
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json)
Hash identifier: y2+UEz0vcxLaohGP0lniPX+U3TcF7l6f3v3ZsO/qeoM=
Subject key identifier: 73:91:A0:7C:EE:D7:7D:2A:6E:5F:A9:4F:50:7C:94:58:A5:FC:51:51
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial: 03B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
Manifest number: 0395
Signing time: Wed 25 Mar 2026 00:26:21 +0000
Manifest this update: Wed 25 Mar 2026 00:26:20 +0000
Manifest next update: Wed 01 Apr 2026 00:26:20 +0000
Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: nXDo+bwGyEtKavG288EAbAcziA8HZvihy4uIE2cLoL0=)
2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: 3oTJlo3dfPqUJV51FEFIq1H9zuUKyATog/K2P6FYqTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:26:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953 (0x3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Validity
Not Before: Mar 25 00:26:20 2026 GMT
Not After : Apr 1 00:26:20 2026 GMT
Subject: CN=69c32bac-da36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:81:dd:e4:09:49:ee:65:99:ef:5e:f0:84:
1e:9d:2f:ca:3a:d1:be:09:31:c3:ac:01:79:34:b5:
bd:fb:ce:0d:34:e1:ae:46:f3:74:fd:76:18:67:8b:
09:6e:27:7c:01:ed:01:a0:be:36:07:c5:ac:b3:4d:
0b:fa:24:f9:73:ad:2b:89:bc:ad:4a:d5:a5:4b:80:
22:55:3b:29:99:bd:97:07:12:20:8e:6e:0f:ba:00:
5b:52:61:5e:f9:ee:ef:65:28:5b:89:94:97:5e:82:
f5:d6:c1:3f:8f:b0:01:75:da:04:cb:eb:77:59:c2:
ca:96:51:13:47:14:3e:4b:a6:26:e9:36:0b:ee:dc:
f9:5d:9b:69:5f:25:9e:27:81:1f:78:70:3f:88:4b:
07:29:36:91:7b:4f:54:82:28:a7:7d:47:2a:c1:49:
4a:e4:a6:e3:b1:dc:ad:e2:ae:c1:26:11:73:4a:87:
b1:66:e4:76:b6:ce:44:9c:9e:bb:ce:1c:28:22:64:
1e:8b:39:a3:e8:bb:3d:65:80:ea:6e:0d:11:37:fd:
bc:20:22:e1:f0:99:d0:47:a6:4e:fc:ac:db:c1:94:
7c:04:9e:84:07:d2:ac:99:e2:ad:b1:bd:2b:4c:a1:
ba:eb:ff:b7:26:70:72:b7:2e:0b:24:04:ac:cb:75:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:91:A0:7C:EE:D7:7D:2A:6E:5F:A9:4F:50:7C:94:58:A5:FC:51:51
X509v3 Authority Key Identifier:
keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:4b:5f:2a:b5:9c:f9:28:49:a3:1d:e8:08:d0:25:25:f5:66:
ce:a2:03:16:2a:c1:40:70:ed:e5:71:dd:d3:ec:d9:1b:53:32:
37:86:6e:8e:ab:fd:0e:67:77:a3:0b:fd:e5:5c:3a:7a:53:14:
21:8a:54:b8:70:18:1e:e8:78:7b:18:33:3a:62:3a:f5:19:9c:
f4:c8:91:31:39:63:a7:50:60:53:39:79:79:fc:10:f2:69:f5:
e0:83:0a:20:f7:ed:a1:bf:55:03:d9:79:05:25:26:aa:21:bd:
6c:26:ab:50:cc:24:82:8e:4a:48:78:ad:9a:f6:ca:97:6c:1f:
b6:ef:c5:14:9c:a9:3b:bc:5f:6c:da:7d:a9:21:90:97:40:41:
b6:b2:7c:48:cf:50:f5:cc:ed:52:b2:14:82:15:36:e9:c5:e6:
9b:eb:c2:23:d4:af:e2:c2:b8:11:5e:28:c5:d1:52:ae:1a:6a:
cb:e8:3f:4a:94:2b:37:1a:25:ba:09:08:cc:de:c7:da:cd:75:
36:99:7f:63:e3:fe:45:cb:e7:c9:9f:99:c2:aa:15:2a:a1:43:
6f:d7:70:f3:c6:72:59:1c:52:16:ff:13:43:7d:d0:bb:67:04:
e9:10:1c:46:09:3b:87:35:d9:f8:f4:05:a8:93:fd:97:01:e6:
9c:84:32:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:58 2026 by rpki-client