
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
File: PPkWCCJoGcPp2oTRGVtTJvkkn70.mft (raw, json)
Hash identifier: +GLDuE3xqoHS1ns/TDKpra0wB+c9ePHvDHqOvQR33ac=
Subject key identifier: 30:90:54:7B:DC:D2:79:C2:28:3D:B5:2B:43:52:DB:F7:88:B5:15:1B
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial: 0361
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
Manifest number: 033F
Signing time: Wed 25 Mar 2026 00:44:24 +0000
Manifest this update: Wed 25 Mar 2026 00:44:24 +0000
Manifest next update: Wed 01 Apr 2026 00:44:24 +0000
Files and hashes: 1: PPkWCCJoGcPp2oTRGVtTJvkkn70.crl (hash: 1HKRDClXJjGruw3zOmyTyIrc/FXUHnvOSyNY7x1X6/A=)
2: E8343A14280A11ED80EB7F2FC4F9AE02.roa (hash: h75R/VPyklT8Smj0zNdkHNnxIlaqr8U6bdMBzhCUFLk=)
3: 807EEE68281011ED9C81C50DC4F9AE02.roa (hash: Hqy1LRVKHy8Ftub7eFKosjYqL2kysNH4BmXhj25dFeY=)
4: 76494F6E146111ED83A8FB50C4F9AE02.roa (hash: aleDxGkltCMG83BiNVnwleaosOHKlcQfiTqzx3RLirc=)
5: 873C98E0DE5911ED826BDB39C4F9AE02.roa (hash: 2nCCBmzmG2InvvOtDCmpe4jEwoKwgbej2xels7IW/q4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865 (0x361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Validity
Not Before: Mar 25 00:44:24 2026 GMT
Not After : Apr 1 00:44:24 2026 GMT
Subject: CN=69c32fe8-6f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1e:c3:ce:30:94:d1:ae:8c:f7:01:61:f4:26:
78:80:81:87:37:0b:94:28:32:f1:e6:e1:32:c8:e3:
ae:20:a9:63:44:3b:fc:87:92:95:51:22:c3:f6:b1:
d9:22:fb:42:0b:91:a7:18:02:5b:5c:27:6d:e8:a0:
1a:67:02:1f:1f:d0:50:98:ba:06:f9:66:29:4e:1a:
4b:d3:b8:94:b4:1b:b2:d7:5d:a6:5f:6c:3a:3d:2c:
7f:24:02:cb:3b:28:88:52:01:c4:8b:03:93:fd:c4:
5f:29:c3:22:b0:d6:b4:f8:80:e3:bd:aa:44:f3:b2:
d3:05:8b:6d:fe:a9:c1:dc:bd:27:fc:31:79:36:e7:
34:00:d3:07:cb:6d:9f:24:e6:c4:37:26:5e:8c:fe:
7b:ee:1c:80:64:8f:28:19:38:03:05:d2:ce:23:33:
7a:bb:3e:f4:0c:9d:08:b9:74:40:dc:41:48:17:1b:
f6:e7:43:a2:1a:f1:2c:33:be:a4:60:53:9c:f8:73:
82:3f:e6:ac:22:55:44:3b:c2:a3:f8:2e:72:b4:16:
62:b7:9e:0a:eb:8e:66:fd:77:63:05:34:1e:f0:d0:
c1:74:32:30:aa:66:00:90:19:93:5d:d9:6e:80:9b:
7a:cf:7b:26:e5:08:e1:c3:1a:82:f7:f5:d1:1b:6f:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:90:54:7B:DC:D2:79:C2:28:3D:B5:2B:43:52:DB:F7:88:B5:15:1B
X509v3 Authority Key Identifier:
keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:af:fa:82:38:38:61:33:de:55:be:bb:25:02:1e:d8:2b:ae:
66:3f:3b:80:e0:d7:7f:78:ac:68:07:fd:dd:b2:56:aa:3c:37:
42:53:0f:0d:a3:a6:28:f4:8e:08:aa:3e:0b:8e:33:e6:9d:ae:
2f:b1:a6:c2:79:71:59:70:be:73:c6:b2:89:d1:f2:06:b1:71:
6c:ba:67:7a:37:50:4c:de:a2:8c:d7:d6:c5:17:57:92:06:0e:
bf:b6:f7:2d:2b:2b:b3:3e:cd:09:c6:5a:76:70:e6:a2:b3:80:
a0:b8:62:4b:38:2e:b2:c4:d3:bb:73:55:4b:fc:0e:45:bc:9e:
80:f3:bb:10:b5:22:b3:15:9e:3c:30:93:eb:d0:52:d1:f7:ab:
ee:16:de:5b:4b:a8:08:3c:84:7b:b2:2e:a7:c0:91:8d:c6:3f:
aa:c9:80:76:77:8a:74:2f:05:b7:e0:34:97:54:31:ad:76:0b:
8b:19:a8:eb:50:71:3e:e4:85:76:e1:c6:e3:8b:1a:9b:fc:6a:
31:9f:b2:ce:fc:81:c8:6e:f5:c7:de:3b:2f:f7:fb:87:50:c7:
9c:84:4d:bc:6e:8b:c7:db:a2:44:db:07:c8:88:3b:54:43:56:
f9:4c:01:20:51:8e:9d:e2:0e:2b:62:82:5b:f3:3b:ba:cc:76:
f2:78:e6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:49 2026 by rpki-client