
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
File: PcXSlD7UrPqSa3dnapi-yLPJea4.mft (raw, json)
Hash identifier: UXlPdGlPnmEpg4MfdCZ2zd5m/3yq36kf7gU6N4StQNg=
Subject key identifier: 07:C1:5C:3D:9A:8B:14:96:F9:16:58:C9:C0:56:D5:2B:AB:DE:7A:5A
Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
Certificate issuer: /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Certificate serial: 080E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
Manifest number: 0803
Signing time: Tue 24 Mar 2026 20:54:04 +0000
Manifest this update: Tue 24 Mar 2026 20:54:04 +0000
Manifest next update: Tue 31 Mar 2026 20:54:04 +0000
Files and hashes: 1: PcXSlD7UrPqSa3dnapi-yLPJea4.crl (hash: OcwJVxq0yxQQalJyYndGcF9yQ31gWJ+a8gOnC4hSAEM=)
2: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (hash: HVn7Q2L4WfkAvVFRz7U2z3d+LB0K0T0IoXW8E/jT118=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062 (0x80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AF8E, serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Validity
Not Before: Mar 24 20:54:04 2026 GMT
Not After : Mar 31 20:54:04 2026 GMT
Subject: CN=69c2f9ec-107b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:4f:c4:0c:1a:68:1e:ba:3a:4b:53:0e:38:
32:2e:85:59:ce:2f:44:8d:75:bb:1c:bf:92:7b:d2:
de:ee:5f:9e:15:23:20:b7:1f:1a:32:6d:a4:b5:76:
f3:5e:ac:63:ed:f7:23:56:b5:e1:01:1c:41:fb:88:
29:a9:2a:65:d1:05:9e:3f:46:c2:ed:47:6b:5c:2c:
d3:78:83:5e:65:81:7f:ee:4b:9f:e0:c9:03:72:b2:
21:a6:ca:58:57:7c:8e:4e:e9:b9:cf:1b:b3:2d:c0:
37:b2:17:58:2b:ef:64:78:d7:60:06:fc:f6:2f:f9:
1f:b5:78:ef:e0:42:11:14:b7:a0:95:a8:3d:5f:bc:
b0:44:fb:a7:c0:8b:4f:d7:a3:25:55:f4:16:86:73:
e5:78:b9:12:92:b7:c5:dd:9d:f8:05:10:4e:73:c6:
42:06:b4:89:91:a5:5a:11:2c:46:13:e9:7a:9c:5b:
56:58:43:b5:d3:30:2a:a6:3a:00:db:74:ec:d2:0c:
d6:4b:a5:e1:b1:df:1f:b0:60:b0:cc:84:42:39:05:
22:49:08:ed:2a:75:07:82:31:6b:b8:34:77:d3:09:
84:89:f6:a3:58:51:e5:de:b3:a0:ec:86:1f:80:ca:
2b:28:f2:16:e0:b5:44:18:36:25:3c:e7:a4:6b:a2:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C1:5C:3D:9A:8B:14:96:F9:16:58:C9:C0:56:D5:2B:AB:DE:7A:5A
X509v3 Authority Key Identifier:
keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ca:8b:61:6a:96:3e:8f:5b:18:f1:0e:c0:07:ac:98:a9:b0:
cb:67:ec:2b:cb:ff:3b:c1:66:17:33:a0:0a:62:0a:12:0c:82:
dd:c6:18:3a:dd:23:ae:69:19:7d:88:c2:c2:e3:9b:15:c8:83:
57:24:5e:a1:4f:25:e8:ce:ae:63:f8:04:42:44:c4:cd:ee:22:
6e:c0:7d:0e:8d:88:30:17:6c:aa:2c:c9:19:ed:0d:30:f8:05:
dd:77:cf:bc:d1:3b:ba:05:0c:50:1a:da:8e:db:ce:cd:d6:18:
80:61:7e:83:f0:74:af:71:e9:e6:6f:ab:d7:9b:95:b9:54:62:
ec:ce:44:f4:21:4e:22:2a:7e:a7:68:8a:ee:ad:28:11:38:4c:
90:22:f6:ca:4c:85:5b:34:b1:ec:dc:77:a4:ec:03:9b:a8:1d:
aa:36:de:b6:e8:cc:dc:27:bb:15:5a:e1:c2:e9:11:a6:0c:97:
ac:9c:dd:65:4d:51:a3:e8:fa:00:26:87:b1:2e:79:d1:c0:3e:
20:40:b2:44:6a:31:0d:0a:16:4d:74:76:05:43:df:7d:5e:2d:
ce:84:a2:65:6d:9b:c5:32:54:37:25:d0:48:d6:b8:38:2a:ef:
22:16:16:dd:d5:fc:ff:00:95:b0:47:ad:42:f6:53:3a:26:72:
d7:46:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:31:32 2026 by rpki-client