
$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
File: Pj3GKtNpQScHmphxdsIYwJs-yf0.mft (raw, json)
Hash identifier: y4y7CEFi6EKivLUmDzvHZIjd9g+RR7bXmb1ntdpBBvQ=
Subject key identifier: A8:D8:CD:50:6C:6A:EE:96:76:59:8C:F2:B6:45:65:8D:39:77:33:57
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Certificate issuer: /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial: 2CA4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
Manifest number: 2C7F
Signing time: Tue 24 Mar 2026 15:28:35 +0000
Manifest this update: Tue 24 Mar 2026 15:28:35 +0000
Manifest next update: Tue 31 Mar 2026 15:28:35 +0000
Files and hashes: 1: Pj3GKtNpQScHmphxdsIYwJs-yf0.crl (hash: 9y3datnEHDmpc6rBSUa8N3TlIBi6W29LB8NX2N52HN8=)
2: A37B20206FE111E9B3465D70C4F9AE02.roa (hash: QG3CWQn3Z6K4Pfd735nOcWyRkk04Fo8yzoUj1zOBam8=)
3: 5E736B1EEE2C11ECBDA4362BC4F9AE02.roa (hash: NfSF2/24Lac2ri9eqQMgbAEvGH5Aq8vrSCMGSdoJ7ko=)
4: C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (hash: piVYIMzYyeRdoeWa2qt5VAi4HtgHwmt42QAX33j5VNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11428 (0x2ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Validity
Not Before: Mar 24 15:28:35 2026 GMT
Not After : Mar 31 15:28:35 2026 GMT
Subject: CN=69c2ada3-c50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:2e:8b:b3:09:68:a8:2c:69:ee:b3:46:12:
08:9a:8f:99:8e:90:98:30:b6:4a:3d:71:cf:a2:ff:
1b:75:85:a4:8d:2e:42:2f:2e:83:22:a4:05:b5:8e:
32:91:dd:d5:ba:8d:42:33:5b:20:cd:bd:fe:3c:82:
c0:ad:32:a3:24:60:65:b8:7b:70:34:45:34:d0:ea:
d4:ee:d9:76:fc:c7:b5:17:33:c0:85:0b:d4:6a:57:
ed:e6:1a:93:d9:5e:0b:15:dd:5a:48:c4:e5:d3:d7:
02:3b:08:d6:58:e3:b8:b9:4e:99:69:25:7b:32:87:
e2:62:ba:35:17:bd:96:bf:02:83:68:b4:46:0c:3c:
b5:26:fc:c0:1f:a9:6b:8b:f0:a2:73:81:42:b2:a3:
71:15:b4:37:08:8a:e5:b2:8c:a4:c7:d2:3a:89:79:
58:a2:d0:6c:e2:02:d4:16:26:47:b9:a4:76:88:b5:
09:4d:8f:ea:1e:c2:5c:b3:cc:ff:78:b0:9c:14:cc:
9d:29:2b:3a:05:58:61:d5:1a:b2:e7:83:c7:85:51:
18:5b:51:96:8b:76:14:db:be:d0:64:5c:fd:36:12:
58:67:b7:4e:54:12:cc:33:cf:77:5e:9e:fb:db:c5:
d8:57:56:37:e7:78:7c:f0:30:e3:87:66:fa:c5:90:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D8:CD:50:6C:6A:EE:96:76:59:8C:F2:B6:45:65:8D:39:77:33:57
X509v3 Authority Key Identifier:
keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e4:36:a1:d4:85:d8:81:c7:19:54:97:5a:a5:e5:3f:e3:ec:
ec:ab:73:3f:51:87:a9:47:3a:a3:6c:06:bb:8a:1e:9c:70:36:
bb:3b:05:fa:55:7b:cf:a9:33:15:39:2c:29:d6:95:59:1b:fd:
60:93:4a:d6:b9:f1:49:67:8a:d2:b6:83:7d:2f:63:5f:5d:43:
4f:90:40:93:36:6c:d4:64:d1:71:20:f8:aa:5e:f5:35:4b:2e:
a4:37:0a:04:78:22:d6:50:ba:69:dd:4d:b0:0c:14:94:3d:4a:
94:83:6a:59:e6:4c:a0:0f:01:dd:a1:09:9b:19:f3:63:f5:00:
af:86:5c:23:5a:1c:5d:ac:43:49:00:b6:c5:97:dc:1c:59:1c:
d5:df:26:0e:25:3f:f4:61:c2:80:44:7c:85:fb:6e:8c:44:2a:
b7:69:ca:b4:66:83:9f:0c:35:24:0e:15:4e:5a:c5:46:b7:df:
77:fd:70:7f:34:9c:01:a1:f4:22:87:2f:b5:3a:4e:37:a1:d2:
a3:79:df:51:d6:57:66:bd:22:b7:06:83:89:cf:0d:33:50:79:
c8:09:69:2b:7e:6e:0c:05:0b:c5:2b:79:63:68:ab:8f:98:40:
02:be:13:a4:5d:d8:5b:84:a8:b9:87:61:8a:13:65:56:01:b5:
88:f6:a6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:00 2026 by rpki-client