
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json)
Hash identifier: zk+kJsG6wcgu2DmOwj9JTNGG/v1hHDHwZvH+7yoHPwQ=
Subject key identifier: DF:B0:55:8A:79:6A:D2:47:84:47:F6:04:CF:00:D9:50:39:B8:6A:B8
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial: 03BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
Manifest number: 0397
Signing time: Sun 29 Mar 2026 00:42:01 +0000
Manifest this update: Sun 29 Mar 2026 00:42:00 +0000
Manifest next update: Sun 05 Apr 2026 00:42:00 +0000
Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: qg9JCZ82eoFMy312TIk+q2q/NH47Z0HPxvA03KxveD8=)
2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: 3oTJlo3dfPqUJV51FEFIq1H9zuUKyATog/K2P6FYqTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 00:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Validity
Not Before: Mar 29 00:42:00 2026 GMT
Not After : Apr 5 00:42:00 2026 GMT
Subject: CN=69c87559-e8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:5d:a1:42:2b:b6:74:0e:b1:a8:4b:37:4c:
b9:bc:b1:7c:29:ac:ea:33:34:1f:ba:66:0d:eb:bf:
72:89:77:39:22:b7:4d:8d:80:7f:fe:31:d7:1e:08:
c2:0d:96:ff:55:2b:a1:c4:77:c5:aa:83:8a:72:a1:
7b:05:d1:d1:98:56:db:39:c8:89:ae:ef:6e:14:54:
c4:8c:11:88:8d:bd:02:ad:09:b3:e6:01:47:0e:b0:
66:56:48:e4:c0:23:fb:b9:a5:87:71:4f:bc:f6:b2:
30:57:ee:7f:4a:f0:f7:96:fa:50:8f:03:68:88:49:
fd:12:e7:f1:5e:7b:c7:b2:34:14:96:f1:af:a1:46:
84:12:a5:94:31:02:46:85:62:e7:7d:69:33:78:98:
9b:f5:76:23:81:d5:38:08:80:a9:7a:f0:cf:e1:aa:
85:12:17:01:6b:0a:8a:0f:48:8f:1f:3e:7d:ae:67:
07:94:eb:a0:c1:5b:62:1a:ba:dc:2e:50:f0:1d:09:
7b:96:a5:4c:2c:6f:05:fe:82:01:1f:4c:82:f0:59:
47:f3:c0:3a:2a:8c:33:48:db:b9:2c:90:4a:80:11:
b8:ee:95:cf:69:70:d3:8e:55:c9:30:52:bd:ff:2b:
63:1e:f2:b3:25:66:a1:80:fb:03:00:8d:59:48:fe:
09:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B0:55:8A:79:6A:D2:47:84:47:F6:04:CF:00:D9:50:39:B8:6A:B8
X509v3 Authority Key Identifier:
keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:8e:59:c3:e1:4b:8d:43:e5:79:1f:08:97:5c:e0:9e:97:fe:
e7:1b:e7:52:1b:a1:be:aa:94:43:22:4a:16:94:35:af:ef:5c:
4e:d0:20:99:fb:2f:07:3f:df:a2:04:f1:4e:29:19:24:22:d0:
f8:c6:29:d8:4d:38:62:43:a2:9a:d0:6e:2b:85:a1:e8:ad:26:
20:9f:9b:06:c2:b1:0c:33:f8:48:eb:88:2b:7b:42:ca:84:cd:
2e:1d:22:fd:30:32:a5:f0:3d:9b:b0:48:8d:97:d7:8d:43:d7:
08:e4:98:76:eb:a5:80:91:30:2e:2d:ba:3e:3f:7d:c0:1e:6c:
99:dc:d1:04:5e:9d:01:7d:3c:75:7d:3b:d5:49:4d:bb:59:a8:
7d:14:58:c7:dc:e8:2d:41:2b:d0:63:db:1c:c6:a1:b6:77:2f:
81:56:a6:ae:77:d8:ca:31:12:0d:3e:d6:39:30:03:b8:3f:61:
0e:60:7b:d5:a4:ca:ce:9e:3b:78:56:55:bc:39:4a:84:3a:f0:
16:c5:4a:f1:b9:f1:8d:c9:4d:9a:fa:ee:8f:ae:d7:2d:f0:ff:
4a:82:0e:dd:79:6b:98:f6:0e:5a:fc:51:3e:32:a6:9b:64:ec:
38:69:60:fa:20:7f:7d:b0:5c:c3:fb:a6:11:6d:28:4b:4c:84:
92:cb:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 03:33:37 2026 by rpki-client