
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
File: PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json)
Hash identifier: AZQgutSN6jTgVh5k9fzCWIxgKaRvY8LorUswgV18cp4=
Subject key identifier: 25:98:70:8F:EA:08:07:55:42:90:7D:86:44:3A:C9:01:D7:4F:63:D9
Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC
Certificate issuer: /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
Certificate serial: 0311
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
Manifest number: 0311
Signing time: Wed 25 Mar 2026 00:48:13 +0000
Manifest this update: Wed 25 Mar 2026 00:48:13 +0000
Manifest next update: Wed 01 Apr 2026 00:48:13 +0000
Files and hashes: 1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: oZ63iKz9UkwAZlvr7TNIEYuGgqWsm5u/IJaoXkYkU1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl
rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785 (0x311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
Validity
Not Before: Mar 25 00:48:13 2026 GMT
Not After : Apr 1 00:48:13 2026 GMT
Subject: CN=69c330cd-3fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2c:27:a1:3d:55:d0:ad:b9:aa:49:51:94:4e:
eb:ae:dd:01:78:f2:43:30:49:ba:d4:f3:12:c0:bf:
cc:dd:b9:44:cb:c9:49:20:bb:ab:b8:73:a2:e0:fb:
8d:9e:83:a4:0b:9a:7b:2c:41:64:5b:54:84:73:4f:
89:eb:b6:c9:a1:b1:95:a0:a5:79:53:14:3f:00:b6:
fe:d9:75:fe:a3:4d:02:e0:a0:57:81:52:fd:20:87:
1f:b5:ce:77:b8:2b:36:b0:19:d5:ca:da:9b:9a:0d:
0d:c2:8e:49:6c:8e:7c:23:2b:f1:40:93:e6:14:4c:
74:b3:a5:c3:dd:5e:7c:7c:df:f7:54:16:8a:97:4d:
f3:03:e0:4b:dd:84:6b:f9:e5:f5:e2:11:e6:e0:b6:
8a:88:79:82:b7:20:62:ce:5a:8b:cd:0e:f2:88:f9:
65:fe:3e:16:64:43:db:64:3e:f9:46:11:0c:fa:77:
85:69:40:dc:55:56:a9:31:3d:51:e5:f6:44:a9:41:
12:71:dc:b1:37:f5:bb:8d:36:6f:0e:27:cf:4b:ee:
b6:74:2f:f6:3f:cf:88:eb:64:df:70:c4:ef:48:82:
26:4e:82:5e:a0:f6:54:f3:c2:ff:2f:04:50:45:5d:
11:fe:0a:7f:37:e9:d6:7a:21:18:87:6a:fd:ed:26:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:98:70:8F:EA:08:07:55:42:90:7D:86:44:3A:C9:01:D7:4F:63:D9
X509v3 Authority Key Identifier:
keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6d:65:91:16:bf:76:47:d3:53:9c:cb:8c:d4:33:e6:d7:97:
ce:85:65:c3:97:16:a8:7f:97:48:94:81:74:e8:be:bc:89:4e:
64:f4:df:ef:47:f1:2b:c5:c9:8d:15:69:c6:2b:d5:0b:3e:9f:
f5:8d:bf:f4:78:13:3b:7d:69:b4:60:61:ac:23:62:e3:2c:3f:
cf:65:54:14:32:40:ff:78:d3:49:5e:b8:67:57:2d:13:09:fe:
25:e5:31:7e:26:7f:fa:7d:77:cf:eb:91:70:1a:1c:e3:6b:04:
8f:32:60:f0:ad:d8:78:4f:37:a3:77:8a:37:55:d2:1f:98:44:
f4:d2:83:99:0b:b2:c8:77:8d:a7:4c:0d:a0:7e:21:5f:67:0d:
77:bd:2c:df:10:2d:ef:53:de:c1:e1:25:6e:c7:5c:d9:4a:9d:
21:d3:ba:e1:8d:1a:91:30:56:ac:27:30:0d:6f:7d:43:06:ac:
a0:5b:4b:d0:09:4c:86:0e:bb:9c:46:79:bc:94:9a:8a:0c:c1:
4b:58:14:56:1e:3c:cc:bd:0d:1e:94:a3:69:b6:e6:b9:ef:3e:
eb:3e:5e:1e:cb:64:e8:fd:ef:44:cd:38:fb:f9:2d:2f:f4:d3:
b3:17:6c:e8:00:ee:08:2d:c3:b0:7c:07:46:cf:31:09:73:6d:
00:6a:d4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:33:30 2026 by rpki-client