
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json)
Hash identifier: DeJKWZ1LuCmS1tdLyQsWRjugHJDfBqNCdzdkIlTCVXQ=
Subject key identifier: 1B:BB:C7:34:07:32:6F:BD:CD:88:54:68:31:10:01:FD:95:2E:BF:92
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial: 03D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
Manifest number: 03AE
Signing time: Wed 13 May 2026 00:49:51 +0000
Manifest this update: Wed 13 May 2026 00:49:51 +0000
Manifest next update: Wed 20 May 2026 00:49:51 +0000
Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: 9ONi6LR/AsZtL27twXNSpZSKtIeWOMlYRpZ5EVuTamk=)
2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: 3oTJlo3dfPqUJV51FEFIq1H9zuUKyATog/K2P6FYqTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978 (0x3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Validity
Not Before: May 13 00:49:51 2026 GMT
Not After : May 20 00:49:51 2026 GMT
Subject: CN=6a03caaf-f340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:10:6f:58:94:15:f8:56:f8:ab:14:a8:f6:
17:d0:74:b6:28:be:5c:1e:b4:75:80:5a:58:7b:71:
c0:47:2f:87:47:ce:a0:cb:18:bb:e9:96:39:77:42:
69:2d:f9:59:3d:6d:a2:2e:2e:9f:b0:42:4b:9f:32:
71:41:75:78:10:55:b6:24:fa:cf:44:40:4c:38:27:
28:9c:05:c0:c3:ad:7d:c0:55:4e:17:fd:53:72:60:
43:b3:62:9e:d0:57:96:8e:21:1c:93:7c:77:a0:29:
a4:44:c9:29:07:28:95:43:28:26:c5:32:f2:02:9d:
2f:6b:10:61:4d:8a:2c:49:7c:88:ec:8e:8d:39:d9:
5b:f8:0e:b6:bb:b9:71:33:88:2f:84:dd:e0:58:c7:
86:f3:4c:77:de:ec:79:c8:31:50:24:a8:f3:9a:18:
0c:23:5a:dd:20:69:73:c6:a0:ca:55:f3:ef:42:68:
8d:3c:0c:b2:95:7d:f8:c4:b5:93:5a:82:70:c0:11:
50:c7:6b:d6:f2:13:27:39:b1:8c:5c:e0:f6:47:aa:
26:2f:9a:27:ad:37:8e:5f:18:df:37:34:c1:9b:bc:
72:30:7e:b3:c3:0f:fd:08:26:14:f3:24:a5:13:18:
0d:48:74:06:36:32:a5:79:24:0b:57:2e:2f:ef:d4:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BB:C7:34:07:32:6F:BD:CD:88:54:68:31:10:01:FD:95:2E:BF:92
X509v3 Authority Key Identifier:
keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:78:d6:57:13:be:d6:75:e4:7d:8f:41:be:e7:9e:68:21:8f:
43:8b:71:0e:91:8f:b3:f4:87:bc:cc:8c:3c:e6:cf:4d:dd:2e:
c8:e9:5f:b5:d1:15:22:fb:1d:b9:c0:9a:fa:a7:94:8e:3b:7f:
bf:1c:b1:2d:d3:59:d1:aa:7d:cc:0e:bf:75:06:aa:8d:f7:1f:
b8:61:41:0d:3a:d0:7a:ed:14:4a:49:78:99:c1:51:12:51:01:
67:cb:cf:00:bd:04:7f:0f:a0:e8:00:64:6c:c7:98:5a:a9:3c:
c5:03:63:92:41:58:44:89:90:2d:70:c1:9f:51:4d:bf:27:f9:
06:54:64:6c:da:4b:0c:03:4f:4f:b2:00:7b:a1:89:d0:e8:e5:
83:6f:45:16:05:0c:80:b8:6c:fb:0a:55:ee:cf:c3:f0:6b:ab:
11:7c:2b:59:45:7b:43:17:44:76:1a:1d:04:df:94:6c:a2:a0:
18:26:e7:57:91:42:c5:1a:37:6b:54:07:80:f4:2d:40:1c:c4:
a2:51:bf:42:48:a6:8d:4d:59:da:d9:07:92:4f:f3:55:cb:f1:
d7:e7:eb:f6:d3:e5:4b:78:f9:57:be:9d:8c:4d:11:29:10:23:
ed:cf:be:4d:d7:2e:52:23:d7:e4:2f:0f:3d:80:01:e3:29:99:
98:6b:64:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:53 2026 by rpki-client