
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json)
Hash identifier: SG4jhzbj8ztqnaA5ftWuiC7XQo8HWIk6lR1QEcUar4s=
Subject key identifier: 82:19:DA:74:AE:CB:F6:31:33:04:A4:66:F7:9A:1D:FF:BF:42:2B:9F
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial: 15E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
Manifest number: 15C0
Signing time: Thu 16 Apr 2026 16:41:51 +0000
Manifest this update: Thu 16 Apr 2026 16:41:50 +0000
Manifest next update: Thu 23 Apr 2026 16:41:50 +0000
Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: i3LNI/DP3AcxVLrOY1GkBiGZ7Xu+ri3nZ1bH87Yifow=)
2: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: GS7Hz+JO/tFd7f6jkV506RLU0L8tY/ifzdZjJQhwPzk=)
3: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: 49JEiOnck3YIqSnh0w+N5FmwAfU3DdS+vbKJpG7LI7Q=)
4: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: GqZMFA0L7ACjbBy6EEKhCEh6yrXjeUh2/sYjzUSadNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5601 (0x15e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Validity
Not Before: Apr 16 16:41:50 2026 GMT
Not After : Apr 23 16:41:50 2026 GMT
Subject: CN=69e1114e-5b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:20:82:46:b4:c0:fb:0c:6d:4f:af:3e:94:
e1:a6:26:db:67:10:3d:f8:2a:84:e6:d9:ad:9a:85:
8f:c2:6e:75:38:4d:bd:20:6a:f7:dd:25:fd:97:2e:
23:36:e7:1f:25:15:b5:4f:4f:91:c3:3f:9f:58:e4:
01:d2:79:29:2c:e7:c3:49:da:3b:d7:d2:6d:55:8a:
fe:90:41:87:89:26:1b:5c:22:f4:f8:09:d4:a5:c8:
d7:75:36:9e:e4:05:c9:ef:e7:af:49:c6:29:5d:38:
b8:66:94:29:22:b3:03:bc:46:aa:de:1c:e8:3b:c0:
00:88:86:c1:62:7e:cf:ab:31:2b:d1:fd:57:6f:20:
13:2b:0e:80:23:28:b9:f7:f6:34:45:ea:e3:11:30:
18:56:b7:b4:ac:46:a5:3a:57:12:22:02:79:ce:b5:
27:83:01:a6:42:84:e9:1f:6c:e1:b0:a2:94:b2:0a:
4c:e5:9f:1d:33:35:69:a8:d5:09:56:14:48:39:1f:
ee:57:c9:ce:da:22:0b:0f:dc:74:9c:fb:ca:a6:86:
e7:ea:84:23:26:56:ca:53:6f:bd:60:fd:7c:b8:1b:
24:c1:99:3e:84:9d:bb:17:5c:04:3e:51:66:4a:d4:
ed:6c:82:7e:5f:62:51:0c:e2:13:98:3f:04:19:df:
ca:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:19:DA:74:AE:CB:F6:31:33:04:A4:66:F7:9A:1D:FF:BF:42:2B:9F
X509v3 Authority Key Identifier:
keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:50:a0:27:38:ae:c3:4a:b3:de:65:89:32:1b:94:9b:d9:21:
fa:26:22:cc:87:20:8f:6e:dc:12:2d:37:1e:fc:b9:a0:e5:dd:
44:e8:75:28:c1:21:23:15:70:5b:ea:d9:21:a2:ac:76:9b:f0:
34:4a:eb:81:eb:94:42:1f:b6:f5:b2:28:99:f4:6a:cd:ee:c1:
9d:9f:fe:38:2a:b4:66:50:a5:87:3d:a0:46:54:a7:3f:5c:27:
ee:bc:c9:ed:aa:f2:fe:6f:e3:3f:e4:23:90:a7:7d:8b:ea:60:
8f:16:ca:07:e2:18:b4:33:b7:f9:a7:d3:42:76:04:a5:c4:b4:
f5:0d:74:cd:c1:0f:04:25:a7:e0:dd:6d:4c:8a:48:e2:0f:3e:
fe:bd:5c:1c:4d:1d:81:c6:d5:2c:f7:d3:3c:2d:ec:0e:74:6b:
42:82:94:a7:c3:b2:6c:7d:74:b8:10:70:6b:8f:9b:a0:eb:eb:
e9:91:16:ec:ac:3d:b2:a2:a3:75:0d:cd:c5:b8:8f:05:fd:d8:
37:43:e1:65:54:6e:be:02:e5:28:a4:46:da:57:25:4b:40:ff:
a8:0d:f3:f1:6d:c2:08:f6:34:33:f7:23:31:d9:9a:ef:88:bd:
66:9c:7a:32:36:f6:fc:12:a1:8b:d2:8c:f2:df:ff:0f:87:75:
0d:97:44:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:15:37 2026 by rpki-client