
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json)
Hash identifier: BNLbqoWjjI+Q2SngXF6XZlgcEPEuXB9CT3bS6URvCUk=
Subject key identifier: 5A:BB:AE:6D:EC:83:E3:E7:51:8D:05:B9:9E:49:B8:1C:17:17:66:46
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 0429
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
Manifest number: 0396
Signing time: Thu 11 Jun 2026 03:31:23 +0000
Manifest this update: Thu 11 Jun 2026 03:31:22 +0000
Manifest next update: Thu 18 Jun 2026 03:31:22 +0000
Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: IUD4CsRba05/GD2mWp0lTMBbnikefSMnOuGOl3i/ZfU=)
2: 20978DD270E411F08F40242AC4F9AE02.roa (hash: zJ/FRdSx+UBkhY/B2LQiRi6Up0elo1smeyd+xu/dr+M=)
3: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: 5DPxa9zh03P/4EIxkUOZTnMchK9kaQkZ16Z7NXsueHg=)
4: F1EA8F4657E911F1ACD7923C93833773.roa (hash: bWtw9F8LU24NtnpV5FCzxLT/YLwgD6y8BEgt8uAmOpo=)
5: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: 2Co79ynBgBkfRYtcjArTdkt2fZojdezftQg41GUn3f0=)
6: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: V+41ntKJN5cZcf4m2jV7VDL18RNscYpp6FiRJv/RGZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065 (0x429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Jun 11 03:31:22 2026 GMT
Not After : Jun 18 03:31:22 2026 GMT
Subject: CN=6a2a2c0a-9907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6b:6a:26:40:29:d1:c0:2e:9b:1a:bb:b3:c1:
91:8a:7f:b3:23:f8:7a:3b:44:bc:b2:34:22:80:5b:
3f:23:96:bb:78:de:f7:21:9f:a7:c7:5d:2f:46:79:
21:4a:62:95:f6:f5:bc:57:ad:a8:2d:46:c8:ae:08:
95:cf:59:4e:43:23:71:c4:7d:51:c0:0c:8a:53:f5:
ae:dc:2d:6f:84:96:9c:09:67:40:4a:f2:e8:c4:81:
e6:23:a5:ca:d4:9d:dc:28:c4:fe:c6:cc:ff:43:85:
88:0d:ca:c8:3c:b1:6d:57:ee:98:75:76:fd:53:6c:
55:cd:5f:8a:cc:18:cf:ec:6c:59:ad:a3:01:eb:29:
89:3f:bb:b5:4d:bb:53:71:34:31:db:bb:6e:41:4e:
d9:6b:66:87:ef:ba:c4:1c:8f:8d:95:68:44:00:62:
9f:58:87:8b:c6:4d:ed:a9:19:56:48:bb:53:d6:72:
74:ab:26:bf:2e:8d:e8:86:c6:08:1c:cb:a6:53:b5:
ac:79:54:eb:ed:0c:7a:8b:cc:9d:61:8d:89:af:44:
92:06:ff:55:41:99:b6:a5:93:d3:47:86:c8:31:83:
de:d5:5b:2d:ad:f9:96:d9:38:40:b3:5b:c5:f1:b7:
c4:87:03:be:de:52:36:67:4b:32:12:c0:69:97:07:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BB:AE:6D:EC:83:E3:E7:51:8D:05:B9:9E:49:B8:1C:17:17:66:46
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:2f:88:ae:15:52:d1:e7:e1:06:d6:8e:0c:e4:90:c2:9a:2a:
48:d8:b9:78:d2:06:ef:6a:44:b7:b3:fe:6b:17:28:d5:59:5f:
1b:6c:f1:b4:0f:b4:26:51:08:e7:bf:43:88:59:6f:e6:8a:12:
9b:d0:4d:35:50:06:5d:42:bc:7b:94:9c:3a:7b:0f:d7:6e:06:
2b:72:4e:19:de:fc:30:96:3b:35:11:f5:4e:b7:95:52:e6:76:
5e:ce:6f:4c:cf:3f:21:8b:ea:b7:ad:8e:74:2f:f4:35:2d:7a:
c5:6e:2f:6f:06:39:92:2d:be:fe:82:3f:7e:56:51:b5:fe:5a:
58:9e:88:e0:a5:a0:cc:c1:a9:78:d8:52:8d:14:4f:ce:2f:bc:
61:1c:c2:da:b8:2f:c9:3b:8c:ab:c3:dd:33:67:4c:f4:1b:8f:
33:2a:e3:b0:7d:b5:8c:e5:4f:07:c1:09:6e:6e:f0:85:bb:ee:
93:68:93:f6:bb:c5:70:68:ac:4e:a6:dc:46:cc:97:57:64:71:
71:3c:66:ae:a2:60:5b:cb:54:3a:36:99:65:52:b4:11:4a:c7:
a0:bd:ce:aa:fa:44:2b:7f:0a:f7:5f:91:a8:3d:70:e2:0b:1b:
7e:00:f9:51:ca:74:53:51:f0:06:51:bb:45:85:7b:c2:ad:e0:
c8:8a:b3:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB
MEFDRDQ0N0YwHhcNMjYwNjExMDMzMTIyWhcNMjYwNjE4MDMzMTIyWjAYMRYwFAYD
VQQDEw02YTJhMmMwYS05OTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1GtqJkAp0cAumxq7s8GRin+zI/h6O0S8sjQigFs/I5a7eN73IZ+nx10vRnkh
SmKV9vW8V62oLUbIrgiVz1lOQyNxxH1RwAyKU/Wu3C1vhJacCWdASvLoxIHmI6XK
1J3cKMT+xsz/Q4WIDcrIPLFtV+6YdXb9U2xVzV+KzBjP7GxZraMB6ymJP7u1TbtT
cTQx27tuQU7Za2aH77rEHI+NlWhEAGKfWIeLxk3tqRlWSLtT1nJ0qya/Lo3ohsYI
HMumU7WseVTr7Qx6i8ydYY2Jr0SSBv9VQZm2pZPTR4bIMYPe1VstrfmW2ThAs1vF
8bfEhwO+3lI2Z0syEsBplwckAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFq7rm3s
g+PnUY0FuZ5JuBwXF2ZGMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG
NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S
SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT
clM0c0VVeUN4bFdnck5SSDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdi+IrhVS0efhBtaODOSQwpoqSNi5eNIG72pEt7P+axco1VlfG2zxtA+0JlEI
579DiFlv5ooSm9BNNVAGXUK8e5ScOnsP124GK3JOGd78MJY7NRH1TreVUuZ2Xs5v
TM8/IYvqt62OdC/0NS16xW4vbwY5ki2+/oI/flZRtf5aWJ6I4KWgzMGpeNhSjRRP
zi+8YRzC2rgvyTuMq8PdM2dM9BuPMyrjsH21jOVPB8EJbm7whbvuk2iT9rvFcGis
TqbcRsyXV2RxcTxmrqJgW8tUOjaZZVK0EUrHoL3OqvpEK38K91+RqD1w4gsbfgD5
Ucp0U1HwBlG7RYV7wq3gyIqz+w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 13:53:45 2026 by rpki-client