
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
File: pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json)
Hash identifier: MG7Vrpr1q1G0TFt4JhCb5t0Vjt47gxLXKFOaem8CKIg=
Subject key identifier: 5A:DE:C2:F3:98:A7:08:25:3C:0D:71:AD:11:F7:79:35:02:C7:C7:50
Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1
Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1
Certificate serial: 0279
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
Manifest number: 0272
Signing time: Tue 21 Jul 2026 03:11:03 +0000
Manifest this update: Tue 21 Jul 2026 03:11:02 +0000
Manifest next update: Tue 28 Jul 2026 03:11:02 +0000
Files and hashes: 1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: pjsckBouDDYPMHmjtGLlbqv9zFkwyuHMLmOQXHXTRcs=)
2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: oPoTgdYw+Xp4zsCLRgOst4RRIJvgrTE9ExRg+Am+0NI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl
rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1
Validity
Not Before: Jul 21 03:11:02 2026 GMT
Not After : Jul 28 03:11:02 2026 GMT
Subject: CN=6a5ee347-6bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:86:7a:bf:61:b0:fe:50:7d:15:55:3f:50:20:
b7:66:bb:34:12:ee:22:9c:bf:40:3d:8b:76:b4:2f:
d8:d4:e0:d7:dc:07:93:23:3f:9a:b0:7d:33:08:a0:
bd:2b:fc:96:7e:f9:d5:7f:0f:d4:d3:c6:2b:66:36:
a6:2a:25:4b:b4:3a:ff:d8:cd:4a:4d:d4:c9:e2:c9:
91:5c:6c:69:50:b3:ef:d0:53:07:94:50:e7:ca:67:
c4:1d:09:8a:7e:1d:c5:ee:f3:70:00:77:2c:c7:c6:
ff:5d:b9:9f:c3:81:e6:67:ec:83:5e:35:02:b2:88:
b7:a5:0b:03:ce:87:6f:ab:71:51:2d:e2:21:95:59:
00:97:9c:c0:62:75:8b:ae:cc:34:a1:ac:e6:a6:db:
62:d7:69:3f:48:6b:1c:f0:49:9c:fb:f6:8a:e8:e0:
82:ad:7d:21:87:f7:fb:31:55:21:4c:5f:34:b3:9f:
12:81:ac:3d:e6:71:1d:a9:55:7e:8a:11:25:76:ea:
f4:71:19:00:d3:1e:da:c4:c6:9a:ef:7c:13:7e:69:
a8:e0:c0:2b:89:0a:9c:6c:4e:04:32:63:d2:8c:a3:
8f:8f:0e:64:ab:e9:3c:79:9c:98:52:9f:55:9b:1f:
12:05:99:0a:f3:16:5d:db:10:11:77:8c:fd:db:29:
20:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DE:C2:F3:98:A7:08:25:3C:0D:71:AD:11:F7:79:35:02:C7:C7:50
X509v3 Authority Key Identifier:
keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:04:5b:d4:15:94:51:3f:8e:81:44:e4:bf:f8:0f:0e:be:32:
e6:52:a1:23:13:80:08:e2:f0:64:53:d4:35:e4:56:70:be:94:
ca:74:b3:3f:73:7d:5a:8e:5b:8e:82:95:0c:fe:c1:6e:18:15:
87:c4:87:77:e8:a2:1c:b9:15:26:4f:14:69:1d:1c:8b:33:9d:
96:ef:d4:6d:49:71:e7:0e:9b:d6:3c:2e:cb:14:6c:cd:44:58:
72:3c:0b:3e:65:d6:d9:f5:95:95:d8:91:05:97:ab:60:c5:76:
59:ae:2f:52:0f:aa:e7:7e:b8:ef:98:6f:17:50:28:d1:ee:0e:
8c:a2:ee:dc:7a:4e:b7:aa:b3:57:4d:ef:6a:dd:70:55:16:a0:
b4:2c:3e:bd:68:13:62:e2:9a:3d:83:a0:76:28:bb:65:fa:4f:
a5:63:3a:93:7b:30:15:ac:be:35:31:42:cd:43:8b:10:69:77:
58:85:50:25:4c:34:51:9c:80:93:0e:91:46:a1:90:78:e7:2b:
3e:15:1e:e6:7f:55:d9:86:ae:53:ca:30:46:1a:8c:f5:68:34:
e1:ad:80:a0:a8:2a:bf:00:a2:76:95:d4:03:ff:5b:0d:b0:a9:
bd:60:d9:39:ab:b5:17:2e:10:01:73:88:08:67:8b:e4:e6:00:
e6:2c:a0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:52:27 2026 by rpki-client