
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
File: pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft (raw, json)
Hash identifier: DcL+F5r1AUaW1IITjj+d3B4fYl2VzuL6p3eIN+pw6/E=
Subject key identifier: F8:2C:B1:80:03:6A:69:B9:45:55:A3:75:FA:8C:12:96:54:1D:05:DE
Authority key identifier: A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE
Certificate issuer: /CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE
Certificate serial: 0237
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
Manifest number: 022C
Signing time: Wed 13 May 2026 02:44:46 +0000
Manifest this update: Wed 13 May 2026 02:44:45 +0000
Manifest next update: Wed 20 May 2026 02:44:45 +0000
Files and hashes: 1: pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl (hash: fp7pl76nCz42kwSE7BRywFZ/wBSRCb3HjAZLAjl58Xc=)
2: C5CD32AAE5DC11EE867C6F21C4F9AE02.roa (hash: aTa0Ex+ed/6RoAGLJRjFgmZUYz8uz7xIClALbDUey8s=)
3: C6AA9D48E5DC11EE867C6F21C4F9AE02.roa (hash: hO6PbUNEUDYDx8q2G2jC3TNcZMOAduJffHd5z5YsA5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl
rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC9FE, serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE
Validity
Not Before: May 13 02:44:45 2026 GMT
Not After : May 20 02:44:45 2026 GMT
Subject: CN=6a03e59e-a676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:4f:11:e0:dd:2e:57:05:6a:93:07:a6:e5:
9e:11:38:92:2d:24:80:81:3b:df:58:81:c9:da:8c:
7b:8b:d6:7b:40:c8:be:70:67:27:f1:17:56:58:ed:
8d:df:6b:5a:ab:75:fe:75:b2:fb:27:fc:ba:05:3d:
a8:37:ee:c4:84:fa:12:e8:52:95:53:a5:ef:ae:b9:
2d:04:ce:cf:ba:be:6a:39:ad:2d:ff:fe:f0:6a:64:
24:e6:f1:d1:ef:16:ff:1d:19:62:c8:2a:03:49:98:
cf:f1:97:aa:28:e8:6b:62:92:9f:b1:3b:6c:cd:51:
25:98:f1:79:7b:4a:18:bb:2e:0e:9d:6d:f0:ac:5d:
df:f4:2e:b7:47:d5:2c:33:a8:e3:a1:7c:6e:51:0c:
9e:ae:64:bc:df:f9:0a:85:96:d0:33:ca:f7:fe:5a:
82:19:17:d1:9f:e1:3e:89:ee:9b:6e:37:55:b4:15:
fe:49:98:00:53:e7:a5:d7:d2:89:2b:99:48:0e:03:
30:10:1c:0c:db:4a:9a:5b:52:21:7a:d5:8a:aa:96:
05:8e:61:da:e2:5d:32:8e:3e:0d:9e:6b:f4:9e:93:
9f:d7:07:58:be:c8:c9:7d:d8:2b:f5:a6:d8:ea:a5:
61:2f:bc:62:f2:f7:1f:39:75:fe:30:39:8f:8e:13:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2C:B1:80:03:6A:69:B9:45:55:A3:75:FA:8C:12:96:54:1D:05:DE
X509v3 Authority Key Identifier:
keyid:A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:c4:98:48:7c:77:97:6e:53:a8:46:f1:f8:24:f0:ae:4b:1a:
