
$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
File: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft (raw, json)
Hash identifier: czyEeJYAtbjqlfFT090+Gt4tehZFu6EP5lUT2UyJCf0=
Subject key identifier: 49:22:92:53:AA:62:D8:B9:B8:E6:C7:E6:1F:F5:F4:36:55:83:66:9E
Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C
Certificate issuer: /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
Manifest number: C4
Signing time: Mon 11 May 2026 07:03:12 +0000
Manifest this update: Mon 11 May 2026 07:03:12 +0000
Manifest next update: Mon 18 May 2026 07:03:12 +0000
Files and hashes: 1: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl (hash: C8jwABmWWpZGK8ik2tfkZXeQ34azsWq2ssn3o+4aJSs=)
2: A7E91DCE275A11F09892587AC4F9AE02.roa (hash: 87D6nuf5v49Tli4xwHZuhqMSGj+/KqzNB34sSWREAF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl
rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C
Validity
Not Before: May 11 07:03:12 2026 GMT
Not After : May 18 07:03:12 2026 GMT
Subject: CN=6a017f30-fee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:27:7d:78:a4:dc:f4:74:2c:db:95:77:2b:
0b:2f:c2:c7:e8:0d:be:93:1c:05:ea:4d:86:6b:d3:
0d:f7:60:aa:ef:97:27:0f:17:2d:40:ea:de:07:0b:
64:ba:88:25:53:ca:de:99:9c:60:ae:1f:16:4e:bf:
b5:6f:2d:c3:9d:05:19:44:28:7d:37:0b:6b:7a:04:
81:cf:28:1c:cb:dd:ef:c4:2e:65:dd:f2:ce:80:93:
6f:10:19:33:41:2c:95:8a:6e:0b:44:e1:53:53:5f:
51:bc:53:ce:0e:56:45:e6:69:70:a9:3e:ea:7e:c8:
d9:30:03:e8:f6:ae:2a:98:aa:d3:ee:25:8c:71:f9:
ce:98:56:b3:12:6e:cb:a5:e0:ae:b2:4f:86:38:6f:
58:fe:1f:ee:77:98:db:b8:00:66:9d:3c:92:1a:d6:
61:1a:0b:f3:4b:46:ec:31:56:f9:4c:cc:4f:72:07:
db:82:38:b4:00:3b:27:9d:3b:bf:2c:87:24:18:9d:
8d:b8:26:f1:fb:99:7c:34:bd:af:fd:3e:9d:ed:2e:
3c:ad:c9:86:e0:d6:b8:3e:66:d6:4a:4c:46:ac:3f:
ef:83:29:d3:4e:eb:a9:e8:1c:ae:95:ee:7b:7b:a5:
f9:a3:7d:7b:a9:e0:ac:86:0a:c2:8b:f2:37:b1:d1:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:22:92:53:AA:62:D8:B9:B8:E6:C7:E6:1F:F5:F4:36:55:83:66:9E
X509v3 Authority Key Identifier:
keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:eb:77:ee:16:85:13:a9:33:a6:fb:66:bd:ed:10:64:de:69:
e7:6a:a7:0f:13:3e:a5:df:8c:a8:9d:55:71:ae:99:9e:50:33:
1b:de:45:88:54:43:43:14:a6:6e:98:39:a2:99:55:34:56:bb:
70:0d:06:69:11:39:ca:12:bf:3a:ff:ee:50:fa:26:b5:92:89:
9d:cd:17:e1:d3:f3:16:37:1a:11:f3:93:14:e7:86:8f:f0:ed:
12:03:61:d5:df:96:e6:a7:9e:b9:dd:f8:2a:b9:f9:e8:f0:a7:
2f:76:72:e7:84:64:5a:ee:84:20:8d:59:c9:15:b4:77:8a:e3:
13:71:e1:97:07:ad:cb:00:ee:e1:d7:84:27:a7:cf:27:4a:ba:
9e:25:4d:3e:78:e0:c9:d9:65:ac:56:e6:1c:fb:85:b1:2f:cf:
6e:2f:42:60:89:c4:d0:57:d0:81:7f:55:04:43:0a:39:47:21:
94:e0:f4:b1:53:f2:b8:d6:ce:93:84:21:67:af:f8:1b:6b:c9:
25:24:83:c2:9f:9f:59:99:9c:e8:8e:89:06:2d:0c:5a:73:1e:
72:e1:b5:c0:d0:fe:48:c0:ba:a2:c2:58:66:a6:dc:03:49:5f:
cd:d5:52:99:e3:76:a9:17:10:ee:5e:fc:6a:de:71:2f:ae:71:
71:89:43:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:09 2026 by rpki-client