
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
File: pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft (raw, json)
Hash identifier: yI2h87jASixujE+osP/TvOaT5SDVcYuGZ7SosodvRpw=
Subject key identifier: 84:72:FB:C7:28:C0:5E:26:9B:30:E2:B5:CE:CF:BD:5F:AA:F3:EF:70
Authority key identifier: A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE
Certificate issuer: /CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE
Certificate serial: 025A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
Manifest number: 024F
Signing time: Thu 23 Jul 2026 03:30:51 +0000
Manifest this update: Thu 23 Jul 2026 03:30:50 +0000
Manifest next update: Thu 30 Jul 2026 03:30:50 +0000
Files and hashes: 1: pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl (hash: ZFsJDo1Hrjjr95VZQNbvwqqlbQ+j9a9TVe43/tYbZpw=)
2: C6AA9D48E5DC11EE867C6F21C4F9AE02.roa (hash: hO6PbUNEUDYDx8q2G2jC3TNcZMOAduJffHd5z5YsA5o=)
3: C5CD32AAE5DC11EE867C6F21C4F9AE02.roa (hash: aTa0Ex+ed/6RoAGLJRjFgmZUYz8uz7xIClALbDUey8s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl
rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC9FE, serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE
Validity
Not Before: Jul 23 03:30:50 2026 GMT
Not After : Jul 30 03:30:50 2026 GMT
Subject: CN=6a618aeb-3e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:81:c4:32:3d:d4:bc:75:9a:30:5d:9b:e3:4f:
5f:fa:4a:4d:00:b4:5b:53:cf:7d:3b:b0:88:1a:a6:
bb:b4:1f:7d:83:23:41:9d:d5:a8:23:36:91:99:36:
05:51:86:f4:02:a0:c5:58:51:01:20:65:74:a7:93:
b7:27:38:8b:78:c9:27:63:6f:2c:ce:76:3e:92:94:
41:40:10:9f:09:fc:e9:d0:18:f1:b5:5e:3f:00:3e:
6c:55:35:13:7a:d5:fb:69:e8:57:7d:30:b6:12:25:
19:8c:95:68:f6:ea:0d:59:7e:0d:5e:83:34:63:26:
33:0b:a8:66:57:50:0f:cb:6e:32:10:67:23:4b:61:
65:73:44:67:d5:bc:8b:f2:d7:53:41:22:c8:e0:4d:
92:e1:59:e1:a4:34:6d:e1:24:51:1e:e9:41:ad:d8:
db:98:ca:e8:5b:a3:1d:a8:ab:ef:55:19:d6:63:6d:
c1:b0:d8:40:5e:40:0e:ac:99:37:cb:85:2e:52:f0:
1b:aa:31:8b:58:e2:16:77:bb:da:86:03:53:42:30:
56:c8:b4:29:fe:ba:e4:b0:b8:46:63:9d:2d:a9:31:
f3:26:71:fd:24:2f:82:13:c5:e2:ec:72:1e:12:86:
71:5b:d3:aa:e3:02:a4:7b:0f:cb:a8:dc:a6:8e:4e:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:72:FB:C7:28:C0:5E:26:9B:30:E2:B5:CE:CF:BD:5F:AA:F3:EF:70
X509v3 Authority Key Identifier:
keyid:A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:65:7c:4a:f3:5b:26:3d:80:e2:ac:b3:8c:e1:f2:e8:6f:8f:
47:27:c3:a2:13:f9:f9:b7:5b:8b:3f:91:ca:92:8c:b0:55:9f:
c4:c7:e3:6b:c8:a1:20:5a:4d:dc:7b:f4:97:c1:17:86:81:8a:
fd:e9:6d:e8:10:47:b5:26:39:5c:02:56:1e:18:c8:f0:29:79:
26:6f:21:2e:c0:99:13:3b:21:d4:b3:fe:b7:2a:7b:dc:ea:6a:
53:0f:67:e4:4d:06:e8:e9:33:ab:2b:e9:17:af:9f:8c:20:43:
6e:0e:c3:98:ee:43:89:03:b3:c0:b8:bb:e1:29:5f:9e:bb:1a:
1e:e1:9f:3c:ef:e3:09:8f:11:b1:b5:5d:e4:f3:db:a9:ca:11:
a0:0a:d0:ef:43:7d:c2:67:60:60:72:8f:4c:ea:5c:d8:82:b1:
79:2a:65:de:67:f0:0c:91:fd:8f:71:8c:1d:d4:ea:69:9d:95:
5f:b7:2d:58:52:2d:61:9c:5b:05:87:97:fa:0a:03:8a:c6:ec:
98:3d:c0:a6:5b:ae:34:4f:10:3e:cd:ce:30:7b:94:3f:b7:38:
f6:85:39:0e:96:2f:d4:de:ac:95:5e:23:25:ef:0c:16:98:4e:
6f:f1:a9:6d:7e:e7:41:46:5e:e1:5b:f7:23:91:07:e9:06:d2:
67:bd:05:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:15:57 2026 by rpki-client