e8:a1:4c:70:02:5b:e9:e0:cf:78:c2:cb:84:8d:c7:5e:86:45:
b1:c0:90:de:e6:9d:a9:70:a0:74:e9:8d:0b:c6:ba:c5:7d:ce:
e9:a5:c7:9e:a1:1d:73:01:c4:a2:08:b1:0f:39:c1:0d:a1:df:
ee:11:86:73:a9:0a:66:71:01:70:35:3e:4b:51:cb:33:dc:b0:
5c:05:f9:9b:be:c0:1e:90:89:0c:d6:59:72:df:d9:87:9f:1d:
46:b5:4d:b4:9b:b3:1a:55:63:49:98:d9:70:e0:3e:f7:fd:2d:
89:10:df:6c:f4:37:4d:c2:ac:14:20:95:55:32:5c:24:20:9f:
c3:29:df:de:a8:3e:cc:fe:ba:71:32:f8:a6:bc:d9:10:93:3b:
fd:fa:b5:8f:66:47:c1:09:62:42:0c:fd:bc:96:33:55:84:9a:
e6:b3:5a:9e:fd:10:59:1f:34:21:64:75:cb:07:03:79:13:d4:
f3:1d:6c:1b:b5:30:c4:9c:da:f9:ba:9c:d3:e7:5f:1b:e5:c6:
a3:26:50:76:48:ec:ba:04:90:7b:72:b6:36:b7:a6:9d:bc:f1:
fa:fd:29:ec:b4:c1:d5:1d:7b:10:2b:00:b5:cc:4e:42:81:f4:
7d:14:dd:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM5RkUxMTAvBgNVBAUTKEE1RDlDNkE2Rjk2NzVCOTFDRTU0RDExNUY4OEM5NDEw
RjE4RjkwRkUwHhcNMjYwNTEzMDI0NDQ1WhcNMjYwNTIwMDI0NDQ1WjAYMRYwFAYD
VQQDEw02YTAzZTU5ZS1hNjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzl9PEeDdLlcFapMHpuWeETiSLSSAgTvfWIHJ2ox7i9Z7QMi+cGcn8RdWWO2N
32taq3X+dbL7J/y6BT2oN+7EhPoS6FKVU6XvrrktBM7Pur5qOa0t//7wamQk5vHR
7xb/HRliyCoDSZjP8ZeqKOhrYpKfsTtszVElmPF5e0oYuy4OnW3wrF3f9C63R9Us
M6jjoXxuUQyermS83/kKhZbQM8r3/lqCGRfRn+E+ie6bbjdVtBX+SZgAU+el19KJ
K5lIDgMwEBwM20qaW1IhetWKqpYFjmHa4l0yjj4Nnmv0npOf1wdYvsjJfdgr9abY
6qVhL7xi8vcfOXX+MDmPjhPt3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPgssYAD
amm5RVWjdfqMEpZUHQXeMB8GA1UdIwQYMBaAFKXZxqb5Z1uRzlTRFfiMlBDxj5D+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzlGRS81M0NCNjkwQ0ZE
RTIxMUVEOUQyRDFGNjhDNEY5QUUwMi9wZG5HcHZsblc1SE9WTkVWLUl5VUVQR1Br
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BkbkdwdmxuVzVIT1ZORVYtSXlVRVBHUGtQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzlGRS81M0NCNjkwQ0ZERTIxMUVEOUQyRDFGNjhDNEY5QUUwMi9wZG5HcHZsblc1
SE9WTkVWLUl5VUVQR1BrUDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMcSYSHx3l25TqEbx+CTwrksa6KFMcAJb6eDPeMLLhI3HXoZFscCQ3uadqXCg
dOmNC8a6xX3O6aXHnqEdcwHEogixDznBDaHf7hGGc6kKZnEBcDU+S1HLM9ywXAX5
m77AHpCJDNZZct/Zh58dRrVNtJuzGlVjSZjZcOA+9/0tiRDfbPQ3TcKsFCCVVTJc
JCCfwynf3qg+zP66cTL4przZEJM7/fq1j2ZHwQliQgz9vJYzVYSa5rNanv0QWR80
IWR1ywcDeRPU8x1sG7UwxJza+bqc0+dfG+XGoyZQdkjsugSQe3K2Nremnbzx+v0p
7LTB1R17ECsAtcxOQoH0fRTdWA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:40:31 2026 by rpki-client