
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
File: PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json)
Hash identifier: SwApiAjslkRcOKWvI9yP5oXZCvV7VdXdEl3MNuEPH00=
Subject key identifier: 34:AB:F5:94:F5:02:06:1E:8C:13:13:01:85:38:04:6C:5B:E1:D3:85
Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
Certificate issuer: /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Certificate serial: 07A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
Manifest number: 0790
Signing time: Thu 26 Mar 2026 21:24:17 +0000
Manifest this update: Thu 26 Mar 2026 21:24:17 +0000
Manifest next update: Thu 02 Apr 2026 21:24:17 +0000
Files and hashes: 1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: NkcRkSSn+/wZxp57C8JooLtebBkHraESivxkSzA6kuI=)
2: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: snnjjcJSmnSfiLGuLhSOWtXc8qgvzMcRQujW7d1nbB0=)
3: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: O87q+bxguIFbMrAZ7VUYrSbILFtjGYHtuiggLNAaxfM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1954 (0x7a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C0AE, serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Validity
Not Before: Mar 26 21:24:17 2026 GMT
Not After : Apr 2 21:24:17 2026 GMT
Subject: CN=69c5a401-6a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:5c:72:a4:c7:30:ff:fb:76:35:20:75:ce:
5f:4e:26:7c:bb:bd:49:bb:cf:41:10:8e:7b:35:24:
09:37:b2:6c:2f:50:1a:af:34:da:cb:04:eb:bf:2e:
2e:cd:0a:6a:c0:41:42:51:f4:49:e2:53:6d:52:56:
bb:8b:30:b6:f5:9b:35:61:50:04:ef:ad:25:d4:ba:
81:e2:2f:14:9a:6d:b5:2b:43:e3:57:eb:38:84:5b:
00:45:29:16:c9:90:49:1d:e6:8d:a9:07:e6:40:5c:
77:c4:37:ee:61:ff:f0:4d:6f:2e:59:45:ab:18:b5:
4b:32:e3:17:db:b7:97:bd:cf:58:65:ac:aa:51:fc:
82:e1:05:77:0e:7e:35:a6:b4:10:c2:0d:1e:c1:d6:
f2:cc:d7:de:7b:94:e5:14:92:77:33:ad:42:27:24:
3a:bf:81:c0:6a:ed:4e:88:6e:25:77:cb:b1:2f:b0:
32:b3:3e:71:f9:25:cd:c7:e4:aa:86:7f:f0:0d:9b:
59:2c:28:77:ff:85:b9:d2:58:29:3b:9f:20:18:90:
1c:f7:47:9c:2f:af:bc:4f:cc:22:f6:37:bb:9c:99:
f5:92:0f:d8:0f:7f:52:09:ba:c8:1b:8e:62:09:5d:
f7:d4:ba:55:a6:2e:95:ac:d4:94:90:84:d5:25:13:
fb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AB:F5:94:F5:02:06:1E:8C:13:13:01:85:38:04:6C:5B:E1:D3:85
X509v3 Authority Key Identifier:
keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d5:a1:d3:b9:00:bb:bd:33:d6:b2:f8:22:e9:d2:ec:e7:c2:
54:e7:af:7a:36:3c:42:ec:98:eb:63:72:37:3d:2a:16:f1:2e:
9d:10:0d:92:8f:09:af:0b:bc:b2:9a:2e:59:52:d4:ac:30:81:
84:fc:ed:ae:76:19:73:0d:6f:df:3d:f7:cf:83:a6:9b:cc:b8:
ef:ab:ae:18:34:a1:a2:c0:d0:50:59:0b:b6:64:ed:a4:98:77:
b0:00:22:4a:52:ba:88:13:a0:a9:96:77:2e:6f:3a:3b:db:01:
81:d4:a2:fa:5c:7a:69:98:67:2a:af:6a:3e:41:ac:96:91:c6:
e6:d8:58:b4:bd:9f:b4:40:2e:0f:fd:a7:2a:01:32:b1:a9:e3:
18:cf:1b:42:cc:45:5e:01:0d:7d:49:bb:76:7c:9e:62:5f:2c:
4f:88:40:a1:86:94:08:05:45:70:72:c2:5d:75:9a:60:b2:4a:
2b:2e:c8:83:e1:4b:ed:17:e0:00:b2:a7:4d:36:d4:bf:0a:ef:
80:d1:6c:44:e4:ee:74:f2:38:b8:c5:4e:11:1f:9f:22:66:87:
f9:88:94:c3:a2:cc:03:bb:8e:89:c5:9b:5a:a0:26:2f:44:78:
99:fd:3b:dc:0f:53:a7:e6:67:97:95:ad:23:27:e7:3e:19:b6:
d4:cc:0f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:17 2026 by rpki-client