
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
File: PdrbASYCUFD16FZsRh2atz5J5Uo.mft (raw, json)
Hash identifier: AnXZrggSIdf1wSniOrxWQg5pv59wKuC5SSctnjh9bqE=
Subject key identifier: 52:03:45:96:58:4B:40:CA:BC:9C:55:96:AC:D4:18:0D:2A:10:80:97
Authority key identifier: 3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A
Certificate issuer: /CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
Certificate serial: 159E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
Manifest number: 1589
Signing time: Tue 24 Mar 2026 16:40:07 +0000
Manifest this update: Tue 24 Mar 2026 16:40:07 +0000
Manifest next update: Tue 31 Mar 2026 16:40:07 +0000
Files and hashes: 1: PdrbASYCUFD16FZsRh2atz5J5Uo.crl (hash: CMYeE1aG3tY7wPLXchNiSoJ78PUqdEx5YjovPTgG6a0=)
2: 4967F6B8533511E8A678701BC4F9AE02.roa (hash: Qn+0huqeBwXglwQJRxVRLR40yUlrfMuqSCsx/03VN8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl
rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5534 (0x159e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A803, serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
Validity
Not Before: Mar 24 16:40:07 2026 GMT
Not After : Mar 31 16:40:07 2026 GMT
Subject: CN=69c2be67-b8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:f8:89:ba:26:82:5b:e2:f9:fc:27:94:b0:
a0:23:51:2e:ac:cd:80:4b:50:73:e5:c1:cd:cc:2d:
6f:85:05:ee:2d:3c:36:d1:35:ba:ff:a7:5b:43:60:
53:10:a9:e2:30:63:a6:42:7f:4b:19:d2:e4:36:25:
af:ba:d9:a8:58:6d:d5:cc:1e:13:24:5a:d4:9c:a6:
ab:76:88:25:bc:43:87:63:86:ff:56:30:d5:63:70:
2a:2e:83:df:db:98:47:31:45:f5:07:59:2b:8a:31:
60:2f:2f:95:a2:0c:be:d0:69:fd:ce:66:14:58:b9:
4f:b5:c0:ab:d7:87:41:74:00:1b:c5:bd:12:42:0a:
41:be:5e:f5:0c:cd:a5:59:fc:0c:4f:b1:b5:dc:47:
ed:32:aa:b8:2a:ed:d9:d5:10:ca:9f:65:a9:0e:44:
4c:91:ad:71:a1:ee:be:d6:7e:b3:84:39:ed:0f:54:
cd:15:7a:2e:dc:9f:aa:a2:92:27:66:b6:5c:b2:fe:
a8:67:1e:21:52:95:57:5d:ed:23:41:b0:0e:2d:e5:
b0:79:41:b8:29:bf:24:8d:27:65:1b:b5:4a:0d:0a:
4a:07:bc:31:45:37:0e:86:99:a4:e9:43:85:5e:7a:
95:c5:aa:5e:00:ef:8c:4c:78:c5:e2:c5:21:98:71:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:03:45:96:58:4B:40:CA:BC:9C:55:96:AC:D4:18:0D:2A:10:80:97
X509v3 Authority Key Identifier:
keyid:3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:bd:f2:2d:2d:0e:d9:0a:39:da:15:d7:20:fa:84:5b:e5:3c:
83:0f:eb:8e:b9:43:ea:6e:8f:7e:84:1f:a1:14:93:e6:4c:d8:
21:0c:27:5e:9c:8e:aa:67:0f:63:81:8c:a8:e7:39:e5:01:56:
37:97:b7:11:a1:c6:a7:dc:ca:6d:e9:54:1c:e1:df:fc:e1:1e:
c3:b1:08:8b:8c:06:0f:f9:9b:33:3f:c0:3c:9b:f5:e0:47:37:
ea:71:b2:2f:82:30:be:ef:f1:40:82:fb:25:e1:bc:91:a0:b2:
77:44:91:4e:c5:20:61:c8:56:9b:e3:63:f2:2f:20:ed:d6:01:
5a:bc:1a:36:fd:1b:23:9e:2f:37:8f:27:c4:5c:47:bd:78:69:
42:17:6d:cf:cc:e6:2d:aa:47:68:6d:4e:d1:77:1e:aa:6d:32:
fb:36:67:b3:c3:a0:d7:d9:8a:b3:62:c8:13:3d:ba:a8:64:86:
72:4a:8c:fe:fa:12:33:56:a4:5c:8d:2d:8d:6d:a8:6d:90:3a:
69:e0:32:2f:e0:ef:5f:90:af:95:a4:be:50:91:e6:f0:67:82:
a3:9c:fd:40:d4:86:3f:87:56:a4:fe:17:c9:55:07:6a:3a:1d:
1c:74:dc:df:71:8c:b3:56:f5:93:78:0f:06:dd:0f:99:6c:40:
3c:a1:cf:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE4MDMxMTAvBgNVBAUTKDNEREFEQjAxMjYwMjUwNTBGNUU4NTY2QzQ2MUQ5QUI3
M0U0OUU1NEEwHhcNMjYwMzI0MTY0MDA3WhcNMjYwMzMxMTY0MDA3WjAYMRYwFAYD
VQQDEw02OWMyYmU2Ny1iOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4s34ibomglvi+fwnlLCgI1EurM2AS1Bz5cHNzC1vhQXuLTw20TW6/6dbQ2BT
EKniMGOmQn9LGdLkNiWvutmoWG3VzB4TJFrUnKardoglvEOHY4b/VjDVY3AqLoPf
25hHMUX1B1krijFgLy+Vogy+0Gn9zmYUWLlPtcCr14dBdAAbxb0SQgpBvl71DM2l
WfwMT7G13EftMqq4Ku3Z1RDKn2WpDkRMka1xoe6+1n6zhDntD1TNFXou3J+qopIn
ZrZcsv6oZx4hUpVXXe0jQbAOLeWweUG4Kb8kjSdlG7VKDQpKB7wxRTcOhpmk6UOF
XnqVxapeAO+MTHjF4sUhmHGvZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFIDRZZY
S0DKvJxVlqzUGA0qEICXMB8GA1UdIwQYMBaAFD3a2wEmAlBQ9ehWbEYdmrc+SeVK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgwMy81NDZFRDczQTUz
MzQxMUU4QjRGQzZCMTlDNEY5QUUwMi9QZHJiQVNZQ1VGRDE2RlpzUmgyYXR6NUo1
VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BkcmJBU1lDVUZEMTZGWnNSaDJhdHo1SjVVby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTgwMy81NDZFRDczQTUzMzQxMUU4QjRGQzZCMTlDNEY5QUUwMi9QZHJiQVNZQ1VG
RDE2RlpzUmgyYXR6NUo1VW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUr3yLS0O2Qo52hXXIPqEW+U8gw/rjrlD6m6PfoQfoRST5kzYIQwnXpyOqmcP
Y4GMqOc55QFWN5e3EaHGp9zKbelUHOHf/OEew7EIi4wGD/mbMz/APJv14Ec36nGy
L4Iwvu/xQIL7JeG8kaCyd0SRTsUgYchWm+Nj8i8g7dYBWrwaNv0bI54vN48nxFxH
vXhpQhdtz8zmLapHaG1O0Xceqm0y+zZns8Og19mKs2LIEz26qGSGckqM/voSM1ak
XI0tjW2obZA6aeAyL+DvX5CvlaS+UJHm8GeCo5z9QNSGP4dWpP4XyVUHajodHHTc
33GMs1b1k3gPBt0PmWxAPKHPGQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:25:55 2026 by rpki-client