c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:4e:a9:04:2f:ee:3a:d1:47:55:3b:f9:0f:
17:8a:3c:bc:5b:fe:5c:46:c0:c8:c2:ee:d0:57:3b:
d7:96:0c:91:4b:f6:28:bd:d1:86:d1:fc:29:72:dd:
87:32:85:23:29:09:f6:bb:31:e1:05:ff:6d:f7:89:
e1:2b:25:ab:a8:68:4d:d2:25:fa:63:8c:df:b8:f0:
bb:ad:2f:a4:c8:2a:46:22:3a:f9:2d:54:06:92:43:
ed:45:7f:c0:0b:f6:bd:4f:16:de:45:77:98:be:46:
97:13:e3:e2:af:74:c6:56:d9:be:51:e6:71:84:07:
3f:a3:2c:9c:cb:1b:4e:14:5f:fe:57:a8:81:47:bf:
b6:a5:da:cd:eb:f6:68:56:07:f1:ff:c9:9d:1d:48:
a6:eb:90:66:28:d7:38:7a:6a:ca:77:59:0b:12:7d:
29:48:ec:ae:a4:b8:c2:cb:2e:e6:ba:ca:a2:51:10:
9d:6e:59:14:78:20:64:8d:56:c2:92:0e:b4:10:37:
81:c0:b8:b1:67:fa:cc:b4:52:d5:70:dc:d3:6a:ee:
e0:b5:95:b0:02:7f:a8:c2:40:61:a1:a9:af:96:46:
2e:a6:02:6e:50:b6:c7:ed:a0:fc:b1:4a:ee:cf:f6:
0c:9d:7a:4e:9e:bd:02:4f:fc:e6:a1:1f:ca:e9:dd:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BB:8C:B2:1E:F4:94:37:BC:34:5A:6B:59:EF:1B:76:09:02:97:99
X509v3 Authority Key Identifier:
keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:f8:63:95:3a:f2:58:2d:5b:ca:b6:fb:0f:39:39:bf:03:d5:
d6:0c:0c:16:b1:3d:1e:ea:2f:a5:d8:d2:f9:de:dc:53:9c:ac:
08:c5:28:fa:13:1a:59:3d:a8:2b:bf:45:b2:f2:af:78:5f:21:
9d:03:27:2e:db:04:12:f8:18:9b:3b:64:38:94:f0:86:24:02:
bb:e4:06:fd:46:5b:ad:c8:17:f0:18:30:04:fd:74:fe:53:bb:
8e:0e:f0:05:00:df:9e:9d:a1:03:5d:e4:47:21:72:22:ac:a4:
00:c7:b0:01:ea:de:f0:3e:53:8e:7a:19:39:b2:f8:94:d7:6e:
1e:da:1c:10:72:6d:bc:ce:37:53:4a:96:cf:3e:7f:5a:c7:c5:
f9:d2:24:d9:34:0a:ea:6c:39:14:74:31:66:52:c0:11:e8:27:
95:24:3d:7a:f3:a2:c4:01:12:3c:8f:86:ea:55:03:26:66:68:
86:69:e2:cb:3f:28:e6:aa:98:76:ce:4f:a0:d1:dc:45:fa:e7:
1d:0b:b6:da:5f:82:98:09:e9:00:e2:1b:70:63:24:b7:4d:41:
74:89:f4:41:7d:2f:5b:32:bf:c2:96:61:66:f7:be:08:00:1e:
9f:8d:fb:a6:c0:f1:c5:b9:da:e7:d6:83:7e:93:6b:1d:a5:ee:
3c:fb:a6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:56 2026 by rpki-client