
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
File: PyDCnh1-UV3z49hapE51H4Fycxo.mft (raw, json)
Hash identifier: +gsTYmN88oRvB78uDac6/v0qVYnPdmeplW8AEO/yiDc=
Subject key identifier: 70:33:5E:B2:5E:04:E7:16:08:75:38:12:2D:F7:1E:FA:70:37:3C:CD
Authority key identifier: 3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A
Certificate issuer: /CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A
Certificate serial: 0239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
Manifest number: 0231
Signing time: Wed 07 Oct 2026 03:08:05 +0000
Manifest this update: Wed 07 Oct 2026 03:08:05 +0000
Manifest next update: Wed 14 Oct 2026 03:08:05 +0000
Files and hashes: 1: PyDCnh1-UV3z49hapE51H4Fycxo.crl (hash: K+wkVo4lNaJUQPeje+5/8Ag4BFzqJd+pNbXYALN7Qdk=)
2: 503E43126E5E11EEB39D9E48C4F9AE02.roa (hash: 0Pp/jipwHz+dDFZW3SdujQfWz5D9Ej7JkD74IDbQ7uI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl
rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91210E0, serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A
Validity
Not Before: Oct 7 03:08:05 2026 GMT
Not After : Oct 14 03:08:05 2026 GMT
Subject: CN=6ac5b795-8ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:ad:67:d5:a7:9c:ee:a2:b0:f6:d5:a9:2e:
65:e2:09:d6:22:cb:7c:c7:a3:61:84:77:22:13:df:
54:fd:2e:29:16:96:e5:3a:6d:dd:16:bd:18:31:12:
16:7f:10:bc:3c:f9:0a:59:ee:81:7d:b6:d8:f1:ed:
d4:0c:fa:2a:47:51:52:c7:a6:4f:d4:81:cc:90:35:
f6:ec:6e:f1:2a:d8:5f:d6:3d:04:e3:cd:47:7e:0f:
3a:8e:22:0a:7e:7c:4e:d3:9c:7e:6c:fb:ee:08:27:
c7:87:a3:26:da:75:c2:79:ac:d6:36:96:42:dc:f1:
35:0a:a4:1a:7c:14:92:43:79:0c:a3:34:68:54:d5:
0f:52:11:37:c0:ff:c4:8e:5a:fb:83:d8:28:87:4f:
3a:42:9a:4a:23:16:4d:da:09:46:3f:27:a7:45:bd:
5c:9c:b7:e6:8a:b4:89:c9:1e:28:6d:87:f3:ec:db:
3f:e7:3b:5a:e3:fd:00:75:7e:a2:d6:7a:94:27:25:
7a:bb:33:dd:db:43:1e:bd:a9:7b:15:a9:f0:2e:b4:
ff:f4:6e:e8:43:10:7d:cd:e8:12:89:ce:d5:c0:37:
e0:98:6f:26:c8:4d:ab:ff:a9:99:2a:fa:dd:b1:b1:
a9:25:77:d1:9d:e4:82:2c:d2:2e:e3:55:30:22:05:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:33:5E:B2:5E:04:E7:16:08:75:38:12:2D:F7:1E:FA:70:37:3C:CD
X509v3 Authority Key Identifier:
keyid:3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c8:32:41:01:4b:8c:26:03:4b:be:6c:e6:8d:80:64:bf:db:
ff:a4:9a:1a:b6:a8:9d:2b:64:dc:7a:2b:d0:e0:6d:4e:67:3d:
e1:fc:37:bd:c0:55:bb:b4:a3:86:d7:fe:2d:af:95:d8:11:ff:
4c:9e:50:aa:63:ce:7f:94:92:9b:8f:23:20:b9:03:b2:1b:85:
49:b3:88:b3:3f:41:1c:f0:02:69:c1:ba:2a:57:c6:9b:a2:cc:
f1:64:cc:c1:24:4e:00:8b:d8:78:53:71:43:24:7f:98:00:ee:
ba:35:44:93:0a:1a:e8:69:b6:bc:86:34:0f:b0:55:20:f7:99:
51:de:01:4b:59:10:3c:79:7f:79:bc:53:09:4d:90:3f:15:66:
82:7b:90:20:12:eb:a4:1c:af:3f:a1:1a:ef:7b:32:28:00:e9:
e3:ce:0c:44:d5:80:98:5e:21:1b:bf:fb:3f:8d:ac:5e:ef:cd:
f6:da:a6:40:3e:f2:fe:56:b3:11:b2:e3:ea:39:b3:98:84:fb:
88:35:90:d3:e3:73:52:d9:0b:6f:41:59:18:37:73:08:d6:b8:
c4:a1:8d:3e:d4:07:6e:3c:f5:81:17:8d:cb:2a:07:0f:da:70:
f4:8b:ad:3e:8c:29:cf:b9:38:e4:08:09:24:bb:23:9b:d1:8b:
a0:0f:51:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjEwRTAxMTAvBgNVBAUTKDNGMjBDMjlFMUQ3RTUxNURGM0UzRDg1QUE0NEU3NTFG
ODE3MjczMUEwHhcNMjYxMDA3MDMwODA1WhcNMjYxMDE0MDMwODA1WjAYMRYwFAYD
VQQDEw02YWM1Yjc5NS04ZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy+atZ9WnnO6isPbVqS5l4gnWIst8x6NhhHciE99U/S4pFpblOm3dFr0YMRIW
fxC8PPkKWe6BfbbY8e3UDPoqR1FSx6ZP1IHMkDX27G7xKthf1j0E481Hfg86jiIK
fnxO05x+bPvuCCfHh6Mm2nXCeazWNpZC3PE1CqQafBSSQ3kMozRoVNUPUhE3wP/E
jlr7g9goh086QppKIxZN2glGPyenRb1cnLfmirSJyR4obYfz7Ns/5zta4/0AdX6i
1nqUJyV6uzPd20Meval7FanwLrT/9G7oQxB9zegSic7VwDfgmG8myE2r/6mZKvrd
sbGpJXfRneSCLNIu41UwIgVRewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAzXrJe
BOcWCHU4Ei33HvpwNzzNMB8GA1UdIwQYMBaAFD8gwp4dflFd8+PYWqROdR+BcnMa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTBFMC8zRUIxMEM5QTZE
OTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVWM3o0OWhhcEU1MUg0Rnlj
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B5RENuaDEtVVYzejQ5aGFwRTUxSDRGeWN4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTBFMC8zRUIxMEM5QTZEOTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVW
M3o0OWhhcEU1MUg0RnljeG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnMgyQQFLjCYDS75s5o2AZL/b/6SaGraonStk3Hor0OBtTmc94fw3vcBVu7Sj
htf+La+V2BH/TJ5QqmPOf5SSm48jILkDshuFSbOIsz9BHPACacG6KlfGm6LM8WTM
wSROAIvYeFNxQyR/mADuujVEkwoa6Gm2vIY0D7BVIPeZUd4BS1kQPHl/ebxTCU2Q
PxVmgnuQIBLrpByvP6Ea73syKADp484MRNWAmF4hG7/7P42sXu/N9tqmQD7y/laz
EbLj6jmzmIT7iDWQ0+NzUtkLb0FZGDdzCNa4xKGNPtQHbjz1gReNyyoHD9pw9Iut
Powpz7k45AgJJLsjm9GLoA9R1g==
-----END CERTIFICATE-----
Generated at Wed Oct 7 19:23:24 2026 by rpki-client