
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json)
Hash identifier: AGM+ZOyJ4tn8kT5rk3/6jGzcmYBH7w5V67Rq8yWILcY=
Subject key identifier: DE:18:7D:07:59:6C:90:BC:2B:D3:2E:1F:B5:89:43:43:10:BD:3F:7C
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 0444
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
Manifest number: 03AF
Signing time: Mon 27 Jul 2026 08:11:44 +0000
Manifest this update: Mon 27 Jul 2026 08:11:44 +0000
Manifest next update: Mon 03 Aug 2026 08:11:44 +0000
Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: CRNTDpcsxCp/0Js8Fb9xBHH8I/BiTvQJ4Qh/Kmc8B/s=)
2: F1EA8F4657E911F1ACD7923C93833773.roa (hash: bWtw9F8LU24NtnpV5FCzxLT/YLwgD6y8BEgt8uAmOpo=)
3: 20978DD270E411F08F40242AC4F9AE02.roa (hash: ogSJARs+z+FBXZ8bmQQAmyuid/CPa5WTnPrmO/6BH/E=)
4: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: 2Co79ynBgBkfRYtcjArTdkt2fZojdezftQg41GUn3f0=)
5: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: 5DPxa9zh03P/4EIxkUOZTnMchK9kaQkZ16Z7NXsueHg=)
6: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: V+41ntKJN5cZcf4m2jV7VDL18RNscYpp6FiRJv/RGZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Jul 27 08:11:44 2026 GMT
Not After : Aug 3 08:11:44 2026 GMT
Subject: CN=6a6712c0-f002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:ef:9c:a8:e1:2b:a6:9c:45:d8:49:cc:15:
53:9d:a7:15:1b:79:7d:72:d7:3f:8c:7d:57:09:65:
5f:7e:9e:6a:a9:a4:b8:92:55:1e:61:b4:95:7c:d7:
90:5e:35:c2:d2:2d:98:19:8d:b5:9d:8d:a3:48:e6:
80:56:eb:a2:93:0e:de:4c:91:5c:7c:79:5b:ba:b6:
cd:3d:95:a1:2a:e2:5e:2a:b5:b7:49:63:a6:a4:d7:
e8:73:78:1f:34:06:bf:aa:de:4a:37:9e:16:92:2e:
9c:05:9b:b9:5b:cc:82:53:e7:3a:bc:d7:98:55:a9:
40:fd:d0:ab:34:35:30:86:d7:b3:3e:ca:cc:21:a7:
51:be:aa:25:b0:ec:77:59:c5:f8:db:77:f0:52:61:
8d:93:c9:20:3f:65:1e:33:fa:38:f2:26:b6:20:8b:
5e:56:88:40:24:15:4e:2f:ee:88:f5:a7:62:8a:54:
16:3a:9e:5c:b9:3d:be:d5:ba:b3:5f:eb:26:8d:a1:
29:60:3a:2d:b0:1c:72:c4:e7:d9:41:0c:33:bb:93:
94:d7:e7:67:f6:16:d8:3b:09:a0:2e:4c:7b:b7:00:
bd:92:8f:46:66:7b:8f:f6:a7:27:03:1c:ae:43:b5:
8a:8c:1e:09:89:4f:10:7c:97:3b:f4:60:9c:01:db:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:18:7D:07:59:6C:90:BC:2B:D3:2E:1F:B5:89:43:43:10:BD:3F:7C
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6c:14:16:4e:ac:bb:41:fd:ca:28:db:76:8b:2f:69:fc:e8:
9c:24:de:09:1e:0a:e7:96:ef:2c:5a:af:08:d5:fc:2e:f7:07:
1c:16:e8:0f:c1:d7:03:ea:2e:c8:27:51:29:b4:a7:5e:dd:eb:
4c:2d:6b:72:ac:6d:b8:58:7c:a8:f9:2c:0f:e7:51:35:be:c2:
cd:03:d7:b7:2f:80:62:e3:db:c0:62:0d:4a:fb:78:0d:db:74:
e1:41:97:c2:e3:98:6c:b6:5f:4c:00:c3:72:66:40:7a:b2:d8:
42:e5:50:e6:ed:c1:37:2f:35:2f:94:f9:82:82:ff:04:97:46:
5e:78:b4:c2:a9:64:df:58:b7:99:e3:22:13:e0:78:05:3e:15:
f7:51:b6:84:76:c8:3a:09:07:13:eb:c6:4c:f8:be:99:29:d6:
4f:1b:fe:5f:64:fb:60:af:d4:44:5e:29:2e:6b:6f:44:a0:8d:
5e:c3:b3:87:c4:44:a4:5d:c7:e9:51:e1:33:bd:ce:84:a4:0c:
2d:f8:29:03:2d:ea:32:d4:bc:5b:a6:2f:0c:cc:72:b6:0e:20:
d4:73:e3:b8:35:2d:73:c3:14:65:a8:c7:3b:0a:99:2f:34:9c:
d8:e9:c3:e1:49:30:78:03:ef:5e:58:02:29:8c:52:6d:1e:d7:
f8:2c:cb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:49:08 2026 by rpki-client