
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft
File: pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft (raw, json)
Hash identifier: 0tEpKx2EpnU3GBMzKCQI4OpO7Q7io26dQ3217o7wee4=
Subject key identifier: CC:A3:F4:C9:D3:01:85:8E:7F:AD:B9:6C:69:03:83:F7:DF:C9:84:13
Authority key identifier: A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB
Certificate issuer: /CN=A915D6D4/serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB
Certificate serial: 3528
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft
Manifest number: 3CFA
Signing time: Sat 04 Apr 2026 14:35:39 +0000
Manifest this update: Sat 04 Apr 2026 14:35:38 +0000
Manifest next update: Sat 11 Apr 2026 14:35:38 +0000
Files and hashes: 1: pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl (hash: BA6O3jzKpd+oUlWzWMsupqYuFm4sfuWhEhOGXFmxIZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl
rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13608 (0x3528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D6D4, serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB
Validity
Not Before: Apr 4 14:35:38 2026 GMT
Not After : Apr 11 14:35:38 2026 GMT
Subject: CN=69d121ba-5f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:e7:f9:d6:7f:54:19:fa:79:35:7a:15:ac:
11:c7:34:42:44:92:9c:ff:f2:ad:42:0b:1f:39:c0:
2d:90:5b:92:bd:fb:d7:c1:b4:8f:0e:a5:74:d4:ac:
0f:96:48:2c:69:a7:40:8a:ef:f6:de:cc:8f:6d:26:
98:ef:ec:d7:69:3e:db:30:74:6a:f4:e1:1b:9f:ef:
ee:6f:e8:07:1e:8c:67:17:19:bf:22:65:05:d6:b1:
9a:27:24:20:7d:29:e6:9b:9b:63:94:c8:af:2a:7e:
6e:d3:03:e4:0a:5b:be:75:87:12:a4:1d:8f:4a:1a:
a6:47:b3:3f:f5:12:a5:e0:bf:5d:03:c0:c7:84:50:
f6:6e:21:f9:64:ad:8e:6d:4b:78:42:45:23:ff:e7:
38:34:35:08:15:67:46:21:58:23:6a:5b:02:45:e9:
84:b0:3f:90:cf:37:97:a0:73:59:c4:f5:fc:4a:cf:
6d:6b:e5:eb:02:ca:f2:a5:6a:89:bc:d8:42:11:84:
36:6c:c7:23:6e:eb:65:04:20:b4:83:51:5e:2b:e6:
b6:75:a6:cc:c6:2c:96:25:e8:ef:cb:01:cf:bc:c7:
e8:41:8c:20:66:8b:87:79:01:f8:d4:7c:9f:39:7c:
c6:11:d9:e0:85:b9:c3:bd:07:87:62:b6:b7:98:e0:
30:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A3:F4:C9:D3:01:85:8E:7F:AD:B9:6C:69:03:83:F7:DF:C9:84:13
X509v3 Authority Key Identifier:
keyid:A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c6:9c:f0:c2:82:00:4c:7f:bf:22:ab:2a:29:00:88:0c:d5:
2a:f0:a0:28:e3:b4:16:20:16:a8:17:10:a8:de:9a:6c:ef:23:
9e:f9:3c:b1:f3:61:2d:7b:06:88:8b:3a:9b:5f:b5:27:86:3a:
09:e6:2c:49:4d:f4:04:61:70:77:66:8a:a9:ac:c2:7c:7e:0e:
31:36:d8:64:93:22:35:54:08:0d:88:28:d9:b4:2f:db:a3:11:
d0:b9:10:b5:4e:a8:6a:d2:3c:4c:af:20:35:c5:af:5f:a2:a8:
ab:3e:0f:e1:99:02:e4:f7:c7:51:6b:0c:d7:db:44:c8:de:74:
7d:ce:0c:f5:8b:89:fe:2a:a2:7f:4f:56:c5:a4:7a:ee:0e:6e:
d5:04:10:a9:d8:1a:0a:36:01:dd:ab:50:69:72:07:e3:1a:19:
67:26:a7:36:c8:45:34:36:b3:20:fa:65:dd:22:dc:58:53:e5:
63:28:ec:1c:4d:b6:08:66:4d:ba:89:bc:28:76:9b:51:da:7f:
26:fb:24:e7:09:ef:5f:ea:0f:2f:07:e8:71:cc:85:18:1b:2f:
e8:63:85:dc:4e:bf:f9:d1:9e:f9:c7:40:58:66:b7:b6:ee:09:
ea:38:3c:ee:56:50:2e:91:bc:ea:c6:57:1f:84:7b:0b:80:99:
d7:ff:7a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:36 2026 by rpki-client