
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
File: pBhnIpZRYlTNTMrUSSUeGdG26V0.mft (raw, json)
Hash identifier: N7fEiKeQrCcCcHhF+hsMIQKGRQaMyQIOSM0zmdhyXo0=
Subject key identifier: A4:21:A9:A6:EB:62:40:6D:C2:3A:BB:F9:26:AD:08:2D:9D:0C:A4:11
Authority key identifier: A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D
Certificate issuer: /CN=A913FE3D/serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D
Certificate serial: 0623
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
Manifest number: 061C
Signing time: Wed 20 May 2026 22:52:42 +0000
Manifest this update: Wed 20 May 2026 22:52:42 +0000
Manifest next update: Wed 27 May 2026 22:52:42 +0000
Files and hashes: 1: pBhnIpZRYlTNTMrUSSUeGdG26V0.crl (hash: wEfByRwLGUvcRimCX0+vrzPDlchl8e2gsZ1bKdiOTt4=)
2: 679A6FA4E53A11EB8197AD70C4F9AE02.roa (hash: XbMe+8/7/MISes36gY29YrhvwO4Rdf5bho+pNI/z93c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl
rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:52:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1571 (0x623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FE3D, serialNumber=A418672296516254CD4CCAD449251E19D1B6E95D
Validity
Not Before: May 20 22:52:42 2026 GMT
Not After : May 27 22:52:42 2026 GMT
Subject: CN=6a0e3b3a-82bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:69:fd:44:fb:b2:a5:f3:18:77:b3:a4:d2:3f:
b4:29:cc:e9:a6:9c:05:c3:26:c5:76:56:23:cd:3b:
5a:4d:dc:58:fa:da:a1:c0:63:9f:07:bf:99:29:bc:
7b:2b:70:57:71:93:98:7e:4a:0c:f9:20:16:1d:ce:
63:ff:f6:0f:42:c5:a7:5d:ed:d0:67:cf:b2:74:fc:
d9:93:5f:71:2b:48:7d:7b:1c:9b:db:98:12:d2:30:
13:36:2b:75:99:15:18:81:4b:f8:48:bb:09:cb:f7:
8c:34:c1:41:1d:ef:67:ee:9c:06:b0:3d:07:77:d5:
a4:c6:4c:cf:52:03:46:86:3c:1b:34:e7:02:4c:7b:
68:c7:dd:9f:c0:be:06:1a:91:42:0a:fe:20:f2:2c:
91:56:43:d6:99:d7:43:c0:95:1d:5f:b4:3c:11:3a:
da:2a:12:48:08:ce:ec:c9:89:0a:14:1c:33:6b:f2:
8b:23:e9:66:cc:33:00:b4:3a:2f:11:b7:dc:f2:87:
ed:10:6b:01:89:fc:2f:c5:ca:8a:e4:82:66:70:f0:
2c:8a:82:23:87:17:1e:7a:cc:04:a7:fe:06:03:77:
44:07:0b:1b:c4:81:14:11:c1:bf:5d:06:38:f7:17:
1e:5b:7a:47:f6:69:61:8f:45:26:80:73:d0:41:3d:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:21:A9:A6:EB:62:40:6D:C2:3A:BB:F9:26:AD:08:2D:9D:0C:A4:11
X509v3 Authority Key Identifier:
keyid:A4:18:67:22:96:51:62:54:CD:4C:CA:D4:49:25:1E:19:D1:B6:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBhnIpZRYlTNTMrUSSUeGdG26V0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE3D/81E654BCE53611EBB980326AC4F9AE02/pBhnIpZRYlTNTMrUSSUeGdG26V0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ea:52:a7:52:52:72:39:f9:c9:d8:bd:3b:49:39:2f:dd:a5:
25:21:3f:a7:f9:40:4d:37:82:ef:a1:2a:7e:2e:dc:cc:1a:ba:
a4:48:8a:6f:7b:b1:ae:a2:8f:08:82:72:5b:dc:54:e6:06:bb:
f6:62:70:00:c1:aa:c6:7f:1c:83:b8:d5:a3:38:ef:bb:33:4b:
dd:27:bd:ac:c1:ae:56:0b:77:9b:0f:44:07:5c:d1:f1:c6:74:
14:c8:7f:95:fc:58:de:2b:79:1b:8c:e4:37:45:dd:a6:5d:09:
b6:04:a2:e5:53:49:8d:bd:5b:1f:2d:52:83:29:4f:db:7c:aa:
dd:1b:af:a1:70:b8:3b:98:da:13:82:23:2e:01:0f:05:4a:3d:
85:50:24:40:84:fb:94:b6:7a:33:d9:f4:64:ec:73:0d:90:0f:
b7:12:82:06:20:8e:7c:7d:e5:3a:44:93:f1:2d:3d:04:3f:39:
38:10:44:69:b1:8c:8c:11:8d:2e:0a:75:83:08:a2:4f:9c:32:
fa:d8:8e:a5:ef:a3:25:3d:aa:e6:a7:12:dd:23:9a:f8:bc:bc:
f3:50:fe:5a:15:ef:cd:71:92:ab:4c:1f:75:0b:0e:28:7d:28:
dc:ad:e7:98:b9:8e:0b:c5:b7:36:e3:61:b9:7a:3e:cb:4a:e3:
02:ef:df:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:22 2026 by rpki-client