
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
File: PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json)
Hash identifier: zbpmkCdtxGhUGIezcqKl4Hz4ydoqq/zDvG2Rnw31L5o=
Subject key identifier: C7:E9:F5:34:B3:91:25:76:90:E8:0B:D6:B4:AA:C9:BD:EE:53:C0:0D
Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
Certificate issuer: /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Certificate serial: 07A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
Manifest number: 0795
Signing time: Sat 04 Apr 2026 21:19:23 +0000
Manifest this update: Sat 04 Apr 2026 21:19:22 +0000
Manifest next update: Sat 11 Apr 2026 21:19:22 +0000
Files and hashes: 1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: XupOb2ox6xz/lugsaey4jmTBF/UL2l67RBPK/cXrdBw=)
2: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: O87q+bxguIFbMrAZ7VUYrSbILFtjGYHtuiggLNAaxfM=)
3: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: snnjjcJSmnSfiLGuLhSOWtXc8qgvzMcRQujW7d1nbB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1959 (0x7a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C0AE, serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686
Validity
Not Before: Apr 4 21:19:22 2026 GMT
Not After : Apr 11 21:19:22 2026 GMT
Subject: CN=69d1805b-f8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:5d:4e:0b:28:4c:13:4d:50:12:99:3b:ce:
33:36:da:e8:55:7a:0f:cd:db:c5:3b:e3:fd:a8:8c:
34:f7:33:9c:4a:42:4b:85:35:d6:5f:c8:11:59:a2:
72:83:4e:27:c7:14:dd:56:9a:3c:0b:d9:79:25:fb:
d5:08:b4:e1:8f:4d:d5:8d:a0:dc:1a:14:d6:14:54:
7e:ba:65:08:8c:a4:0a:23:a0:aa:d5:de:dc:2a:a2:
d0:d5:cb:5f:1a:bc:75:a6:6f:f4:ea:3e:76:59:f2:
4a:3f:6c:41:e9:5c:dc:08:bc:5a:99:8c:81:a6:25:
a5:19:6d:ec:ad:26:84:33:ed:2d:ae:1e:d3:d0:32:
02:14:b6:e4:e3:6a:9a:c3:12:c0:40:0b:f7:54:85:
0b:97:16:97:cf:98:f5:99:8d:6d:51:36:0b:20:96:
1f:a9:ce:05:4f:bd:d7:a8:83:6e:5e:ed:79:e5:11:
6a:0e:77:fb:91:16:58:07:40:f0:dd:4a:5d:dd:65:
8f:43:aa:4b:8c:51:54:91:0c:42:ae:fb:e1:88:3a:
b0:5e:7a:f4:34:25:15:7e:af:f8:db:78:d5:07:15:
7b:4f:14:89:1f:d1:e4:c0:43:db:3f:ea:4c:e6:c5:
de:1d:d0:07:d1:4a:d1:b8:33:c5:ab:0e:d5:19:d1:
df:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E9:F5:34:B3:91:25:76:90:E8:0B:D6:B4:AA:C9:BD:EE:53:C0:0D
X509v3 Authority Key Identifier:
keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:09:2f:13:85:2f:fd:c7:e6:8c:23:82:06:7e:61:cf:b8:c4:
30:de:d9:c0:fe:4c:ed:9d:04:32:62:23:91:d6:92:3a:03:bf:
fb:99:45:92:56:70:ff:25:39:50:05:ba:4b:2d:0c:7d:b5:b0:
70:1d:f0:26:c5:72:19:18:6a:89:fc:55:7a:59:51:3e:44:4f:
6c:d8:88:e5:28:71:4f:b5:c3:fa:44:17:16:6e:16:16:21:5c:
85:5d:4a:c9:c2:57:cf:ef:68:71:08:74:05:06:34:07:63:b8:
6a:ee:fb:0c:cd:8e:02:71:17:73:98:70:52:2a:2c:53:ef:21:
2f:2b:91:14:96:a5:af:7b:bc:22:b1:94:19:04:10:ec:17:8d:
5b:9e:8c:d4:8e:7a:af:8b:31:6e:4f:9f:61:4d:36:38:24:d2:
33:72:57:ec:39:1c:f2:66:e7:60:26:17:eb:8f:24:19:11:97:
60:3b:ba:fc:6b:f4:95:12:93:74:b7:2d:1c:5e:d8:26:05:3d:
8d:31:e3:1b:f7:d3:ed:76:c9:aa:ac:57:15:3d:1e:05:27:91:
86:df:9d:fd:25:d8:8f:13:04:bb:c3:bd:be:5c:6b:a4:58:cf:
f6:74:40:cf:b2:6d:fc:25:5f:52:5e:10:99:20:a6:91:44:6f:
ea:6c:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:06 2026 by rpki-client