
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json)
Hash identifier: tC90uoWez3ErMUCcNLp+6HOt9DBKg0y/ikXiMhXNxas=
Subject key identifier: 98:53:9D:40:59:F7:C3:9F:A0:8C:50:C2:D6:A9:63:43:05:34:8C:79
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 03CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
Manifest number: 0355
Signing time: Fri 27 Mar 2026 01:10:37 +0000
Manifest this update: Fri 27 Mar 2026 01:10:36 +0000
Manifest next update: Fri 03 Apr 2026 01:10:36 +0000
Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: /DHurCII2Asjh9/6QZnij6bbo33HZd5fnJ90TpC1diM=)
2: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: Haq9c3mobxsJMn/x25E88RNo8gpvrl+CWFq0EQN37pk=)
3: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: e4Erd0QpTluZL5gDeylvUwSF4VgMS2i129w6Q1KcFvI=)
4: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: awn/a9HwQ3B1FUC7V5AjVVUzjagHYyFp9omUalZtJ6g=)
5: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBJI5LdULU2e5orwS4ikcr8BUSBVB/lSyajOi0W52j4=)
6: 20978DD270E411F08F40242AC4F9AE02.roa (hash: kFcoxrKGWpIKg8g23iYW3mbj9XQ00Q2dftXuCp6SY2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:10:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 975 (0x3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Mar 27 01:10:36 2026 GMT
Not After : Apr 3 01:10:36 2026 GMT
Subject: CN=69c5d90d-b8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:df:1c:78:a1:10:7f:34:9b:9b:8f:cb:3e:b2:
9a:2d:eb:b1:6a:e4:22:d4:b0:88:23:c6:20:95:fc:
cc:21:b4:ab:0e:e1:44:4d:31:6b:1a:d5:1e:7e:02:
ee:c3:ce:e1:df:50:5e:d3:f0:38:a6:3c:a2:43:13:
97:9f:99:72:af:27:d1:43:89:f0:e0:28:a8:41:d9:
c1:00:40:8e:d3:c4:d9:0b:c3:50:d7:0a:81:a5:ea:
76:bf:af:63:84:b4:c3:f0:ee:c7:18:3e:4d:9b:b2:
23:ca:27:44:91:94:07:b6:68:5d:9d:ad:ce:2d:74:
6d:79:22:1f:e7:58:c2:20:de:de:15:17:a6:c8:36:
7d:eb:ad:b5:7b:49:58:5f:59:b9:07:b1:ad:31:6f:
51:7d:35:e7:de:92:2f:81:d9:53:e6:a4:eb:ee:1d:
d2:4f:2d:93:9e:43:b4:78:0a:66:f7:b1:16:0f:d6:
5d:98:d3:62:6d:68:cc:47:37:14:e5:44:10:3e:ed:
7c:1a:a0:33:f2:b1:33:1a:99:f9:44:4c:a0:60:3a:
ca:a0:2b:01:85:08:10:d7:fa:41:c7:4a:01:bd:8c:
80:f8:4f:b7:7a:0d:68:b9:fd:3f:d8:4d:37:d7:e1:
53:8c:76:3f:ce:ba:8e:f4:31:08:a6:19:9e:05:21:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:53:9D:40:59:F7:C3:9F:A0:8C:50:C2:D6:A9:63:43:05:34:8C:79
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5b:ae:65:46:96:1f:ea:51:06:e5:bc:5e:74:fe:0f:57:ad:
c9:78:a5:4f:c3:97:6a:14:8c:77:e6:1d:f9:d2:bb:d6:e4:46:
b6:b3:c6:eb:48:0a:e1:91:df:68:8a:8e:fa:00:cb:c4:e9:37:
de:2b:9d:40:c4:ef:c6:88:ef:26:42:bc:56:b6:77:d9:40:76:
b0:ba:54:68:6d:ad:66:95:a2:da:f1:14:7c:52:23:37:10:09:
78:82:bd:53:e0:33:1b:05:d3:e7:ec:51:83:6c:3a:95:73:c3:
76:bb:72:34:9f:79:b3:a9:37:16:25:5d:77:5c:fa:61:71:4f:
48:c4:72:a1:06:40:09:76:a5:af:51:59:dc:ec:c0:13:c6:27:
8b:65:b1:a5:e9:e5:9c:5f:be:32:bc:aa:c5:46:60:44:e2:5c:
65:88:da:17:36:34:7c:c7:2f:f5:fd:48:6c:26:e6:85:45:a9:
03:0a:60:05:78:ac:32:7a:a7:ae:50:83:a0:ff:83:4a:21:ca:
a2:84:3c:84:af:fb:48:ea:f6:46:0b:8c:e1:c3:17:72:f4:80:
cc:5d:59:fc:f4:03:54:d0:a4:57:1a:e4:11:a2:8b:87:16:1a:
d6:17:e0:2c:b4:b2:de:9d:da:db:56:21:14:a7:db:3f:36:74:
c1:10:ed:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB
MEFDRDQ0N0YwHhcNMjYwMzI3MDExMDM2WhcNMjYwNDAzMDExMDM2WjAYMRYwFAYD
VQQDEw02OWM1ZDkwZC1iOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkd8ceKEQfzSbm4/LPrKaLeuxauQi1LCII8YglfzMIbSrDuFETTFrGtUefgLu
w87h31Be0/A4pjyiQxOXn5lyryfRQ4nw4CioQdnBAECO08TZC8NQ1wqBpep2v69j
hLTD8O7HGD5Nm7IjyidEkZQHtmhdna3OLXRteSIf51jCIN7eFRemyDZ96621e0lY
X1m5B7GtMW9RfTXn3pIvgdlT5qTr7h3STy2TnkO0eApm97EWD9ZdmNNibWjMRzcU
5UQQPu18GqAz8rEzGpn5REygYDrKoCsBhQgQ1/pBx0oBvYyA+E+3eg1ouf0/2E03
1+FTjHY/zrqO9DEIphmeBSE6GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJhTnUBZ
98OfoIxQwtapY0MFNIx5MB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG
NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S
SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT
clM0c0VVeUN4bFdnck5SSDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC1uuZUaWH+pRBuW8XnT+D1etyXilT8OXahSMd+Yd+dK71uRGtrPG60gK4ZHf
aIqO+gDLxOk33iudQMTvxojvJkK8VrZ32UB2sLpUaG2tZpWi2vEUfFIjNxAJeIK9
U+AzGwXT5+xRg2w6lXPDdrtyNJ95s6k3FiVdd1z6YXFPSMRyoQZACXalr1FZ3OzA
E8Yni2WxpenlnF++MryqxUZgROJcZYjaFzY0fMcv9f1IbCbmhUWpAwpgBXisMnqn
rlCDoP+DSiHKooQ8hK/7SOr2RguM4cMXcvSAzF1Z/PQDVNCkVxrkEaKLhxYa1hfg
LLSy3p3a21YhFKfbPzZ0wRDtFA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:33 2026 by rpki-client