
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
File: pVDumUQoL8_DhLCCv_qI-G2wQXk.mft (raw, json)
Hash identifier: zcdaa5z+ZNhizpQ06iKjttAnE733p3T3YBluXbr5heU=
Subject key identifier: D5:5C:19:04:22:7F:08:9A:AE:44:3A:2E:0D:B5:56:72:5A:DD:34:23
Authority key identifier: A5:50:EE:99:44:28:2F:CF:C3:84:B0:82:BF:FA:88:F8:6D:B0:41:79
Certificate issuer: /CN=A91CD5B5/serialNumber=A550EE9944282FCFC384B082BFFA88F86DB04179
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
Manifest number: 0209
Signing time: Wed 25 Mar 2026 02:25:42 +0000
Manifest this update: Wed 25 Mar 2026 02:25:42 +0000
Manifest next update: Wed 01 Apr 2026 02:25:42 +0000
Files and hashes: 1: pVDumUQoL8_DhLCCv_qI-G2wQXk.crl (hash: z+LOPXfZokAtoiG0uBt/BSjPkkAMnD593PcpwnC9/80=)
2: 935947E8234B11F0B6DF721FC4F9AE02.roa (hash: /CH8I5GqlBiWA4mIBiiBTBBXA06LtTv7f+HzqPdpy8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.crl
rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD5B5, serialNumber=A550EE9944282FCFC384B082BFFA88F86DB04179
Validity
Not Before: Mar 25 02:25:42 2026 GMT
Not After : Apr 1 02:25:42 2026 GMT
Subject: CN=69c347a6-0989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:76:30:3c:f3:e7:b2:ea:ae:d6:f2:e7:15:
30:35:4f:68:84:b9:5c:0b:68:55:7c:de:30:5a:98:
48:09:ff:72:dc:90:b5:f8:0e:fd:88:cd:76:a6:a4:
5e:ef:5a:aa:66:87:34:98:0b:51:da:33:a6:92:50:
66:f6:8c:bb:fa:a8:84:00:c3:65:ef:a4:39:1c:70:
f7:4e:01:da:ca:c0:09:f7:ee:ff:a4:e9:8f:08:49:
62:ee:66:83:47:44:c5:ca:5c:93:61:38:a0:e3:0c:
e1:77:86:8c:4c:ec:ba:9e:59:0a:94:3b:0e:f8:45:
2a:70:3b:0a:ea:e3:1b:ee:b0:cc:c9:f0:e7:59:2d:
ea:d6:f3:6c:bf:de:7c:8e:47:1c:2b:5c:ca:98:33:
ee:c8:6c:ee:a2:a2:42:95:e7:2f:f3:cf:8a:21:87:
a9:88:0d:a5:65:a5:5c:0d:dd:2b:50:95:68:ee:19:
25:9a:8c:68:f4:f7:79:16:04:37:38:2d:25:e5:a5:
d9:c9:8c:5c:1f:ea:d1:8d:b0:00:4f:00:f7:e8:fb:
30:d4:ac:5e:4f:86:d8:fa:b9:20:7e:a5:bc:7d:55:
a0:b6:e5:1f:c4:d9:e6:5e:c5:f7:0b:a8:9e:39:32:
e9:96:49:53:c2:a5:6b:41:93:44:84:c9:de:73:65:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5C:19:04:22:7F:08:9A:AE:44:3A:2E:0D:B5:56:72:5A:DD:34:23
X509v3 Authority Key Identifier:
keyid:A5:50:EE:99:44:28:2F:CF:C3:84:B0:82:BF:FA:88:F8:6D:B0:41:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:07:c4:53:c1:42:4e:a2:e6:13:3a:84:36:59:2f:82:76:82:
7d:19:b1:25:c5:a9:63:74:b6:0b:85:d3:f9:81:79:2b:05:cf:
af:9d:59:a2:83:65:f5:6a:a2:36:49:3e:fa:b6:9f:7a:2f:fa:
76:03:bb:9a:cc:38:07:72:ac:19:ab:71:27:c4:e0:ee:17:64:
fd:60:c0:1b:82:a6:0e:1c:10:44:06:77:e9:2a:f2:24:bf:b8:
8c:08:57:ee:48:5b:d8:4f:25:8e:46:09:d9:bd:df:c5:00:d4:
07:2f:65:a3:60:ff:cb:13:e6:86:65:f2:fc:cd:4a:f1:68:ca:
be:13:3e:56:0f:17:52:c7:2e:03:f4:48:97:1e:28:f7:96:2d:
a4:e2:41:2d:89:f3:7d:15:be:12:b0:93:37:89:f6:08:8a:3e:
60:4d:4a:e3:c2:3a:bd:a6:7d:96:89:c7:ec:87:16:d7:ae:da:
db:24:9d:50:4b:46:36:d7:cb:0d:1a:a5:56:d7:48:ad:08:af:
a4:6f:95:e4:ab:cc:d0:fa:49:03:43:53:f8:cc:5d:e2:62:bc:
6a:39:b5:c5:77:36:90:8f:b3:31:df:6c:af:ac:99:cc:c7:e4:
49:71:65:38:0a:90:7d:c2:5c:ef:4f:1d:03:b6:f0:9f:40:25:
5d:f3:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:43:51 2026 by rpki-client