
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
File: povAkQ-DHeyBilCjIUX3Q1XOY8A.mft (raw, json)
Hash identifier: 3rqgRsbOVsuxsP6YGQL2PUN6X0t2nnlHf+U0//ti+5I=
Subject key identifier: 4F:C1:6D:17:50:0A:37:CB:4B:F0:25:77:47:4A:2E:67:B8:BE:23:69
Authority key identifier: A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0
Certificate issuer: /CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0
Certificate serial: 06BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
Manifest number: 06B8
Signing time: Sat 28 Feb 2026 22:50:25 +0000
Manifest this update: Sat 28 Feb 2026 22:50:24 +0000
Manifest next update: Sat 07 Mar 2026 22:50:24 +0000
Files and hashes: 1: povAkQ-DHeyBilCjIUX3Q1XOY8A.crl (hash: OT0Cr9ZcCQQ070QTZwGf89fx1Y+mx8mmdbmp28t8qdQ=)
2: 7CEDB29645AB11F0B5F06B1EC4F9AE02.roa (hash: SOend745Ty2THQMalNwJuy4Bzbzq44VzFyWqGOXgtig=)
3: 61C842F4467A11F08609BD71C4F9AE02.roa (hash: CN7R3hh6U/a3moc9IYNNpKBkUBMAltkFsKNKJ/Ee7QI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl
rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727 (0x6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B6FC, serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0
Validity
Not Before: Feb 28 22:50:24 2026 GMT
Not After : Mar 7 22:50:24 2026 GMT
Subject: CN=69a37130-889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c5:51:f7:23:33:23:d6:34:35:f5:83:b1:58:
0f:75:20:1d:43:95:e1:24:ac:0e:7c:66:25:b0:4c:
4d:f6:a1:b8:c5:d6:7b:b0:d1:8d:26:d2:f3:85:e4:
a4:c9:68:5d:d0:41:c3:04:a7:c4:76:d0:ed:17:ae:
ea:8d:c0:d1:4a:59:50:b4:7f:8f:13:ef:32:e4:ca:
d4:90:f9:51:22:97:08:22:3f:5b:92:03:38:cc:e6:
ff:73:7f:21:64:16:84:95:20:c2:7a:fd:b1:65:a4:
d3:77:85:0a:2a:c0:b7:cc:8e:53:7a:88:ef:10:a2:
e5:2d:49:c0:10:b0:0a:15:5f:ce:d1:9c:86:6f:52:
86:59:c3:bb:6d:b4:d1:de:e0:f4:50:b3:61:b4:2f:
aa:dc:7f:8f:03:61:d1:aa:84:11:81:bc:0a:2b:ce:
b7:98:78:bd:2b:c9:cb:30:70:23:a8:3c:26:7e:de:
72:33:8f:be:c3:9b:d6:34:eb:13:12:4c:7f:f2:f9:
72:fd:6f:8a:58:de:8d:53:34:7c:1b:2f:91:61:df:
c7:91:d4:4b:58:40:22:5a:f4:27:3e:ec:89:f7:4f:
08:78:df:00:4f:23:b3:08:2b:73:0c:a8:a0:aa:42:
89:49:8a:b4:71:cf:e1:7b:76:2e:00:e0:c7:1a:13:
5d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C1:6D:17:50:0A:37:CB:4B:F0:25:77:47:4A:2E:67:B8:BE:23:69
X509v3 Authority Key Identifier:
keyid:A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:78:af:65:01:41:09:df:19:b2:4a:ed:cd:78:c5:d6:40:e7:
a0:5e:5c:1b:ff:9f:dc:0f:34:e7:55:e0:f1:10:2c:96:4c:df:
47:85:33:3b:70:26:51:47:8e:b6:8c:43:88:a3:3b:36:52:f5:
96:f0:37:ef:c4:12:8d:1c:33:e3:b9:7c:3d:63:8f:df:64:47:
c3:ba:50:1c:c9:a9:70:00:31:ca:d1:1f:44:8a:30:c9:17:17:
e9:9f:c9:fb:6b:24:16:d5:1f:a1:5f:e7:2a:77:ff:e9:ad:9d:
0d:df:b4:69:5c:b0:c7:84:d1:c8:ba:2e:55:61:b2:fb:78:fc:
b1:69:5f:37:ed:25:b7:4d:11:8a:9c:99:cf:60:75:1c:a2:ad:
a0:95:c8:bc:1b:31:78:58:72:96:e9:4e:4a:9f:8d:cd:80:a1:
4a:87:60:43:ab:b6:9b:d1:e1:c1:bd:e6:e4:bc:75:da:4c:eb:
83:8a:e7:10:be:96:9f:85:15:39:45:2b:ac:81:92:d8:10:72:
56:41:9b:0a:be:d4:bf:d8:b8:0a:7e:5c:54:06:5c:d7:db:81:
4b:22:80:4a:03:f4:28:fc:6b:b8:01:13:2f:9b:74:b8:83:1f:
a2:a9:dd:2c:18:20:7d:8e:5e:c7:05:fe:ae:2e:0c:7a:9c:6e:
72:85:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:48 2026 by rpki-client