
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
File: PNmBJcGXpVFDEgG3kG1QS7iySt4.mft (raw, json)
Hash identifier: XHNUbcs3wsyUVU1XAfp0MlRgrR6kllK+lU9QEEUBrzE=
Subject key identifier: 70:AD:10:1A:2E:D4:42:4A:A0:F8:5E:91:D4:53:D1:1B:30:26:5E:F5
Authority key identifier: 3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE
Certificate issuer: /CN=A918BB6D/serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
Manifest number: 79
Signing time: Wed 19 Aug 2026 08:29:56 +0000
Manifest this update: Wed 19 Aug 2026 08:29:55 +0000
Manifest next update: Wed 26 Aug 2026 08:29:55 +0000
Files and hashes: 1: PNmBJcGXpVFDEgG3kG1QS7iySt4.crl (hash: smDhC2G2e+HF+/HFj7oku4TdrDvGUWOEuxz4Od1I6HQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl
rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BB6D, serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE
Validity
Not Before: Aug 19 08:29:55 2026 GMT
Not After : Aug 26 08:29:55 2026 GMT
Subject: CN=6a856984-4f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:34:cd:5b:b4:8b:63:f5:8b:a8:86:28:21:
eb:c1:78:36:0d:95:38:21:6d:26:d2:47:e1:5c:a1:
a4:77:83:fe:5a:b1:23:09:1b:df:a9:61:84:8e:8f:
7d:58:6e:c2:4b:31:ec:57:64:20:da:8b:8f:d5:20:
38:b5:ed:3c:c2:b8:a8:a5:ef:c9:39:85:ae:b1:89:
5d:aa:bc:b6:53:e8:ad:69:88:08:4c:0f:0f:6f:90:
95:5e:2d:6e:da:7c:34:81:6e:4d:c0:9c:ce:f0:cb:
d4:07:77:7e:b0:05:c5:f4:2c:6b:e5:88:b6:c2:d5:
33:19:8c:de:82:5c:c2:06:84:68:16:b3:3f:5c:87:
77:29:ed:7d:55:1b:ca:df:5b:79:86:d8:3a:ed:21:
d7:ce:c1:92:9a:da:14:bf:65:d8:b2:68:22:8d:fd:
7f:2d:ce:9d:fb:a9:be:c6:96:54:08:d0:47:ac:c4:
08:42:97:1d:d7:1c:3d:8c:62:8f:c9:2f:d3:11:da:
b0:31:16:d8:3e:d4:f1:2f:49:b5:30:6c:5d:2b:c3:
26:a4:12:cc:70:14:38:17:2c:35:d0:22:43:b4:45:
12:5e:9c:17:5c:b3:58:a5:ef:f8:ee:d5:9a:45:37:
15:3a:68:10:89:92:c0:97:d0:2c:8f:ea:db:4a:77:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AD:10:1A:2E:D4:42:4A:A0:F8:5E:91:D4:53:D1:1B:30:26:5E:F5
X509v3 Authority Key Identifier:
keyid:3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:88:16:d5:88:36:98:7e:6e:58:07:a5:f9:b2:55:18:28:82:
df:af:9a:7b:e2:6a:0e:b2:98:81:d8:52:96:61:c5:4e:8e:ea:
2f:59:cd:4e:6f:85:5b:6d:a4:d3:95:52:c7:75:0a:a1:c4:b9:
f6:01:5e:bb:a3:fb:7a:8f:19:48:45:96:e6:ab:82:a1:6a:89:
16:33:d2:19:6a:5a:2a:25:42:57:f0:4e:08:e4:0e:d0:d2:65:
98:4b:5a:fa:63:3e:d3:a1:86:5d:96:5d:b5:f1:3d:11:9d:f6:
d7:ea:e1:c6:e2:94:31:82:28:83:89:36:af:ad:be:d3:2d:cf:
87:cc:f4:16:cb:ae:8b:70:e1:b8:fb:6a:a0:aa:3f:75:d2:d1:
be:b3:21:ec:9f:a9:06:52:81:a8:0d:a3:c6:25:7b:ec:e1:a5:
98:03:b6:44:13:af:8e:fc:9c:de:3f:15:8d:dd:a8:ae:22:18:
c8:73:d3:6e:42:e6:f4:bb:fd:88:2e:76:2c:bf:ab:ba:2b:82:
d9:3a:8c:c9:2b:0b:76:24:b0:fc:39:86:67:73:cb:2a:49:59:
a3:ef:ab:f2:9c:8a:82:0c:f4:75:a8:6a:79:65:3a:b1:c6:28:
48:ab:46:25:cd:d7:ad:3a:a1:48:2d:e8:85:84:02:62:d9:a9:
b6:ab:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:32 2026 by rpki-client