
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
File: povAkQ-DHeyBilCjIUX3Q1XOY8A.mft (raw, json)
Hash identifier: Wa5IgVgKvfM49lJNVNfaPZyCKT0uOu2ufkPh9WRf4OI=
Subject key identifier: 60:71:0A:9B:B2:ED:67:33:D7:73:A4:4D:B3:52:38:29:44:64:45:5C
Authority key identifier: A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0
Certificate issuer: /CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0
Certificate serial: 06DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
Manifest number: 06D2
Signing time: Thu 16 Apr 2026 22:10:10 +0000
Manifest this update: Thu 16 Apr 2026 22:10:10 +0000
Manifest next update: Thu 23 Apr 2026 22:10:10 +0000
Files and hashes: 1: povAkQ-DHeyBilCjIUX3Q1XOY8A.crl (hash: 9fZSOnEtOyyWedFC6JWn8zYTB0E1o9+fyAxQdIN5d+w=)
2: 61C842F4467A11F08609BD71C4F9AE02.roa (hash: K7iLZNjUBsTXkR+3cN67qQlcxW/qI+RTqNNea+kXaX8=)
3: 7CEDB29645AB11F0B5F06B1EC4F9AE02.roa (hash: IAGVgWXaDtA7MgPpLTjnDerYepQtYeq654fjcxvmnPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl
rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B6FC, serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0
Validity
Not Before: Apr 16 22:10:10 2026 GMT
Not After : Apr 23 22:10:10 2026 GMT
Subject: CN=69e15e42-3393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:6d:3c:80:fb:ab:7c:3b:c0:22:ef:05:20:
a4:2a:6e:5e:f7:6a:b0:98:df:5d:4b:f4:c0:f2:5c:
31:f5:38:c0:05:5f:bb:2c:2a:2f:cd:1e:be:d9:8e:
59:dc:d3:37:eb:e2:be:8c:25:f8:26:b9:06:4e:85:
35:78:80:5d:be:fc:bc:f3:a8:63:43:d4:be:ec:bd:
79:43:d9:b4:f0:c1:0a:77:d6:ba:70:9b:bf:76:f3:
16:24:ba:7e:e7:03:ce:c2:5e:2a:c5:47:68:ee:b1:
34:5f:ad:13:84:9c:e9:c7:31:00:e0:47:03:77:1e:
7f:5c:6a:72:ea:e9:31:19:57:61:5d:78:74:33:02:
f8:90:a8:aa:6d:28:a4:1a:04:84:90:9b:6f:fc:40:
33:ef:f6:3f:17:74:37:18:fe:1b:21:f5:ad:dc:7c:
c8:c9:e5:8d:3a:57:6a:54:61:b9:c2:9f:08:52:14:
16:14:41:dd:be:3f:45:26:a5:80:f0:0c:0a:5b:d0:
bd:cb:99:37:e7:45:c0:a6:57:19:7d:cd:1a:80:19:
bf:62:2f:54:e5:60:45:e8:72:d7:93:7a:92:36:12:
9d:55:53:46:5e:fe:b3:aa:fa:2b:f5:36:68:31:87:
04:56:40:16:3f:4e:34:7d:b2:de:78:ed:be:a8:2a:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:71:0A:9B:B2:ED:67:33:D7:73:A4:4D:B3:52:38:29:44:64:45:5C
X509v3 Authority Key Identifier:
keyid:A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:74:76:2d:27:a0:2d:e1:1a:7a:1f:75:86:3a:24:0b:ea:2a:
a1:81:4a:8d:aa:d4:f3:12:e3:2e:77:30:4a:d0:a6:77:4a:5c:
3c:06:fb:5e:35:b7:9a:3f:f9:89:d0:8c:4a:53:35:0a:35:d8:
b7:86:c8:93:18:7d:59:a7:78:6b:e4:ea:90:50:11:8c:30:da:
47:52:95:93:f0:0e:8c:f8:09:61:a3:61:b6:f9:cc:5d:0f:f3:
d2:ef:47:87:c3:68:6b:33:5c:79:f6:7a:0a:41:cf:05:be:be:
5b:9f:a5:4b:ff:38:20:32:e8:dc:0e:af:d2:d4:70:68:15:6d:
a1:9e:d6:e7:7d:3c:66:35:59:99:5b:86:4a:97:52:dd:3d:d3:
f9:82:3d:ab:0d:f0:d0:37:b7:34:cb:51:86:04:dc:df:ca:4f:
c0:dd:66:e6:68:00:73:d8:0b:95:47:a2:91:12:78:18:c6:0c:
a6:dd:50:73:b1:2f:77:4e:1f:70:0d:c2:92:0c:03:8a:73:ea:
c6:a0:19:97:e1:56:69:87:7b:fd:1d:c6:4a:38:ea:a3:d3:f0:
5f:8d:b2:f6:69:5e:94:ed:6a:df:0b:95:80:d1:1a:d5:d6:b8:
c3:66:96:24:35:f0:0c:2a:4e:4e:57:95:4b:94:84:f9:34:ef:
47:5f:59:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:11:50 2026 by rpki-client