
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json)
Hash identifier: Ssl7dyaGsjtr1sKJ7SO3ryq5NJDSAquUIekc33MYyHQ=
Subject key identifier: 1B:6F:D8:A2:28:5D:0D:CB:2A:B3:56:70:22:A6:AF:33:7A:DC:72:E8
Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02
Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402
Certificate serial: 0480
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
Manifest number: 0479
Signing time: Wed 19 Aug 2026 00:26:08 +0000
Manifest this update: Wed 19 Aug 2026 00:26:07 +0000
Manifest next update: Wed 26 Aug 2026 00:26:07 +0000
Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: SQDdgNa5mG7K1ow6PdNW8P4TIhISDZ2bsbRY/UQxJYg=)
2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: crOzhXkSx5L+vjk+uogxATh7I9S04wmUq19GJ5qDpWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl
rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1152 (0x480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402
Validity
Not Before: Aug 19 00:26:07 2026 GMT
Not After : Aug 26 00:26:07 2026 GMT
Subject: CN=6a84f820-f655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:0d:f4:af:f3:fa:db:d6:28:71:7a:54:34:
05:79:d2:a3:20:38:10:ff:0d:4a:29:fe:49:e4:4b:
82:b0:f6:a3:a0:96:86:49:31:5d:94:38:1f:dc:23:
e2:40:80:f4:68:99:f8:3e:2d:1a:7b:e8:70:c6:24:
9f:90:c5:9c:2f:24:27:48:a8:b1:4a:b9:35:a7:30:
72:09:9c:1b:92:45:ab:f5:7b:70:4b:39:50:50:79:
8e:ee:2e:b7:67:3a:a7:65:40:8f:c6:d2:2a:f2:72:
c9:3d:8b:48:5c:81:ff:0f:f2:71:6e:b6:c9:28:04:
b8:76:34:9b:5f:05:f0:7c:8c:8a:9e:00:f6:f3:c3:
b6:28:24:52:8a:ac:4f:1b:97:8d:0e:a8:10:8e:e2:
c0:94:1e:78:27:7f:bf:46:01:dd:a4:cd:e8:85:06:
e4:f3:69:3f:90:7d:47:d7:17:3a:f1:53:a9:6e:0f:
6c:43:37:9f:73:81:7e:d6:b9:00:74:f5:fa:91:a9:
e4:02:96:b4:bb:58:d5:95:c0:54:81:66:18:c8:ea:
a6:44:f4:2f:9c:c6:4f:f1:50:c0:5f:a7:c0:8e:57:
75:b5:95:6f:8c:30:a4:49:84:7b:69:bc:e4:37:8f:
42:5c:f7:b3:4b:33:69:1b:73:5d:68:93:63:f1:cf:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6F:D8:A2:28:5D:0D:CB:2A:B3:56:70:22:A6:AF:33:7A:DC:72:E8
X509v3 Authority Key Identifier:
keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:08:89:71:4a:ca:a1:89:86:7b:f1:8a:43:2a:0e:4d:58:15:
9d:60:24:6b:af:96:51:fe:8c:f8:09:2f:af:03:37:e0:76:77:
0e:b0:cd:08:85:23:51:57:ae:79:62:88:1c:e1:9d:b4:80:da:
b7:1a:4e:ac:27:cc:47:72:50:da:1c:00:7d:94:7a:4d:6b:40:
5e:a5:76:d1:25:f4:c3:59:57:4e:77:54:cd:d5:6a:64:7d:23:
b3:85:9c:01:d9:4f:5a:9a:d4:5a:7d:a9:7f:17:cb:6b:cc:48:
63:9a:b8:49:7d:11:19:81:b7:49:d0:97:fe:63:55:8c:58:a6:
47:f8:c9:95:25:a2:59:6a:6b:cc:a5:3d:80:a6:35:15:ad:7b:
53:db:cb:1a:69:4f:19:08:df:e6:0c:11:b1:9a:06:7e:e7:de:
0a:3e:61:77:33:d1:28:e5:7f:db:33:7a:df:20:28:58:6f:b4:
04:ad:e9:d6:47:e9:bb:05:26:11:7f:0d:1c:d9:c7:bf:8f:8c:
da:e8:32:a5:24:f7:09:0a:95:f8:80:7b:bd:b5:4a:d3:d1:a2:
82:2c:81:d3:84:8b:7f:ba:9f:cc:18:6c:54:d3:a1:d7:93:ad:
ca:11:1a:4a:46:b0:44:3e:a9:47:a9:97:fd:6b:14:2c:9b:d9:
4b:d2:67:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:04 2026 by rpki-client