
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft
File: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft (raw, json)
Hash identifier: owudOkALjm6RTTKPyQ0maW8i738RWIVBLSMXFinHVB0=
Subject key identifier: 02:D7:B7:67:3E:3D:5E:09:5E:A3:66:05:75:E3:07:1A:B4:17:6A:BA
Authority key identifier: 3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F
Certificate issuer: /CN=A91A423D/serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F
Certificate serial: 4C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft
Manifest number: 48
Signing time: Tue 03 Mar 2026 07:59:47 +0000
Manifest this update: Tue 03 Mar 2026 07:59:47 +0000
Manifest next update: Tue 10 Mar 2026 07:59:47 +0000
Files and hashes: 1: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl (hash: 3W/H5g8uPMnlPnB+TjoHlSs4vJ397rpw8rpeF8DE4I0=)
2: DEE9FAB2B0A011F0B752B713C4F9AE02.roa (hash: tIyfiOIVf8LJoJNKrA+GLInMrFSEZkAOa9GYbRAVo1s=)
3: 2ECF71C4B0A111F0B537573FC4F9AE02.roa (hash: mJVmTz7IkuwUjhzH9s0qmpcZ7tmBDKPTqnHWHcZldiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl
rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A423D, serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F
Validity
Not Before: Mar 3 07:59:47 2026 GMT
Not After : Mar 10 07:59:47 2026 GMT
Subject: CN=69a694f3-29e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:fa:c2:86:e6:9f:3c:3b:76:36:35:e1:bf:
34:a8:99:c8:4f:ac:75:be:8a:a6:f6:a8:8b:c0:42:
20:23:c9:89:b0:48:46:b1:49:8f:87:71:33:4d:a3:
2c:5c:91:da:73:05:41:b0:a9:e8:53:48:79:17:5e:
f2:fb:50:c7:c1:1d:ff:5b:ff:7a:db:3c:e9:a0:38:
f8:16:6c:a7:99:94:1c:c1:97:2f:36:6c:09:f1:a9:
57:2d:d0:19:ea:85:2c:13:6c:4e:46:3c:37:e9:7b:
62:07:f0:41:ea:6a:f6:e5:13:f1:56:0f:c6:18:a2:
64:ef:b6:e8:c1:c4:30:ca:dd:64:cd:13:10:61:9f:
3b:f3:ad:7a:3e:eb:fe:0a:96:a2:57:6f:7d:4e:22:
28:5e:20:d7:c3:56:86:84:71:03:fe:53:1a:e9:dc:
34:8b:a7:21:65:22:d5:f7:ef:dc:51:f8:ee:5c:e9:
29:05:bb:16:e6:b2:2f:6e:bf:1c:0a:7b:4f:cf:0a:
6e:33:0e:1a:6f:ea:11:e8:e6:fe:38:74:32:ad:a1:
21:dd:57:96:07:fb:6f:2b:45:5f:53:ab:15:74:0a:
ef:d9:86:27:f5:5f:a9:17:56:cb:35:4a:50:03:ed:
f1:9b:e4:21:d5:82:d7:c4:65:16:55:cf:f6:14:6f:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D7:B7:67:3E:3D:5E:09:5E:A3:66:05:75:E3:07:1A:B4:17:6A:BA
X509v3 Authority Key Identifier:
keyid:3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:f2:61:18:4e:b6:41:72:3a:a2:4f:16:7a:2b:42:d6:f4:bf:
a0:0b:28:4f:0b:53:25:8a:1e:f5:97:32:51:e7:36:87:42:05:
94:27:11:01:25:c4:4f:f0:ff:64:c0:1f:40:6d:e3:d5:62:dd:
9d:77:28:78:38:49:d3:2c:5f:96:b4:44:17:d5:db:22:3d:28:
e7:62:35:4f:a5:63:38:9b:94:b5:41:18:36:15:81:1c:d0:f9:
ba:eb:ff:9f:87:2b:d8:25:b2:ce:d9:cd:76:1b:6b:0c:64:bd:
4f:35:05:31:89:b0:53:13:d0:5a:a1:a7:e4:89:6c:56:6d:0c:
f0:bf:99:b6:42:a3:4e:d9:4b:60:a9:89:1e:26:e2:e5:b2:df:
b1:df:f7:4f:d1:3d:37:34:81:31:ef:b6:38:d9:97:16:6e:61:
f4:e3:25:8d:fa:4e:6d:06:d4:03:8c:98:5b:4a:42:5b:5d:ae:
59:67:7b:b6:0b:05:56:9a:cd:7d:52:46:ef:c8:ec:fc:fe:b5:
27:17:0c:26:30:58:55:5e:21:a5:5e:54:59:f0:a7:01:d4:5c:
8c:4c:d4:8f:b9:3f:2f:63:f1:5e:77:ab:41:ac:5f:43:3d:07:
f4:73:90:6d:b8:d6:30:95:af:df:7a:93:68:d9:02:23:4f:eb:
f2:8b:33:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:42:50 2026 by rpki-client