
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json)
Hash identifier: 2ccdu2ECveFjE3XcEyXLwO6rn2O1x8GPzY85IP4CKR8=
Subject key identifier: CD:A6:77:B5:57:65:FD:C8:F1:C2:BB:C0:9E:62:E4:2A:18:AF:04:55
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 0440
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
Manifest number: 03AC
Signing time: Thu 23 Jul 2026 02:09:51 +0000
Manifest this update: Thu 23 Jul 2026 02:09:51 +0000
Manifest next update: Thu 30 Jul 2026 02:09:51 +0000
Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: iWHeHs0pKHAcMAocEZPD2eDNKFNeFZMQfKqFbWIM7VY=)
2: 20978DD270E411F08F40242AC4F9AE02.roa (hash: YXNI8ISIfXC762RiaMdSZBJ9u8IzbOaTlYzuCqJEMqQ=)
3: F1EA8F4657E911F1ACD7923C93833773.roa (hash: bWtw9F8LU24NtnpV5FCzxLT/YLwgD6y8BEgt8uAmOpo=)
4: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: V+41ntKJN5cZcf4m2jV7VDL18RNscYpp6FiRJv/RGZo=)
5: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: 2Co79ynBgBkfRYtcjArTdkt2fZojdezftQg41GUn3f0=)
6: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: 5DPxa9zh03P/4EIxkUOZTnMchK9kaQkZ16Z7NXsueHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1088 (0x440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Jul 23 02:09:51 2026 GMT
Not After : Jul 30 02:09:51 2026 GMT
Subject: CN=6a6177ef-e956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:26:28:18:13:24:19:4e:a8:38:0d:b3:09:
96:4b:84:e8:2a:6f:83:af:89:6f:61:e3:ba:a9:4d:
d6:a1:37:8d:9f:0b:31:db:1c:24:20:fa:f9:a3:07:
cc:a0:98:64:c0:a4:d2:7a:4c:56:ab:f0:9f:58:70:
50:41:df:c9:67:d7:49:9f:2d:2e:b6:b5:99:75:af:
87:6a:39:6e:95:62:6e:99:44:d5:40:2c:cb:01:2f:
bb:f3:d6:a1:35:af:26:cb:91:d6:41:c5:17:b0:ff:
98:d4:d0:f1:62:9a:b7:ac:84:2b:ce:c6:f4:f7:39:
20:7c:54:4f:7e:11:56:1e:00:48:f7:5e:e5:1b:05:
31:bc:1f:0e:e3:62:60:d3:3b:c0:36:62:87:13:63:
16:93:d4:b4:ab:db:6a:1c:41:1b:9f:62:32:89:26:
75:d4:91:bb:d7:ee:b7:94:d9:ff:75:19:bb:12:98:
84:79:2e:61:5e:62:89:c2:44:1b:80:0f:99:19:bf:
09:a8:d9:e9:6a:68:26:10:ca:e5:8f:6b:5b:b6:91:
14:04:27:2e:46:44:46:36:32:1e:63:ca:f6:2a:fb:
92:06:84:15:ae:a6:59:1f:ee:18:39:40:60:0d:53:
a2:d1:76:d9:8d:c3:93:b1:de:73:49:43:f8:36:e2:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A6:77:B5:57:65:FD:C8:F1:C2:BB:C0:9E:62:E4:2A:18:AF:04:55
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:b7:a0:18:92:7f:c1:c3:7e:a9:be:df:c1:77:62:e3:ff:bd:
38:31:cd:72:b2:9c:2b:a0:91:85:63:c6:35:e0:a3:c6:7b:3f:
9c:9f:34:2c:00:77:23:75:64:ae:94:a0:91:89:83:a1:f0:7e:
a6:fe:64:f8:c3:0a:8f:83:c2:62:45:d5:89:74:9b:51:b5:3f:
71:6a:fa:05:4e:f6:55:14:e7:9a:44:90:c5:00:64:14:4e:52:
fc:c2:81:a5:12:2d:2c:f9:b9:68:8c:ae:98:c0:d1:eb:66:23:
74:b3:42:ee:c0:90:1f:a8:d3:18:d7:1b:fa:a3:fd:45:ce:a8:
f6:15:83:76:14:0b:91:14:b8:ed:5e:d5:47:3c:c0:1d:ff:09:
c0:31:38:e0:fe:78:5f:a2:c1:0f:7f:0f:22:dc:54:7b:27:43:
2b:a0:e8:31:aa:04:d4:44:18:78:8b:ba:71:b5:e4:7a:94:f5:
80:3c:5e:82:90:61:87:88:d8:52:65:ab:12:3f:23:17:7e:4e:
6e:88:26:49:4a:12:47:71:b4:97:a1:7f:11:14:6c:da:72:9a:
c3:0e:2f:ce:dd:73:e8:3a:5d:3d:76:35:97:7d:4a:c7:8f:2c:
ff:61:be:14:a1:26:94:a9:84:4d:c4:8a:ad:f5:d7:a7:6f:65:
b1:bb:12:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:21 2026 by rpki-client