
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft
File: PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft (raw, json)
Hash identifier: d/l5q7gT3m+b9T2mXWKLJG/F6siQ8uz5oRdQCYCNF8w=
Subject key identifier: C9:0B:8F:C0:86:EC:CD:3F:45:E6:95:26:9A:18:3B:D0:F4:E8:D3:47
Authority key identifier: 3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2
Certificate issuer: /CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft
Manifest number: 0C0C
Signing time: Fri 12 Jun 2026 22:23:48 +0000
Manifest this update: Fri 12 Jun 2026 22:23:48 +0000
Manifest next update: Fri 19 Jun 2026 22:23:48 +0000
Files and hashes: 1: PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl (hash: /xhcEoHftdbKBrI0NY/wwvuHVuCa6DZR9yFLxZ2rGU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl
rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E6AA, serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2
Validity
Not Before: Jun 12 22:23:48 2026 GMT
Not After : Jun 19 22:23:48 2026 GMT
Subject: CN=6a2c86f4-b51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:c0:24:62:52:f6:51:9f:7c:a3:07:f3:fd:
f8:18:2d:2d:ce:d8:79:e3:b1:6e:dd:b3:cf:b1:df:
d9:9f:5a:87:41:c5:61:06:77:b1:91:34:1e:12:9b:
1c:32:e0:36:dd:3b:4e:16:9c:d7:67:80:f7:84:c2:
2a:26:a2:96:86:dc:d1:12:a7:11:43:f6:2a:f1:e0:
e4:38:f0:b7:bc:ed:90:81:79:47:67:3a:a4:58:6e:
b5:84:01:fe:00:22:21:15:9f:d4:6f:26:be:a1:56:
da:c4:32:3a:20:99:d9:55:9a:82:9d:34:f1:fe:fa:
65:b3:64:5d:12:e3:ad:2b:6c:54:b9:81:88:49:7f:
51:74:10:2f:c0:9d:7f:bc:06:9c:5e:bb:4d:76:55:
5b:33:90:f6:79:51:53:02:eb:f8:b2:44:a1:36:d2:
67:da:40:fe:24:e3:82:79:a1:12:4f:c9:15:65:be:
7a:f0:6e:a7:14:a3:27:3a:f5:46:8d:44:99:2e:07:
e5:cf:88:c3:86:fb:3d:76:5f:3e:27:60:ee:4c:76:
5b:40:79:38:bf:6a:41:43:4b:a5:69:30:ee:bf:7c:
5c:d0:6e:c4:11:0a:61:5d:6c:94:ef:52:a8:d0:3a:
cd:2c:30:23:05:74:39:46:3f:5f:94:4f:a4:24:c5:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0B:8F:C0:86:EC:CD:3F:45:E6:95:26:9A:18:3B:D0:F4:E8:D3:47
X509v3 Authority Key Identifier:
keyid:3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:13:7e:bb:9a:70:39:10:81:af:24:e5:de:22:75:a2:b1:89:
ee:ed:2b:e6:fe:84:8e:cb:d4:81:c3:2c:3f:67:54:4a:fc:91:
f0:71:63:3d:6d:37:a5:12:62:b2:43:dd:1b:8e:91:29:e7:f2:
b3:08:b8:08:ac:50:4e:5d:de:a5:b3:f0:c2:bb:fa:0b:f4:81:
6e:05:f7:73:fd:6e:78:8b:b6:5b:9b:3e:9b:5f:61:d4:25:6a:
0f:d4:df:07:39:82:93:ae:ba:8f:87:b5:83:19:d4:64:bd:a8:
bf:bf:c1:6d:84:2b:48:ad:b2:ea:30:09:8e:90:cb:26:58:08:
de:71:7e:02:f8:15:69:47:a0:fb:54:6c:87:be:ea:d4:c4:a8:
16:fa:de:ed:b5:97:f3:13:fe:75:d6:4b:4a:bc:d5:dd:59:e5:
23:00:3f:8a:eb:e5:5a:42:9c:50:eb:12:b7:d5:97:1d:69:db:
01:18:95:5d:68:cc:fd:6e:a9:d7:e2:a9:ee:50:f6:e9:a3:79:
3b:ac:21:b2:27:b2:8b:1a:55:e4:d3:dd:ed:5c:46:8e:03:db:
20:57:16:b5:0f:cc:52:23:3e:9b:4b:1d:f4:5e:d9:57:e1:6c:
b9:5b:ac:f9:6a:13:40:79:50:c5:a9:c7:ff:dd:b2:8f:29:8b:
ef:ae:6b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:53:08 2026 by rpki-client