
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
File: PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json)
Hash identifier: 0RVHHh42cUH8itQPywvMVCMEZxokaWLaFzRj18nV/5M=
Subject key identifier: 22:0C:E2:C2:E8:35:0F:F0:2C:50:76:78:3A:E9:63:1F:74:20:DA:FA
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial: 05B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
Manifest number: 0593
Signing time: Thu 23 Jul 2026 00:04:53 +0000
Manifest this update: Thu 23 Jul 2026 00:04:52 +0000
Manifest next update: Thu 30 Jul 2026 00:04:52 +0000
Files and hashes: 1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: GN1o5HerkbDSOXQ659zISHIQWLx1qYKG5CIYfrqovNk=)
2: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: arq5+h3KHX6t5y5Zj2CBCAg4COLqYpvoHOLbprQdcjc=)
3: EFFA034837D111EC9337B812C4F9AE02.roa (hash: N/0bVIyC0MPM6KEQ2d3ilkuUkeyn80eIzEQ24nUZdi8=)
4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: MgGvtEJxOhpocdjEABKQeXDE9AITBRXrKCKdxOChgec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1463 (0x5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Validity
Not Before: Jul 23 00:04:52 2026 GMT
Not After : Jul 30 00:04:52 2026 GMT
Subject: CN=6a615aa5-6857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:30:b7:f7:bc:ad:78:d0:2c:f6:92:ac:e6:f4:
dd:ce:cd:a8:bb:6c:c8:a5:4f:f1:5e:b6:47:84:15:
5b:51:ff:d0:20:f7:04:47:ab:cd:3b:0f:cf:81:aa:
d1:bd:5f:31:c4:f3:c4:85:62:06:92:7f:1e:ca:95:
a1:44:30:c9:2f:5a:cc:14:cd:10:01:33:fb:81:c0:
8a:18:c4:4b:98:96:42:1a:67:62:3c:d9:b5:88:2c:
eb:2c:48:d8:40:f7:15:48:e4:50:08:93:de:91:e2:
b6:31:ae:19:d1:31:e9:86:c0:1e:2f:a7:1c:e2:bc:
f3:35:da:e6:fc:63:c9:fb:5d:a1:a9:25:9c:63:59:
0d:24:e9:4b:9c:e2:89:4e:d4:03:81:91:4b:40:18:
67:ec:b0:8f:f0:5f:98:17:b5:34:0f:80:ae:22:94:
33:40:05:a3:4f:6c:76:09:24:e5:d8:b3:53:ab:0b:
58:02:31:4c:90:ce:85:cc:6c:3f:73:69:e7:b7:79:
63:fd:2c:09:eb:b5:66:01:c8:b5:42:4d:1f:22:34:
f0:66:67:f5:fa:02:9c:9e:2d:39:ad:bc:cd:35:c7:
40:7c:5c:33:b4:d7:71:f0:b0:69:f0:21:9e:d5:c3:
6d:34:eb:ba:31:70:0b:e2:af:fa:ac:91:89:87:da:
9d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0C:E2:C2:E8:35:0F:F0:2C:50:76:78:3A:E9:63:1F:74:20:DA:FA
X509v3 Authority Key Identifier:
keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4b:28:95:12:75:41:7e:e0:65:81:ab:46:83:63:de:f3:a2:
68:bf:1d:8a:f3:39:a6:b4:19:66:64:90:43:21:e4:91:d8:97:
17:41:d9:26:ae:6f:fd:05:b9:fb:1b:45:0c:78:36:4f:ee:e2:
19:88:7a:a7:1a:cf:a5:17:ae:56:56:6a:74:1d:cd:fc:d8:a9:
86:cb:55:d8:c5:4d:4f:f7:7d:6b:e7:e8:a8:3a:98:54:81:4e:
b2:e2:31:0a:21:51:b5:cb:62:9d:e4:18:ed:2e:95:43:5c:8d:
90:eb:3e:09:d9:72:54:ab:ff:5a:96:3d:cf:0c:9b:bf:e2:12:
13:c0:90:cf:1d:6e:be:1f:41:de:07:fd:77:6e:b2:c1:12:b9:
11:b7:0c:69:c5:74:51:ca:00:58:ff:e9:f8:1e:92:8f:6a:15:
ec:cb:65:03:94:d6:43:01:44:40:f0:81:24:62:51:88:3c:c9:
b6:00:18:f7:65:40:24:92:72:b2:29:20:95:f0:63:39:5d:91:
b6:8c:bd:96:5a:88:63:48:f4:00:10:64:bb:79:c1:e7:c6:6c:
aa:bc:8a:02:23:c8:e6:fb:6e:b6:bf:81:4a:5f:7b:d7:18:f9:
ef:d3:25:9a:a0:47:ac:91:fa:1f:c5:81:5f:9c:82:00:c0:71:
c6:9e:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:59:01 2026 by rpki-client