
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
File: pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft (raw, json)
Hash identifier: 2lPxSWFUHP+i9MmAyvz75bDVWKYixpyB9iMvoBZ0lpY=
Subject key identifier: 39:A3:3A:FA:1D:CB:BF:7B:58:43:EC:58:EF:B8:11:16:AF:1D:9B:9C
Authority key identifier: A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE
Certificate issuer: /CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE
Certificate serial: 027B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
Manifest number: 0270
Signing time: Fri 25 Sep 2026 02:04:18 +0000
Manifest this update: Fri 25 Sep 2026 02:04:17 +0000
Manifest next update: Fri 02 Oct 2026 02:04:17 +0000
Files and hashes: 1: pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl (hash: ChLi8MM/JOkPXxGbt1TZs+uuGTfxMvmWgwzkF5X2vK4=)
2: C5CD32AAE5DC11EE867C6F21C4F9AE02.roa (hash: aTa0Ex+ed/6RoAGLJRjFgmZUYz8uz7xIClALbDUey8s=)
3: C6AA9D48E5DC11EE867C6F21C4F9AE02.roa (hash: hO6PbUNEUDYDx8q2G2jC3TNcZMOAduJffHd5z5YsA5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl
rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635 (0x27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC9FE, serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE
Validity
Not Before: Sep 25 02:04:17 2026 GMT
Not After : Oct 2 02:04:17 2026 GMT
Subject: CN=6ab5d6a2-b7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:92:31:98:c6:d5:98:18:b5:f0:da:58:9e:
f5:fa:37:1c:a6:f7:78:e8:66:02:46:f3:48:87:32:
ad:52:27:44:43:5f:2b:72:c1:bd:06:3a:b1:ec:d8:
9c:15:e4:1d:6c:23:58:60:34:dd:39:17:ea:6a:8f:
66:bc:43:8f:75:eb:5c:4f:5d:de:c1:4c:d9:2c:90:
10:cf:33:fd:1c:f8:68:a5:b3:4d:91:04:05:ac:e4:
08:87:fa:84:a3:59:17:64:29:a1:0d:5c:fd:3d:c4:
72:16:e3:5e:86:be:15:16:17:5f:3b:81:51:05:8d:
3a:ca:cf:39:17:44:cc:9e:45:42:14:56:a6:e9:5e:
e6:27:ec:d7:be:27:66:23:ea:85:0f:d1:de:fe:88:
ac:92:b0:a1:a5:38:29:ac:11:43:3c:87:9c:32:dc:
43:87:60:78:cf:29:85:a3:fe:39:75:fa:74:b9:6b:
dd:63:49:45:5f:35:ed:54:fa:59:d9:ba:6c:9c:96:
ab:84:c5:99:6a:1a:db:b8:b9:90:8f:c1:6c:44:bd:
ce:e1:1b:83:c4:4c:1e:ec:4e:b5:6c:fe:1c:28:ce:
27:51:18:6b:e8:c0:c6:6f:95:f8:9b:8a:13:c8:2b:
04:93:05:cd:91:1f:5c:a3:21:56:9a:66:cc:00:28:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A3:3A:FA:1D:CB:BF:7B:58:43:EC:58:EF:B8:11:16:AF:1D:9B:9C
X509v3 Authority Key Identifier:
keyid:A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:60:f5:22:ca:a7:d5:5e:ff:02:53:8f:ba:98:ca:e8:1c:f9:
e9:a9:54:d8:f2:d1:60:37:29:d9:1c:c9:c2:44:9a:d6:3b:fa:
15:8e:6d:37:74:a7:0d:62:6b:e1:5b:f0:1f:a7:47:54:3d:e9:
4a:98:83:43:1d:48:f7:71:f8:d3:ef:98:83:b9:51:2f:63:24:
2a:70:e9:04:35:18:34:0a:75:e6:70:d9:a4:4f:18:5c:20:bb:
11:39:95:b0:b7:83:5e:f2:d8:e9:10:a6:28:9f:34:31:c4:e3:
4e:07:78:d1:05:90:2a:c4:16:be:99:fa:db:f6:5b:ea:bb:6e:
09:65:e0:8c:6c:62:9c:e7:b3:66:3f:cb:a9:f9:18:ff:da:be:
56:b5:9a:ea:29:8f:aa:75:ed:d3:e9:08:50:38:ec:89:c4:bf:
3b:1a:34:eb:28:b1:e5:e3:ad:4c:6e:c4:be:76:0b:cf:97:77:
19:72:d9:d2:e5:2e:6d:f8:52:67:63:f6:47:a1:07:23:5b:a8:
b4:1f:84:d4:f6:24:de:60:05:b3:ac:b2:8a:7d:49:c9:fd:17:
58:a7:ad:22:24:58:44:d3:a4:b6:c0:eb:66:be:8d:8f:a2:0e:
4c:cf:44:a6:db:1b:7e:b7:b0:6f:9a:c0:63:c2:b4:94:b6:33:
a3:71:17:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:24:19 2026 by rpki-client