
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier: tEdIu+BT7jJEeobU/DTy7QixPMqYRrAxAmKN4rK7Lj4=
Subject key identifier: EE:7B:B0:5D:61:CA:B3:75:DB:59:05:0B:56:3C:99:68:38:26:46:D3
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial: D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number: D2
Signing time: Sun 05 Apr 2026 06:09:33 +0000
Manifest this update: Sun 05 Apr 2026 06:09:33 +0000
Manifest next update: Sun 12 Apr 2026 06:09:33 +0000
Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: wqSbhL63PISZMMU7Io2AC683FWkab1kpXpOISQhUswM=)
2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: pKM2r60kiKPj1EOj5o/9P1X4OcOTkc7kjSEawMzaPfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Validity
Not Before: Apr 5 06:09:33 2026 GMT
Not After : Apr 12 06:09:33 2026 GMT
Subject: CN=69d1fc9d-e388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d6:57:eb:a1:26:83:af:78:6b:ce:f8:80:aa:
a1:10:76:ae:b4:1c:5d:af:74:d2:f9:ac:b2:e6:15:
e1:a8:ea:f4:8a:3f:0e:3f:76:8d:8d:b9:bd:08:de:
5d:59:19:26:5d:58:f4:ad:b7:fb:ec:36:46:c4:d4:
d6:6a:04:c6:9f:b9:75:5d:3a:08:85:5d:ce:c2:22:
82:b3:fa:67:3e:37:19:35:74:d5:43:04:4b:65:a9:
9b:9e:a4:9f:35:76:eb:64:f2:14:b6:11:6b:11:99:
39:29:31:bf:94:ca:7a:a4:f5:c9:52:b0:13:89:86:
0d:88:f6:ae:f8:f3:99:1d:a5:41:75:ed:67:69:f6:
61:05:95:ce:87:92:77:bc:71:ee:d9:a9:a2:2d:6e:
72:4c:b2:47:c1:47:d1:17:9d:4d:8e:d2:13:b2:71:
6a:b1:c3:87:9c:01:1f:30:bd:40:ff:52:c3:15:7d:
bf:b7:97:90:db:6b:9d:37:51:3b:62:3c:db:a7:05:
99:75:e1:00:0f:83:14:6e:22:ea:8d:59:39:c5:83:
0a:a7:fb:72:a0:ba:cd:8b:94:ce:f0:ed:e0:b5:4e:
4c:61:43:7c:b2:22:69:21:43:1c:ec:2f:33:99:65:
30:27:5b:0d:68:65:6a:b9:d2:8a:27:62:e5:07:bc:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7B:B0:5D:61:CA:B3:75:DB:59:05:0B:56:3C:99:68:38:26:46:D3
X509v3 Authority Key Identifier:
keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:53:b8:43:9f:34:ec:f5:bf:87:9b:3a:b0:66:f0:36:b7:4e:
78:59:45:b0:c1:10:68:72:90:57:e4:eb:05:30:2c:7d:ce:99:
5a:36:9f:70:1c:92:8f:c4:57:6e:01:fd:a3:73:55:f7:19:a0:
31:de:0f:2e:eb:3b:bd:0d:30:68:7a:d8:aa:24:19:ab:9d:8c:
54:bd:a5:ac:9d:73:d0:03:8f:be:6a:87:a0:87:72:d6:04:77:
75:4c:a0:cb:18:f1:45:64:29:e3:1e:61:d4:f8:c0:c3:a2:05:
b3:e9:ba:06:67:b9:a7:f6:a5:6b:2b:5c:0b:e8:8f:25:05:04:
09:9e:a7:9f:74:c0:21:7a:01:16:5d:9c:77:ff:ed:dd:00:89:
be:2c:c7:2d:dc:a8:e9:2a:e9:6b:a6:6c:78:ad:c4:7a:90:40:
64:4a:01:3d:6c:a9:7d:20:fe:f4:c2:c3:2e:0a:cc:b0:76:02:
c2:65:bb:63:5f:44:13:10:a5:bb:41:3d:45:95:f3:34:c5:60:
87:45:00:af:f0:a3:6d:e7:b7:de:d8:bb:fc:f1:73:f8:9f:e6:
7e:f9:69:d8:7d:e4:a6:02:57:ee:cc:74:65:27:1a:3b:bf:af:
7b:57:b6:6c:55:06:1f:9d:9c:9e:4e:58:41:2c:fd:88:bb:50:
16:a4:21:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:36:46 2026 by rpki-client