
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
File: PNcVUq-qATj5pk4BYO7wYJYGUyM.mft (raw, json)
Hash identifier: TQRdiclXcLLaRImgTdJaI4+3VIjxp2FmgIdaeLudaiE=
Subject key identifier: EF:9E:1D:27:E7:4B:8B:AA:3E:86:7F:A1:87:62:E1:39:98:01:7A:1D
Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
Certificate issuer: /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
Manifest number: 01D9
Signing time: Wed 13 May 2026 03:39:28 +0000
Manifest this update: Wed 13 May 2026 03:39:28 +0000
Manifest next update: Wed 20 May 2026 03:39:28 +0000
Files and hashes: 1: PNcVUq-qATj5pk4BYO7wYJYGUyM.crl (hash: haN1mOAuoj7slUTg8aUlepHVmTTpYsdfgces46GtPVE=)
2: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (hash: Nj2SWfF08+NWeNfqPzGe0G/AhkrzTZtBpN7F7NKz6A0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl
rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Validity
Not Before: May 13 03:39:28 2026 GMT
Not After : May 20 03:39:28 2026 GMT
Subject: CN=6a03f270-f189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:f3:51:30:23:4c:3e:75:84:be:17:65:ff:
85:d1:7e:2e:25:80:5e:d4:36:6b:5b:89:db:b0:8e:
36:22:26:ad:84:e8:c4:aa:1f:ac:15:f1:e8:e5:d7:
75:58:e5:e3:4a:e8:08:21:fa:76:d5:0a:65:3f:ad:
10:3f:8e:22:0a:8f:15:0d:4b:2a:79:2f:b0:4d:f1:
07:31:9d:30:d6:24:27:9f:1a:78:ea:b4:87:be:23:
be:61:a9:cf:73:ce:49:fd:25:ce:d2:57:17:69:59:
cf:4c:fb:9f:7b:ee:f3:d0:51:d5:b6:17:e8:a8:e6:
6f:5d:96:e4:25:95:72:ed:72:f5:87:1d:95:56:f7:
b8:2f:8d:b1:72:62:35:45:b8:e7:d6:15:c9:77:85:
e7:7c:d7:de:88:b5:16:b6:bb:29:a3:32:80:61:4f:
54:1f:19:ab:89:d1:e5:44:f8:e3:93:d3:ef:28:6f:
da:38:35:da:c8:cb:8e:91:2c:a7:0c:2d:8c:d3:bf:
30:d0:2a:d5:dd:ce:0f:5c:c4:0d:25:3b:82:5b:d3:
c4:7f:5b:63:a9:22:86:3c:5a:11:d8:da:63:d2:7b:
66:c7:95:a0:01:2d:fd:23:87:31:27:01:ba:81:98:
d4:6e:45:d6:c6:85:c2:e9:5d:78:b6:e7:a4:54:f6:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9E:1D:27:E7:4B:8B:AA:3E:86:7F:A1:87:62:E1:39:98:01:7A:1D
X509v3 Authority Key Identifier:
keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:fa:c8:a5:27:c4:2c:7e:ee:9d:81:4b:19:38:50:8a:ba:8a:
6d:93:0e:48:b2:d0:8c:3b:23:63:16:50:38:7b:32:e8:bd:92:
ba:d9:06:7a:ff:ef:26:f2:a7:33:a2:ee:ca:5c:4f:2b:de:01:
61:4f:93:84:38:62:17:49:4b:d2:fe:ac:ec:d1:5f:59:54:c0:
5f:9e:0d:74:86:1e:87:00:d6:9e:6a:e5:9e:99:7e:d6:71:df:
c5:41:11:0a:d8:65:69:34:1c:84:7b:e3:92:db:cf:a1:7c:52:
b2:67:a7:1d:03:c5:a9:c4:5f:17:0f:d4:70:eb:f8:33:26:b8:
ac:7d:84:1c:9c:cf:0d:64:7e:1d:56:f7:d7:a7:c7:68:56:f6:
eb:01:0b:fc:b6:fe:54:69:93:db:13:17:0d:4e:63:b0:5b:f2:
9e:1c:e5:f9:e0:de:70:db:36:83:d3:e4:5f:d7:1f:88:18:f7:
c5:39:2c:2e:99:12:87:da:8e:21:d7:8e:d2:75:c0:15:45:b5:
a5:5e:ee:32:df:cb:4b:be:74:ff:47:ba:fd:5b:3d:0f:b0:67:
01:08:e0:d1:57:7b:cd:8e:f5:6b:1a:6f:76:c8:48:61:50:08:
bf:fe:06:57:62:78:36:54:88:bb:d3:05:d9:e5:9e:4d:41:58:
18:e2:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:18:50 2026 by rpki-client