
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
File: PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json)
Hash identifier: AmvSpL78oAnvEAi6CzZHPtZQj3OLGus1MCtl314Dpdk=
Subject key identifier: 22:73:71:21:07:5D:FA:4A:8A:2B:05:93:37:03:20:08:A5:AD:D1:02
Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC
Certificate issuer: /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
Certificate serial: 0334
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
Manifest number: 0334
Signing time: Mon 01 Jun 2026 01:46:32 +0000
Manifest this update: Mon 01 Jun 2026 01:46:32 +0000
Manifest next update: Mon 08 Jun 2026 01:46:32 +0000
Files and hashes: 1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: 0+p0X++eICBzWnRZV0KlhQAm8PpF2dmyeJgMz/Epavo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl
rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 01:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
Validity
Not Before: Jun 1 01:46:32 2026 GMT
Not After : Jun 8 01:46:32 2026 GMT
Subject: CN=6a1ce478-d07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:6c:a7:f3:eb:b7:04:b6:fe:06:d2:df:12:
af:b0:2e:15:7c:df:d9:c4:04:af:71:34:c5:ed:80:
92:81:fd:b4:e2:97:71:2a:e7:8c:8c:f4:9b:3c:2a:
97:2c:7c:21:4b:09:04:4d:4e:5e:93:6b:43:8c:26:
e6:0e:bd:ab:28:9d:64:e2:a5:a8:6b:45:10:83:7d:
78:8a:2c:1f:dd:b1:c7:50:dc:9a:ea:da:70:47:28:
4f:82:1e:24:d9:25:f7:fb:fc:bf:2e:c0:19:f9:b5:
82:bf:f5:a3:59:4e:bb:f1:ef:df:7b:48:77:56:f1:
ec:13:a3:48:fd:55:86:b8:3a:4e:39:85:f8:a2:b5:
cd:2b:12:4a:71:3a:1a:c4:04:64:54:bd:21:51:cb:
51:e2:26:0a:d3:70:00:fe:40:00:1f:e1:31:83:da:
5e:2c:27:fd:14:14:0e:f1:5d:9e:42:96:9e:70:49:
5d:3c:95:65:8f:2f:a7:25:39:6f:f8:8d:ff:4b:ab:
65:3d:9d:d9:8b:1a:35:9a:37:7f:75:9c:43:fe:2c:
10:94:af:14:b4:08:86:db:7f:ff:69:8c:ae:d2:18:
f0:16:b8:1d:09:56:26:0d:a4:50:d9:ae:c1:e8:21:
18:9f:8c:79:28:25:ce:81:94:f8:9f:3b:71:65:83:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:73:71:21:07:5D:FA:4A:8A:2B:05:93:37:03:20:08:A5:AD:D1:02
X509v3 Authority Key Identifier:
keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:b3:b5:32:30:14:d0:14:83:e2:87:57:23:bd:cd:2f:7c:af:
5e:4c:6b:3d:4a:f8:ed:72:80:b2:a8:5d:44:ba:83:28:8e:7b:
1b:23:5c:93:7f:f2:04:47:cd:4e:71:37:ba:10:b1:db:47:87:
72:3c:fe:f3:1c:92:a7:8f:9c:24:59:15:8d:25:11:ef:da:37:
9f:eb:59:8b:83:b3:d1:f3:ed:16:3a:7b:83:53:3d:32:55:47:
21:d5:43:2e:69:99:cd:f0:6d:a2:80:c9:fe:de:75:29:16:73:
31:d5:45:9e:a9:64:0c:99:b7:81:82:8c:3b:ad:30:13:58:22:
17:76:af:6a:d4:5a:54:ca:5d:28:52:a5:1d:1a:84:08:70:d8:
e2:ac:a0:53:23:ba:c8:be:d9:ca:5a:08:cd:ad:3a:ff:78:d2:
4e:5a:64:43:fe:24:4b:96:5a:c8:62:b6:f4:7f:00:b8:65:b8:
ff:41:b4:8a:47:21:34:1d:dc:9f:5f:ab:30:b1:26:f6:77:32:
01:8f:57:59:9b:6f:f1:b9:eb:f8:dd:66:d8:f5:12:6f:47:f9:
ad:2d:63:4d:b6:89:66:5d:1d:69:7e:e4:e1:c2:39:61:c6:f7:
b3:d6:07:50:e1:a8:0c:e6:91:5d:c3:59:1e:09:47:73:6d:50:
bd:fc:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:10 2026 by rpki-client