
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json)
Hash identifier: BvytTdmAY0ysV1hJVwUqFWSraqkC/renQ5Vor8TNN5Y=
Subject key identifier: 19:56:E8:A7:6F:E6:AF:FC:9C:AE:84:84:A8:73:18:36:B7:C5:88:AA
Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56
Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
Manifest number: 01AF
Signing time: Mon 11 May 2026 04:06:44 +0000
Manifest this update: Mon 11 May 2026 04:06:43 +0000
Manifest next update: Mon 18 May 2026 04:06:43 +0000
Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: ZOllruakO2xkOc12IBnDswPoaksNj6o5n/nmh3aqHeM=)
2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: 6A3uQ575OB8LX3eqmYdyVlzTZlW6pTp9MJ+vD3i9Vf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl
rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
Validity
Not Before: May 11 04:06:43 2026 GMT
Not After : May 18 04:06:43 2026 GMT
Subject: CN=6a0155d3-6667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:92:e6:58:95:7a:f0:bf:45:03:d9:f5:a7:
d3:d9:ca:ec:c2:b5:d6:dc:bf:e2:58:5c:25:6d:1b:
f8:b9:71:d9:bb:36:57:95:9a:54:61:be:2a:a1:5e:
7a:2a:57:36:84:f7:66:65:94:54:e2:e2:c4:5c:08:
bf:33:2c:d9:08:29:82:19:88:72:4b:ad:d9:0d:74:
55:3a:97:d3:88:9b:f2:b9:46:7e:95:a5:63:30:a0:
0c:45:6f:fd:13:e9:57:7b:9d:a8:bb:ff:33:a3:75:
b9:ad:59:72:56:09:01:dc:6a:7c:bd:4a:fe:dd:e5:
b8:6a:46:e8:32:35:0f:3b:4a:3c:20:70:5f:01:5c:
a5:ca:c0:ff:7d:4f:93:a5:5d:86:e5:c2:7c:a5:bc:
6a:fb:5d:d2:b0:65:ed:ba:c2:dd:f0:c6:3a:4b:2f:
85:b2:bf:40:87:04:ce:6b:e3:65:20:14:69:b4:79:
c9:82:e6:0b:09:4a:d4:f5:ea:5a:50:bd:75:44:67:
a8:42:a8:b6:a1:a3:8e:7d:89:48:ae:5d:b8:ce:11:
52:ff:6a:c8:8d:45:c1:8e:e4:51:fe:f8:6c:cc:c0:
9c:02:93:bc:73:4a:28:b0:b2:bf:9e:92:1b:54:49:
be:1f:fb:4f:65:17:f3:e4:fc:5c:48:bd:a4:05:a7:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:56:E8:A7:6F:E6:AF:FC:9C:AE:84:84:A8:73:18:36:B7:C5:88:AA
X509v3 Authority Key Identifier:
keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ab:a5:3e:51:4c:4b:a3:38:5c:ba:3f:6d:fa:dc:a1:d9:cb:
80:41:79:30:80:ec:e3:a0:a8:45:bf:3f:48:8c:2b:47:67:ca:
f5:f0:5f:eb:20:25:57:6c:2e:34:70:ad:06:24:90:4d:0c:a4:
1b:3b:a4:31:ac:58:67:c1:60:84:9b:12:b1:2b:20:1c:4e:45:
03:ac:7d:5a:45:58:9f:53:b2:4e:ae:4b:78:5e:27:8a:b5:39:
98:79:b4:85:6d:45:5d:f9:08:52:a1:1a:1f:88:4b:ff:99:64:
06:12:02:33:9e:ea:2c:fe:48:f5:f6:5d:15:d1:76:fd:b1:a9:
79:e7:3f:53:61:75:b1:83:ec:89:58:b9:76:13:c2:aa:b0:cd:
4c:c7:a1:34:24:7f:b0:3d:70:38:b2:79:00:af:94:50:00:a6:
c2:7e:c3:2f:03:97:39:5a:6e:65:ab:c1:2a:a4:26:ae:f5:ec:
ad:1a:ee:34:a5:8e:0a:38:51:b4:8f:b2:c8:91:c0:7d:ab:b9:
d0:5f:ba:8a:9c:02:c6:31:3e:b5:4d:9c:e7:b5:a6:9a:a3:7a:
69:67:d2:58:78:3f:58:f1:5d:99:24:80:cd:13:d5:72:bc:f0:
f3:5d:f7:6b:23:62:ef:6e:80:fd:61:69:6c:9f:83:35:4a:9e:
bc:15:cd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:22 2026 by rpki-client