
$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File: peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier: 3ugpTeCOt7i8uKPXfrFRJ5cwe4VrUpKxOLLO77l8F98=
Subject key identifier: 13:DA:4B:A5:99:68:1C:10:CC:AD:C1:BF:99:A1:61:01:66:C3:12:56
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer: /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial: 0281
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number: 027A
Signing time: Wed 25 Mar 2026 01:18:58 +0000
Manifest this update: Wed 25 Mar 2026 01:18:58 +0000
Manifest next update: Wed 01 Apr 2026 01:18:58 +0000
Files and hashes: 1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: oZ/QcM0EHBur4AGJ6qFL/VwQEC7CRTkDHnb6725nFVQ=)
2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: ivTW0Fo1wkmwXRc6syZMFMsxEz+/+R5DvemCPq4YiTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Validity
Not Before: Mar 25 01:18:58 2026 GMT
Not After : Apr 1 01:18:58 2026 GMT
Subject: CN=69c33802-5142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:fa:05:00:a5:7e:b2:b4:66:de:85:63:ef:
7a:7b:75:e6:7c:45:09:64:83:be:c7:e3:8f:70:94:
e8:38:2d:fe:d5:40:b1:6d:0a:c4:0c:a9:76:66:ca:
e3:db:9a:c3:03:63:dc:53:d1:ba:17:7e:32:6c:c5:
19:43:8a:bf:1a:ad:54:5d:bc:43:d7:0b:07:ac:e6:
65:01:d6:22:0f:8b:b2:23:38:a9:ac:f0:0b:23:48:
01:c6:17:d6:f2:b0:be:77:39:ca:4e:cc:84:63:d0:
52:9b:84:d6:ed:24:b5:70:63:53:31:9b:2a:fa:e8:
b0:e3:6e:51:54:cc:9f:60:fe:de:65:aa:62:e6:4b:
ba:af:25:82:5a:fb:79:6a:84:73:52:74:2b:3b:47:
d5:11:4f:de:4d:a5:a6:da:a2:50:4f:98:87:e2:1e:
9a:8c:3a:43:93:58:f2:9f:dd:0b:99:4d:54:4a:47:
f2:d6:3d:36:c4:b9:16:db:75:be:2f:3d:40:aa:42:
fe:3a:88:b0:5a:be:b2:b2:cb:ed:61:29:42:cc:88:
48:5b:bf:11:cd:61:62:ff:2c:2f:9d:1e:57:25:30:
cb:7f:f8:28:78:5b:c6:c5:f2:e7:b5:19:ea:59:a2:
38:7d:e3:76:20:c4:b8:98:c5:dd:fc:ad:40:df:be:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DA:4B:A5:99:68:1C:10:CC:AD:C1:BF:99:A1:61:01:66:C3:12:56
X509v3 Authority Key Identifier:
keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:32:a9:cc:80:ec:31:16:d0:af:b3:3b:2e:a6:58:ce:cf:d3:
79:2e:03:fd:73:93:3d:29:38:ca:2e:77:67:72:4b:53:e4:1a:
3b:5f:ed:75:51:d1:72:33:b3:71:0d:0e:4e:41:38:81:a1:d3:
d1:88:f0:41:64:b1:76:32:d1:24:c8:23:10:a9:dd:65:92:c1:
a7:7d:87:7b:66:2f:35:7f:33:cb:41:61:24:c3:9d:1d:e3:28:
9c:04:ed:58:e5:7d:c7:a8:d8:da:de:42:cb:00:ab:ac:b2:d1:
ab:18:ab:a1:43:23:94:8f:5b:21:e9:63:79:f4:0c:ff:3a:39:
eb:99:3c:cd:16:0e:3e:06:39:ed:ab:d3:78:6b:90:79:30:41:
24:a2:e6:3e:05:5f:db:24:28:67:2e:80:b9:a7:ee:18:12:1b:
41:8d:34:00:7c:d9:47:47:e1:43:32:de:bd:d6:db:10:da:34:
79:a7:07:1b:49:8f:1e:d7:92:78:7e:c6:91:73:0f:80:80:e9:
9d:46:23:f9:69:60:2a:3d:08:aa:06:d6:70:eb:c7:45:3a:d0:
9b:9b:d7:87:85:42:fd:31:0b:50:5f:5a:2a:f2:14:54:1c:65:
85:c5:0c:9a:8a:37:ce:49:1a:e5:d9:d2:a6:a7:27:4d:99:0c:
e4:d3:a5:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg0RDAxMTAvBgNVBAUTKEE1RTZGNUM3NEJCQ0VCNDAwOUM1NUVFQTY4OTcwMzQ5
OTcxRkY2M0EwHhcNMjYwMzI1MDExODU4WhcNMjYwNDAxMDExODU4WjAYMRYwFAYD
VQQDEw02OWMzMzgwMi01MTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxnb6BQClfrK0Zt6FY+96e3XmfEUJZIO+x+OPcJToOC3+1UCxbQrEDKl2Zsrj
25rDA2PcU9G6F34ybMUZQ4q/Gq1UXbxD1wsHrOZlAdYiD4uyIziprPALI0gBxhfW
8rC+dznKTsyEY9BSm4TW7SS1cGNTMZsq+uiw425RVMyfYP7eZapi5ku6ryWCWvt5
aoRzUnQrO0fVEU/eTaWm2qJQT5iH4h6ajDpDk1jyn90LmU1USkfy1j02xLkW23W+
Lz1AqkL+OoiwWr6yssvtYSlCzIhIW78RzWFi/ywvnR5XJTDLf/goeFvGxfLntRnq
WaI4feN2IMS4mMXd/K1A375ZgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBPaS6WZ
aBwQzK3Bv5mhYQFmwxJWMB8GA1UdIwQYMBaAFKXm9cdLvOtACcVe6miXA0mXH/Y6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EMzE0MkRCODVF
OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9wZWIxeDB1ODYwQUp4VjdxYUpjRFNaY2Y5
am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BlYjF4MHU4NjBBSnhWN3FhSmNEU1pjZjlqby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODREMC9EMzE0MkRCODVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9wZWIxeDB1ODYw
QUp4VjdxYUpjRFNaY2Y5am8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPjKpzIDsMRbQr7M7LqZYzs/TeS4D/XOTPSk4yi53Z3JLU+QaO1/tdVHRcjOz
cQ0OTkE4gaHT0YjwQWSxdjLRJMgjEKndZZLBp32He2YvNX8zy0FhJMOdHeMonATt
WOV9x6jY2t5CywCrrLLRqxiroUMjlI9bIeljefQM/zo565k8zRYOPgY57avTeGuQ
eTBBJKLmPgVf2yQoZy6AuafuGBIbQY00AHzZR0fhQzLevdbbENo0eacHG0mPHteS
eH7GkXMPgIDpnUYj+WlgKj0IqgbWcOvHRTrQm5vXh4VC/TELUF9aKvIUVBxlhcUM
moo3zkka5dnSpqcnTZkM5NOlcQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:00 2026 by rpki-client