
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
File: pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json)
Hash identifier: 4ZzH1c+CIsZKr/X4wfrVBqwuXljLicabl/HobUBKIqQ=
Subject key identifier: 6C:7D:82:8C:AB:2F:21:5E:12:39:CD:DF:C4:F3:18:3A:AA:26:D6:21
Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1
Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
Manifest number: 0273
Signing time: Thu 23 Jul 2026 03:09:31 +0000
Manifest this update: Thu 23 Jul 2026 03:09:30 +0000
Manifest next update: Thu 30 Jul 2026 03:09:30 +0000
Files and hashes: 1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: lK5f5XIID+Ux1DVhjyAdK7j9YaB8Qxce4sxvKKa/LMM=)
2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: oPoTgdYw+Xp4zsCLRgOst4RRIJvgrTE9ExRg+Am+0NI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl
rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1
Validity
Not Before: Jul 23 03:09:30 2026 GMT
Not After : Jul 30 03:09:30 2026 GMT
Subject: CN=6a6185eb-bc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:9c:ba:d4:6b:e7:31:9b:a7:81:4d:41:93:
bd:8e:97:07:d9:aa:3a:bb:5c:72:18:12:99:ec:56:
5c:fb:1e:a8:83:6d:a4:30:31:6b:6a:1a:37:57:5d:
7e:b5:11:56:95:6b:17:15:71:45:39:07:75:55:3f:
0e:7a:84:33:eb:d8:65:74:1c:e6:af:cb:08:fd:91:
d6:05:8d:7c:b3:70:55:d1:76:c6:30:d1:99:d2:f2:
a1:24:15:7f:0a:4a:71:71:2a:80:76:8e:46:27:74:
06:bc:70:d4:55:91:59:c6:22:e3:e8:dd:20:2a:44:
5d:6f:ca:f3:bc:e7:54:02:dc:03:8a:6c:5b:08:14:
38:26:9c:6b:7c:67:90:e6:bb:c0:1a:6a:d8:8f:94:
29:fd:8c:05:75:35:95:f5:cc:c3:96:6b:fa:74:a8:
7d:dc:89:40:bb:54:7c:f1:2c:c1:50:3c:32:7b:34:
5b:a1:1e:b9:5c:f4:96:9a:c8:78:a2:a8:b3:3e:d3:
03:de:6c:6d:73:12:aa:03:35:6a:25:d8:52:a3:89:
62:2f:ba:d2:d5:c2:66:ad:cb:d9:c7:38:2a:f6:43:
69:94:25:37:dc:66:f1:0b:bd:c5:5c:20:8b:0b:68:
bd:23:0c:66:44:7a:1e:f1:07:41:4e:11:ed:aa:86:
53:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7D:82:8C:AB:2F:21:5E:12:39:CD:DF:C4:F3:18:3A:AA:26:D6:21
X509v3 Authority Key Identifier:
keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:d1:3a:93:31:dd:a9:d2:f3:33:64:22:cf:3c:e8:78:c2:bb:
14:8b:70:98:cf:a9:51:dc:be:9c:3c:05:57:75:4a:51:94:6a:
8b:31:32:f9:eb:ae:92:f4:51:f4:e9:21:95:2e:5a:20:ab:71:
1e:23:da:df:28:53:f6:76:0d:8a:67:e1:ad:a6:36:b0:98:7f:
d8:0f:31:dd:20:1d:2c:49:01:aa:1c:ce:1a:a7:5a:95:79:6b:
17:3e:2f:92:c1:05:a5:a7:f2:b6:f0:38:81:f4:c1:a6:b0:6c:
9e:ca:38:4b:12:ba:31:ca:b8:6f:1b:00:28:33:a4:46:87:ca:
be:d1:60:09:82:60:a3:d7:31:79:42:bc:73:d9:25:b9:ec:ec:
c4:14:6c:2f:5b:ed:b3:54:c7:ec:e8:28:52:92:bd:8a:77:e6:
4e:cb:2c:d1:b2:3c:1d:4e:1d:a7:1d:26:eb:a8:cf:42:ce:d9:
4d:15:0c:e8:13:4a:b1:14:ea:aa:a1:b4:9a:52:d7:3a:aa:77:
37:b7:db:5d:bf:f1:bc:49:d8:20:c5:fd:29:b6:a2:e0:ec:4f:
ea:d7:a5:9a:66:01:8e:35:92:34:e3:d3:65:2b:a0:bb:65:28:
fd:fa:7b:34:4f:d5:39:ba:83:13:5f:46:a6:db:d3:2c:85:0f:
d8:47:c9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:54:00 2026 by rpki-client