
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
File: PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json)
Hash identifier: KNxaW5BJdhcoDaWYqDNgTpqguZpEFaC10u7l4cBfC+c=
Subject key identifier: 20:00:FB:7D:2F:70:74:2D:C9:A9:FC:40:98:DB:4B:05:0E:29:F0:31
Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC
Certificate issuer: /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
Certificate serial: 032A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
Manifest number: 032A
Signing time: Wed 13 May 2026 01:12:07 +0000
Manifest this update: Wed 13 May 2026 01:12:06 +0000
Manifest next update: Wed 20 May 2026 01:12:06 +0000
Files and hashes: 1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: 0XJJ3DPa9jCpJ0tHQEz0Qh2UuHGfTtPZwl1f62Xxul4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl
rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810 (0x32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
Validity
Not Before: May 13 01:12:06 2026 GMT
Not After : May 20 01:12:06 2026 GMT
Subject: CN=6a03cfe7-e909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:6f:94:68:84:c6:48:a2:03:23:16:f4:2f:
5c:14:d2:61:28:73:ea:b6:b0:ab:a8:a9:ce:98:5b:
98:3d:61:79:c2:aa:20:42:70:6f:a3:e9:24:3e:f4:
cd:86:89:47:bc:6e:e9:f7:64:38:53:b2:6a:ad:31:
58:4c:8d:3e:76:a5:21:68:11:c6:86:c5:56:b9:34:
d1:dc:39:2d:c6:4a:60:fb:2a:82:41:da:93:a3:9d:
f8:0f:45:4c:49:f4:c3:66:8a:d9:52:77:d5:3a:5e:
8f:b3:87:72:24:ed:b4:92:10:76:b4:34:b1:f3:fc:
57:d2:b1:81:69:e1:7f:8f:2a:bd:b5:39:b6:a0:0b:
07:2e:c3:d2:33:95:c0:1b:8a:b5:23:51:c0:0b:6d:
01:ea:c1:21:32:7e:6d:6b:50:57:80:f5:57:ad:5a:
3f:28:6f:93:d1:0c:3d:aa:42:21:62:4f:db:fe:9d:
54:2e:b2:98:2c:d1:75:3f:7f:01:c6:c3:7b:04:aa:
50:6c:d0:f1:4d:86:1c:65:cd:d8:3d:65:54:4f:bc:
ed:ab:96:51:e8:e0:30:38:b8:76:40:8c:90:32:81:
6a:08:49:fa:81:89:d9:b7:56:69:58:ef:7a:86:b3:
07:6e:d2:4a:d0:32:bf:25:dc:46:d4:d9:d6:d9:9d:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:00:FB:7D:2F:70:74:2D:C9:A9:FC:40:98:DB:4B:05:0E:29:F0:31
X509v3 Authority Key Identifier:
keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:ed:96:48:0a:ab:90:5b:04:26:18:09:bd:02:ab:78:d3:f7:
ce:7f:c7:24:83:77:8e:07:8d:67:5e:2c:d1:80:e1:a6:91:19:
22:46:ec:75:07:75:ba:3f:bb:58:88:74:a7:97:10:c9:11:8e:
60:6f:6e:eb:07:c5:06:28:63:46:23:8e:3f:8c:5a:cd:cd:8a:
d3:40:75:7a:35:4f:eb:1f:2f:93:49:7c:95:c0:b7:32:d3:2d:
02:f1:dc:fb:18:60:ee:0c:01:7e:ce:83:26:99:5d:f0:c3:67:
4d:b4:18:2a:b5:99:2c:60:02:09:51:51:54:ed:d3:09:5b:93:
7f:55:51:2c:17:e6:53:66:db:6a:82:58:66:09:c0:7a:6c:55:
0d:95:02:e9:dc:e1:fc:4d:89:97:f8:63:b5:6d:d3:aa:70:3d:
ee:e3:94:de:bc:ec:73:96:9f:83:ff:9c:c9:cd:2d:83:4a:a7:
90:9e:f6:42:bc:22:d6:74:76:51:64:f0:0b:51:9d:30:8f:9f:
d6:25:f5:54:b8:1f:3b:9a:22:2f:97:dc:5f:3c:1f:2d:4a:97:
6d:69:ef:d6:77:54:12:71:05:b0:fb:ce:44:d9:8b:f5:26:09:
27:ab:82:be:56:f6:51:e9:bc:e6:45:b2:ae:76:b5:11:dc:05:
f4:1c:c6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:18:58 2026 by rpki-client