
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
File: PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json)
Hash identifier: DhfMh2SSPDCYApPymHMMXrqL11Yl7gOGzak3um01jS0=
Subject key identifier: 74:68:7B:64:B8:73:1C:C4:55:51:FD:38:C8:BA:11:ED:30:39:26:AB
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial: 2E2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
Manifest number: 2DCD
Signing time: Tue 22 Sep 2026 16:22:40 +0000
Manifest this update: Tue 22 Sep 2026 16:22:39 +0000
Manifest next update: Tue 29 Sep 2026 16:22:39 +0000
Files and hashes: 1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: hRU5b+TEgF9l81nFO8olC2/wBjF4GQq2/kVnOilhbJw=)
2: 89AC5C4686EE11F19E006003A7EE528E.roa (hash: KlZ2d71XmaFMXz4sBq2mMQtFoXDZazbD9Q3R/UtUMaw=)
3: aUwDH3vftgm1kmby4eSjRnIwLrM.asa (hash: URAykAYWCTsmI1A2fa8kuMwusyUNDEz9O8VU0o/LmDI=)
4: DB6B2B08803F11F1AB5A5B056DA30FBC.roa (hash: altDSQ0dHFIeOj29AXcdNslZcculm301Vy0nlA3TcNs=)
5: 14820EDE248611EEB600357DC4F9AE02.roa (hash: 2hSw6DcNn14LWM6zxsFfMykIxr/Tkx9/0IIyTsXUQ/4=)
6: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: cVxr4IIPhDNkyo4KWXqFgpodx3w2GpS0AheV1jrJkc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11821 (0x2e2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Validity
Not Before: Sep 22 16:22:39 2026 GMT
Not After : Sep 29 16:22:39 2026 GMT
Subject: CN=6ab2ab4f-4824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:61:cf:9d:cb:60:33:02:a7:14:3b:25:d6:
10:75:9a:a7:b3:a6:5f:f2:01:cc:ab:af:49:93:96:
e7:81:28:df:05:1d:1a:57:b8:7e:5f:ed:73:db:42:
21:7a:b7:a3:b8:7e:8d:be:ca:dc:c1:12:9a:3a:d1:
ef:20:85:17:10:ce:54:e6:40:df:9c:11:d4:68:e4:
c0:af:19:31:ed:46:51:0f:3f:73:4f:e8:65:c1:e4:
d4:7f:f2:cc:5f:d6:63:e7:45:ae:52:61:a9:8e:b4:
68:d1:3a:00:bd:83:99:57:eb:86:99:36:ed:9f:39:
28:fd:63:bc:6d:fd:02:b9:c8:13:1a:0f:9b:67:3b:
a3:39:6a:44:6e:8f:e2:9c:9e:79:cc:17:d4:52:15:
62:5d:09:3e:ab:cd:af:c8:6d:0b:6b:e9:f8:7d:18:
e6:e2:c6:77:6b:4b:05:2c:0e:54:9c:32:95:7e:92:
2e:7c:b9:dd:77:a6:11:44:0e:57:cf:a9:6b:6a:54:
67:84:7a:2b:b9:1c:3f:dc:81:fe:2b:7d:0c:56:9a:
53:62:6c:9a:1f:e2:ff:e1:97:bb:b9:2e:9e:2f:73:
b5:62:14:d9:36:7a:7a:14:86:a2:72:42:c6:e2:97:
cf:70:59:a6:78:56:1f:05:22:3d:1d:d5:67:d1:ce:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:68:7B:64:B8:73:1C:C4:55:51:FD:38:C8:BA:11:ED:30:39:26:AB
X509v3 Authority Key Identifier:
keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f9:cc:bb:e6:c5:b1:83:ea:f5:75:a7:dd:03:c1:d6:b6:4e:
86:08:5e:e1:a4:60:66:f5:5a:86:c4:7d:9f:bb:79:66:f0:e3:
ce:3e:45:95:dd:c5:5f:f9:c4:d2:41:49:f1:de:d1:8b:5c:37:
0a:62:0d:90:a8:7e:11:e8:ab:ec:f3:27:0b:19:ff:26:da:dc:
d9:36:0a:17:f1:51:59:d3:a1:45:cd:dc:83:b5:1a:38:b4:73:
2c:0e:a9:32:12:00:ec:09:0d:b0:1c:a7:93:08:4e:39:78:0a:
d8:8b:59:63:cd:f0:a9:1f:04:3e:29:d8:56:dd:49:44:e6:cd:
ec:ea:1d:d1:31:cc:ce:48:52:ba:a3:38:4a:7a:3e:50:e2:74:
49:f7:5c:bd:0a:5c:61:2f:f0:eb:56:95:d7:91:f4:4e:30:14:
16:11:47:49:3c:5b:c4:48:df:c5:bf:3c:4e:61:bc:20:e6:75:
b9:41:fd:d4:d0:02:6d:71:d6:6d:41:6e:d5:17:1e:e2:5f:75:
d2:45:d6:3e:80:fc:4c:c4:d0:2f:d2:04:b2:d1:c3:d6:e5:99:
42:96:87:80:c6:96:02:99:18:78:0c:96:f6:f3:8d:31:41:be:
24:59:6c:ad:f9:b9:3e:67:86:83:e3:0e:29:3e:93:0f:b0:bb:
6a:f0:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:08:37 2026 by rpki-client