
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
File: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft (raw, json)
Hash identifier: bw8f38R7kNN43Yn7FxmCe4Dt9qbRySIM0gkm2/kgZAg=
Subject key identifier: 24:F5:A3:48:32:CB:68:8B:C8:E7:20:DC:AB:D2:7E:29:8D:2F:C4:38
Authority key identifier: A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD
Certificate issuer: /CN=A91A995E/serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
Manifest number: 012D
Signing time: Sat 03 Oct 2026 06:25:05 +0000
Manifest this update: Sat 03 Oct 2026 06:25:04 +0000
Manifest next update: Sat 10 Oct 2026 06:25:04 +0000
Files and hashes: 1: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl (hash: zQgAP1V7FQeHFGKnIzEsxYScR0TqIiRRHAbSqW+EAeQ=)
2: B3E4D03621B111F089CE216DC4F9AE02.roa (hash: VaEKIuiVVa+34T0EyOyaQnSXrGSJwgYFoH12QYWKH4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl
rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A995E, serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
Validity
Not Before: Oct 3 06:25:04 2026 GMT
Not After : Oct 10 06:25:04 2026 GMT
Subject: CN=6ac09fc0-5e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:af:7a:ab:db:c4:bf:25:3c:60:09:39:5d:
1f:86:4c:30:ea:2b:ae:9d:4f:13:01:4b:ea:3f:04:
2a:0e:ae:5a:8c:71:5d:50:fe:20:ae:bc:e2:fb:3c:
bb:53:b9:0b:0d:b5:01:54:04:7a:95:b2:fc:c3:a3:
6c:e9:11:00:e2:bc:f6:da:dc:23:80:8b:2f:46:72:
da:95:39:64:5e:6c:7a:74:2b:8e:97:01:c9:8f:da:
68:53:bd:71:33:d2:10:47:65:d1:7d:c0:0c:14:71:
f8:e4:a7:bf:c5:51:69:b5:f9:01:6c:f7:f0:97:50:
c8:f3:f8:04:dd:25:1b:11:8b:f8:79:3c:f4:2f:b5:
84:66:3a:72:8d:14:67:3a:02:c4:98:00:f5:ad:8e:
2d:56:1f:f5:d5:95:4b:f0:4c:65:65:3b:66:62:cb:
55:c6:53:4f:c2:41:ba:27:9a:e2:de:d1:33:6f:d0:
f7:4c:a3:f5:f7:6a:96:68:cb:d4:f8:5c:9f:64:a9:
7d:0b:8d:2e:49:54:d6:c3:0c:6e:63:ce:ca:ae:75:
80:2a:eb:b3:be:2c:11:61:ed:10:40:9d:20:7c:86:
e8:86:9f:be:74:22:93:05:16:f6:09:d5:9f:cc:4a:
6f:75:b9:6d:8c:26:26:ed:69:ca:c0:fe:d1:d8:d6:
fb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F5:A3:48:32:CB:68:8B:C8:E7:20:DC:AB:D2:7E:29:8D:2F:C4:38
X509v3 Authority Key Identifier:
keyid:A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:2a:28:01:ba:62:be:69:68:aa:3f:a0:44:aa:43:2c:b9:41:
a1:52:eb:8b:76:9c:77:9e:f8:4a:cf:49:79:f7:08:51:56:00:
2a:5b:c6:3a:cb:12:41:0c:e3:be:9f:27:f6:9f:6a:fc:9d:69:
03:f7:65:0a:99:7d:18:73:dc:98:41:45:d3:f9:4c:ea:45:42:
b2:5e:f8:eb:eb:45:d9:19:40:f0:c5:cc:42:b1:94:cb:2d:20:
2d:b2:4d:3f:03:ed:96:a3:f7:76:ad:c8:96:2a:3a:a9:8e:5f:
1b:51:71:8a:e0:15:4a:d0:07:4d:0b:1c:a9:ec:dc:28:59:6b:
f4:58:ab:44:a0:c6:77:c6:9c:7d:5d:6b:0c:df:ec:cb:52:4e:
42:2b:3a:b8:5e:22:3c:29:f3:dc:01:69:78:b1:2e:65:02:04:
1b:11:d9:72:99:d9:b9:eb:5e:a0:44:bc:83:5e:6e:59:03:f6:
b4:da:f9:25:c8:7a:40:28:9a:c6:ec:94:82:db:fc:62:d1:b8:
57:7e:5f:7e:1d:04:98:e1:11:7e:25:bf:df:ce:4a:b7:52:39:
55:84:cd:3f:ea:5e:36:0c:31:6d:e0:b1:68:41:07:1b:67:cc:
d0:96:e9:0a:71:d5:7a:fb:96:dc:0e:c2:3b:f2:af:0a:96:04:
7c:88:23:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:33:32 2026 by rpki-client