
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier: 7KyQZTWBnIPUNvDSj9Chf4ZfDqQNIT2hgSLvt+P+wzI=
Subject key identifier: 7F:66:87:D6:72:40:3B:C6:4C:33:56:8C:F2:D6:F9:E1:64:94:5D:2F
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number: EF
Signing time: Mon 01 Jun 2026 07:10:52 +0000
Manifest this update: Mon 01 Jun 2026 07:10:52 +0000
Manifest next update: Mon 08 Jun 2026 07:10:52 +0000
Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: dGCuBOMi7XOCnykEjeMA/o0vVygWcS7FkqJLQP15pH8=)
2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: pKM2r60kiKPj1EOj5o/9P1X4OcOTkc7kjSEawMzaPfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Validity
Not Before: Jun 1 07:10:52 2026 GMT
Not After : Jun 8 07:10:52 2026 GMT
Subject: CN=6a1d307c-41d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:bf:63:ab:f5:ac:51:66:fb:01:da:8e:44:
80:0c:7b:24:84:f2:0c:16:1c:3a:15:e3:f6:db:96:
d8:cd:c7:3d:70:d9:db:17:77:42:a4:2f:ae:dd:88:
ab:f4:e5:0f:a2:13:ac:dc:49:fa:21:f7:4c:07:47:
e0:25:76:e9:67:f5:7a:d9:6f:53:b5:d8:9c:b3:dc:
bc:a7:82:8a:6e:0e:51:53:46:63:21:1d:42:76:12:
69:57:1b:07:df:04:46:f5:54:77:93:e7:d4:a3:ae:
90:2b:d7:47:74:de:f3:bc:cc:6b:d3:2a:ec:ae:b5:
f2:77:20:7a:11:d0:69:28:54:fb:a4:9e:86:48:1a:
47:17:cc:44:71:9f:32:f5:30:a0:78:54:53:82:e8:
30:44:d7:2e:97:ed:c0:87:0f:dd:68:f9:fb:c3:13:
11:aa:09:6e:6f:c4:60:de:2b:5c:5e:b3:1c:5b:4c:
61:35:fa:d9:e3:0b:53:be:a3:da:28:d1:9c:1c:3c:
aa:86:b9:f0:26:af:03:cd:20:66:8a:da:3a:64:d9:
0b:47:0b:2b:ee:b2:79:c0:5c:d1:b5:cb:c4:bf:f2:
e2:f8:21:96:67:df:e7:f4:ae:13:b8:21:f5:48:e2:
72:60:00:4b:e2:80:0d:91:21:4a:83:57:d1:5e:77:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:66:87:D6:72:40:3B:C6:4C:33:56:8C:F2:D6:F9:E1:64:94:5D:2F
X509v3 Authority Key Identifier:
keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:ab:83:a5:17:53:c1:2b:79:33:66:84:32:d2:2a:56:f5:b4:
d7:61:a3:38:82:01:2d:67:01:d7:22:b9:2b:5b:7d:87:c1:3e:
0c:e7:d3:19:b1:ea:4b:e4:36:8d:7c:a6:b8:26:de:eb:f1:2f:
30:2d:a9:a9:ed:eb:df:66:33:f2:bf:a0:0c:92:b3:0c:7c:b9:
48:4e:79:b8:c9:d6:b3:47:69:b0:a2:0f:b0:86:77:1f:c8:70:
00:d0:b3:41:a1:fa:8c:e5:4c:22:f5:bc:29:58:4a:f7:ab:3f:
02:aa:84:b1:55:8a:d1:24:12:1d:48:0c:e2:d0:cc:46:95:5a:
31:fa:7a:63:47:a9:28:f6:8a:1f:19:34:8b:eb:19:a8:d8:cd:
dd:42:f5:3a:c0:bc:86:b8:40:b0:e0:e5:76:e0:ac:a6:72:c9:
49:14:08:63:c8:51:87:06:24:18:da:64:08:38:e6:19:44:7b:
1e:73:13:7c:dd:b9:e6:46:55:ef:8f:e7:27:7b:6e:a7:cb:e9:
1a:af:bc:fe:d2:72:37:d1:72:b2:7e:ae:31:7f:75:94:e6:1c:
b8:d5:db:30:be:65:29:d7:68:4f:dc:50:51:1c:83:9a:e0:03:
6f:86:29:1a:35:88:4f:0e:9f:bd:10:73:c6:76:b7:ce:b0:33:
60:2d:37:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:41 2026 by rpki-client