
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json)
Hash identifier: 695UOhBB1i98h5lwpVUtjEBA3/F7GS24iRvEhNGGisw=
Subject key identifier: EB:0A:3D:E5:5C:59:5A:47:0F:42:DF:3D:B6:B8:AB:D8:B8:79:D9:4A
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial: 03EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
Manifest number: 03CA
Signing time: Fri 03 Jul 2026 01:02:55 +0000
Manifest this update: Fri 03 Jul 2026 01:02:55 +0000
Manifest next update: Fri 10 Jul 2026 01:02:55 +0000
Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: TaEfagY56B+vfis4w6JgHCObaCqwLymaElftiAmv+Vg=)
2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: Bba3ux72e27e1jQ1j28aUjisSioDvxuoxGTwro6zTXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 01:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1007 (0x3ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Validity
Not Before: Jul 3 01:02:55 2026 GMT
Not After : Jul 10 01:02:55 2026 GMT
Subject: CN=6a470a3f-ff4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:22:da:c2:29:18:d4:e5:07:ac:44:16:da:
92:27:93:c2:55:33:ea:35:fb:23:bb:9a:81:69:30:
6f:d5:a8:5d:0c:9f:ec:c8:2d:84:38:54:ee:70:74:
de:72:34:6c:21:a7:2f:1e:7a:f0:49:1e:7a:b0:f8:
2c:18:05:6d:18:e3:0b:eb:32:b5:d7:73:35:33:47:
8c:a5:27:b6:91:9c:5b:7a:07:1c:c7:0b:0d:89:a3:
f5:18:cf:1f:8e:36:81:28:59:8c:44:cd:33:b0:f8:
6e:e3:1a:52:60:36:36:8c:9e:53:1b:6c:91:12:e2:
da:a1:f5:f8:2a:fc:e4:a3:d4:9c:46:5e:73:4b:69:
4d:ec:c1:1d:fa:5f:e9:f6:b1:ec:2f:42:bf:eb:fc:
9c:b7:41:48:27:98:5b:10:e0:cf:52:69:a0:02:26:
f3:73:fc:c8:63:df:bc:bb:1f:52:93:fe:f2:d4:ce:
0a:59:67:47:99:c3:07:49:40:73:03:6a:56:ee:c9:
12:53:e4:98:76:11:ea:c3:3a:df:87:5f:59:50:a5:
af:c3:0c:1e:0e:74:e1:27:53:8a:2b:ac:76:34:c1:
ba:e9:53:68:a2:0e:b8:aa:27:ff:d5:32:e9:2c:ed:
60:d3:e9:08:5c:d0:6d:cf:42:9a:3a:6f:4f:79:3f:
b2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0A:3D:E5:5C:59:5A:47:0F:42:DF:3D:B6:B8:AB:D8:B8:79:D9:4A
X509v3 Authority Key Identifier:
keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2c:1b:9d:21:28:39:7b:39:00:75:82:97:d1:23:9f:8e:29:
82:1d:f0:24:97:56:78:e4:e0:f8:66:06:bf:57:f2:11:94:51:
04:c9:9b:9a:5b:44:f1:49:3a:af:7c:a0:77:72:56:01:43:9b:
2b:f5:87:b7:94:da:7a:2a:48:07:dc:e0:93:77:7e:00:f8:77:
d7:09:60:fd:17:5b:8d:b9:05:cd:e8:e5:fc:f2:d7:9f:af:8c:
4c:30:25:89:59:ea:ce:eb:65:6e:1b:7a:f9:b6:a6:b1:11:a1:
c4:46:67:4d:e5:33:f4:f4:c6:38:19:2b:30:2c:9d:cb:15:43:
f8:3a:76:85:1f:92:e6:a6:82:57:b2:db:ed:fd:5c:2a:09:54:
8a:34:dc:86:b8:c5:24:f9:a5:d3:53:2c:9f:3a:cb:86:71:df:
7e:95:92:ca:6a:5d:ff:3f:b7:90:f0:95:83:6a:fb:32:c4:31:
f3:66:03:e2:22:3a:70:ec:ff:17:b8:43:53:ae:c9:98:58:08:
e1:2c:e3:e0:5a:93:59:c9:d1:95:15:da:bb:25:a4:ee:39:c2:
e2:74:6e:52:c3:8a:87:5e:e4:0b:00:17:c3:8f:e4:c5:59:75:
e0:6c:eb:7b:94:15:8a:b6:70:c2:22:a9:55:b1:b6:3e:3d:5a:
13:72:1e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 09:32:02 2026 by rpki-client