
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json)
Hash identifier: aO8VIe4zfKFE+CsVc9kwK7e2ThBbKMOrqU79d+no3ws=
Subject key identifier: 24:75:8F:E5:D8:60:57:E9:3B:FB:A9:C6:1D:96:66:ED:47:35:1F:F7
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 047A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
Manifest number: 03E2
Signing time: Thu 29 Oct 2026 01:13:35 +0000
Manifest this update: Thu 29 Oct 2026 01:13:34 +0000
Manifest next update: Thu 05 Nov 2026 01:13:34 +0000
Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: 7emby4J7JNp4KKOUqHIV+zqpAqs648GNGpvgF3h0Qgw=)
2: 20978DD270E411F08F40242AC4F9AE02.roa (hash: Tk49m1bZqNc+bpaPvPZsi9XGA6LF7Y4uynu4sPETCYw=)
3: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: 5DPxa9zh03P/4EIxkUOZTnMchK9kaQkZ16Z7NXsueHg=)
4: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: 2Co79ynBgBkfRYtcjArTdkt2fZojdezftQg41GUn3f0=)
5: F1EA8F4657E911F1ACD7923C93833773.roa (hash: bWtw9F8LU24NtnpV5FCzxLT/YLwgD6y8BEgt8uAmOpo=)
6: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: V+41ntKJN5cZcf4m2jV7VDL18RNscYpp6FiRJv/RGZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 01:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1146 (0x47a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Oct 29 01:13:34 2026 GMT
Not After : Nov 5 01:13:34 2026 GMT
Subject: CN=6ae29dbf-d20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6e:31:6d:a4:14:5f:0e:b3:26:a4:3e:a5:29:
48:3c:a1:7d:44:bd:7f:05:bf:c6:9f:f9:02:56:16:
ff:45:3b:83:c4:48:26:b0:28:22:e4:41:91:2d:55:
8f:b6:2c:9e:5c:49:f0:9c:65:2f:b1:f1:ed:e2:bd:
98:5b:b0:59:8d:bd:a3:b7:e7:01:20:07:e8:f1:b2:
db:2f:5a:63:a3:0b:bf:50:b8:04:88:09:1d:d0:ed:
98:bf:29:4d:b2:30:0e:15:48:5e:d7:2c:ee:e3:03:
00:39:e7:f5:bf:ae:c3:08:de:89:60:79:6e:21:af:
fa:24:7e:ad:df:e5:23:49:30:4c:11:20:23:45:46:
bd:d2:1d:9b:c9:17:71:db:06:f1:93:be:c7:bf:12:
62:88:9e:72:50:f1:47:82:e7:87:f6:c7:c9:e1:d3:
40:f7:4f:c3:2d:16:ea:5c:22:e1:1a:4e:b8:d6:af:
4f:5d:ae:51:9e:51:7f:ae:68:00:8e:39:f7:df:d4:
95:27:d4:f6:37:be:76:52:da:72:ad:03:5a:b2:e4:
30:f6:32:91:fb:c3:6a:d2:69:e9:13:e4:27:20:15:
63:df:00:43:d1:7a:3c:e7:36:36:dc:fd:96:60:5b:
39:8b:e7:51:aa:cd:50:a3:f8:58:6e:e5:1c:05:62:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:75:8F:E5:D8:60:57:E9:3B:FB:A9:C6:1D:96:66:ED:47:35:1F:F7
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7e:37:ca:72:a1:15:1c:11:70:ac:87:f4:57:bf:8c:2e:ba:
e4:38:53:2d:f7:69:90:85:5c:99:0f:f1:1b:1a:8f:e6:78:6b:
5e:28:21:f5:40:c1:ac:2e:fa:ba:e7:9d:7a:6b:83:f7:25:af:
24:0c:21:51:38:a6:f1:67:d8:95:96:4a:2f:b3:f3:a1:79:a3:
8b:ed:37:2a:cd:47:fc:dd:f5:12:48:36:26:84:3b:8c:e5:30:
d7:4d:ad:49:44:9b:99:18:f2:64:3a:6c:dc:ba:e1:3b:f5:e1:
76:e9:71:8b:51:28:5c:2e:0c:90:ad:a7:05:84:32:b2:21:44:
0d:a4:4b:88:36:d7:1c:45:9c:78:18:73:8c:d2:15:4a:60:f7:
61:83:90:b4:91:75:64:98:7b:d8:b9:98:f4:64:2f:02:1f:1c:
e1:75:09:7f:ae:c3:4a:0f:bb:c0:57:68:7a:8e:83:3f:36:e8:
ca:3c:36:db:99:f9:3d:05:12:b4:03:90:28:98:c2:88:14:fc:
51:6f:94:cf:9c:01:b2:7f:47:29:55:81:d1:fe:dd:a0:7c:a6:
d8:bd:d8:a3:c4:d9:4e:20:06:29:bf:6b:79:a6:d8:b5:0d:c0:
15:39:93:cf:6f:85:6a:d8:72:70:9b:6a:7d:21:56:24:93:82:
e0:ad:ee:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB
MEFDRDQ0N0YwHhcNMjYxMDI5MDExMzM0WhcNMjYxMTA1MDExMzM0WjAYMRYwFAYD
VQQDEw02YWUyOWRiZi1kMjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgW4xbaQUXw6zJqQ+pSlIPKF9RL1/Bb/Gn/kCVhb/RTuDxEgmsCgi5EGRLVWP
tiyeXEnwnGUvsfHt4r2YW7BZjb2jt+cBIAfo8bLbL1pjowu/ULgEiAkd0O2YvylN
sjAOFUhe1yzu4wMAOef1v67DCN6JYHluIa/6JH6t3+UjSTBMESAjRUa90h2byRdx
2wbxk77HvxJiiJ5yUPFHgueH9sfJ4dNA90/DLRbqXCLhGk641q9PXa5RnlF/rmgA
jjn339SVJ9T2N752UtpyrQNasuQw9jKR+8Nq0mnpE+QnIBVj3wBD0Xo85zY23P2W
YFs5i+dRqs1Qo/hYbuUcBWJxpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCR1j+XY
YFfpO/upxh2WZu1HNR/3MB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG
NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S
SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT
clM0c0VVeUN4bFdnck5SSDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe343ynKhFRwRcKyH9Fe/jC665DhTLfdpkIVcmQ/xGxqP5nhrXigh9UDBrC76
uuedemuD9yWvJAwhUTim8WfYlZZKL7PzoXmji+03Ks1H/N31Ekg2JoQ7jOUw102t
SUSbmRjyZDps3LrhO/Xhdulxi1EoXC4MkK2nBYQysiFEDaRLiDbXHEWceBhzjNIV
SmD3YYOQtJF1ZJh72LmY9GQvAh8c4XUJf67DSg+7wFdoeo6DPzboyjw225n5PQUS
tAOQKJjCiBT8UW+Uz5wBsn9HKVWB0f7doHym2L3Yo8TZTiAGKb9reabYtQ3AFTmT
z2+FathycJtqfSFWJJOC4K3u3A==
-----END CERTIFICATE-----
Generated at Fri Oct 30 18:05:47 2026 by rpki-client