
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
File: PNcVUq-qATj5pk4BYO7wYJYGUyM.mft (raw, json)
Hash identifier: RwRoi9JUCICaiF2GeMp5v08Vmg9O5ZHgzYF2AjYMwB4=
Subject key identifier: 83:91:DB:F0:29:ED:57:F7:64:FB:22:7D:C5:EA:B5:65:B2:EE:79:53
Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
Certificate issuer: /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
Manifest number: 01C6
Signing time: Sun 05 Apr 2026 03:17:33 +0000
Manifest this update: Sun 05 Apr 2026 03:17:32 +0000
Manifest next update: Sun 12 Apr 2026 03:17:32 +0000
Files and hashes: 1: PNcVUq-qATj5pk4BYO7wYJYGUyM.crl (hash: fFcXuR005EiC/EewafojKJ2F2iaFEYqOCt/t/NLF4JQ=)
2: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (hash: Nj2SWfF08+NWeNfqPzGe0G/AhkrzTZtBpN7F7NKz6A0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl
rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Validity
Not Before: Apr 5 03:17:32 2026 GMT
Not After : Apr 12 03:17:32 2026 GMT
Subject: CN=69d1d44c-a2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:52:9c:44:fb:db:71:20:e7:0b:95:5d:e5:
d7:60:04:21:4f:56:e2:ec:8b:d4:e5:0e:5d:0d:11:
44:9d:73:33:45:9f:6a:d3:cf:d8:46:17:82:f0:7b:
2b:c1:6d:71:06:8e:60:2c:2d:ad:68:e6:a8:a2:01:
d1:68:a6:8a:7b:ee:4c:9f:d6:77:37:37:80:08:aa:
d6:aa:59:4c:d3:60:b8:d7:3b:85:93:23:02:44:b7:
5e:aa:55:a4:a2:61:a5:e8:ed:a0:91:03:73:7b:c4:
6f:53:cf:a2:08:ae:59:ac:71:22:dc:3b:e7:fd:f3:
08:2d:7f:9d:87:a2:53:46:35:0f:59:b9:ea:de:12:
a5:64:e3:38:1c:51:27:6c:d7:cb:09:a4:9a:0f:12:
07:11:55:e2:09:f1:1c:c8:c5:5a:2c:fb:4e:ae:9a:
e2:51:d8:56:60:58:85:7f:da:2a:3f:eb:b6:73:f0:
c3:15:60:82:40:18:f4:ce:f7:27:f7:06:f2:98:76:
ce:a4:60:53:d3:45:76:d8:b6:92:8b:75:84:d4:e0:
82:94:9b:92:ea:13:95:5a:f3:34:cd:8d:8c:d3:13:
22:54:bb:2c:ae:3a:0e:37:bb:2c:a0:a7:a1:f3:b9:
d0:6d:df:40:1c:39:c7:16:0e:79:ec:be:c9:50:00:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:91:DB:F0:29:ED:57:F7:64:FB:22:7D:C5:EA:B5:65:B2:EE:79:53
X509v3 Authority Key Identifier:
keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:17:80:fe:6f:d0:88:56:f5:e3:92:fa:f7:db:39:df:57:64:
09:d7:2c:f3:50:da:bf:d4:46:90:aa:f9:43:f0:0b:6d:5c:15:
3b:cd:8b:06:89:73:52:f0:dc:cc:e1:3f:07:f6:3b:47:ec:83:
df:42:20:21:86:f2:0f:23:3c:ec:df:bb:ea:35:e5:1f:79:6a:
a4:6a:64:19:43:e0:10:f0:90:43:26:d2:f8:6b:23:1d:8a:77:
bf:06:fc:3a:c6:04:dd:be:38:1a:01:35:29:9a:6b:0d:4a:36:
0d:06:4b:5b:ff:c6:d2:f7:75:e2:96:32:fb:b7:49:73:23:32:
9e:74:20:36:9c:66:27:e1:b7:1c:ea:b1:4a:0f:ea:0a:32:46:
e6:20:ec:96:e4:6f:a2:91:97:b3:3a:a3:25:4a:20:78:38:b4:
72:06:f2:39:ce:27:de:33:1e:d7:97:b8:3d:16:89:9f:78:cc:
f2:ac:0a:93:a3:b1:56:19:e6:a0:bc:dd:c6:28:86:34:ef:13:
ad:3e:48:c9:bc:04:43:75:dd:c4:00:f6:c0:03:93:66:15:22:
c4:c8:5d:b9:cb:c0:b8:ba:88:bb:58:ef:35:4e:7f:f8:8d:ff:
98:16:c4:c7:51:86:e9:5b:5f:b5:9d:3a:ac:28:be:a5:79:8c:
c6:00:63:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:58 2026 by rpki-client