
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json)
Hash identifier: yFTy8wHE9/hNiXPXciJzvIzpTSlCJDxpn6c8ZH1fgns=
Subject key identifier: 66:62:D7:44:CE:A8:E4:B4:BC:40:AD:F2:88:E3:A9:41:99:2E:59:27
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial: 15FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
Manifest number: 15DD
Signing time: Fri 12 Jun 2026 16:42:14 +0000
Manifest this update: Fri 12 Jun 2026 16:42:13 +0000
Manifest next update: Fri 19 Jun 2026 16:42:13 +0000
Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: y/aChmahRZNN0uhHBeBjjRIfLtSwFkTxtui7jSCjMkA=)
2: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: GqZMFA0L7ACjbBy6EEKhCEh6yrXjeUh2/sYjzUSadNQ=)
3: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: 49JEiOnck3YIqSnh0w+N5FmwAfU3DdS+vbKJpG7LI7Q=)
4: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: GS7Hz+JO/tFd7f6jkV506RLU0L8tY/ifzdZjJQhwPzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:42:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5630 (0x15fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Validity
Not Before: Jun 12 16:42:13 2026 GMT
Not After : Jun 19 16:42:13 2026 GMT
Subject: CN=6a2c36e6-6fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:28:e2:31:c2:c8:fe:c0:f7:f4:6b:2d:f1:
de:66:a4:8e:09:98:18:ef:31:7b:01:08:ff:d0:4d:
af:2d:02:e7:44:c4:c4:18:f5:ff:73:60:78:0c:54:
26:66:17:29:de:fc:8f:27:5b:4b:35:cf:f0:cb:0c:
b6:c5:1a:e5:9a:d0:ad:ac:56:ef:ef:88:1e:8c:f1:
06:4f:42:13:56:2e:a2:54:9a:18:5e:43:d2:b0:db:
27:ff:97:d3:00:d8:c8:46:ed:95:d7:31:f8:13:44:
c0:7b:e0:0d:ac:63:51:4b:2f:87:4b:78:e3:84:25:
57:10:ac:0b:c8:5d:29:3e:9e:c2:7d:cc:ab:6f:5d:
b5:f6:9d:68:07:d2:39:8a:f1:76:d7:b2:16:84:53:
b2:2d:1c:43:b7:c4:ce:e3:fa:9c:bd:83:16:aa:ba:
61:40:b7:d2:24:9d:83:b4:67:67:ab:42:52:06:9c:
25:92:af:57:51:6f:99:bf:52:3d:82:87:d0:08:02:
d6:40:54:be:5a:55:4c:0f:db:bb:75:a6:4d:6a:87:
e2:90:63:1c:ac:9e:07:fa:88:51:6c:09:ae:06:7f:
ab:68:47:6c:95:02:19:c4:0e:bd:7b:04:52:46:81:
0c:7b:ad:5c:da:b8:af:f3:37:83:c0:bd:d6:60:b3:
a2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:D7:44:CE:A8:E4:B4:BC:40:AD:F2:88:E3:A9:41:99:2E:59:27
X509v3 Authority Key Identifier:
keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e1:ec:f5:d4:3e:f6:f5:c5:1b:f6:9d:8f:6a:29:e2:7e:bd:
96:8d:7d:15:cb:71:e3:4f:b3:f9:2b:f8:8b:17:66:02:fa:60:
e3:e9:75:46:b2:06:5c:b4:3d:b9:b9:e2:0a:e3:f6:92:19:8c:
20:51:d7:ae:f4:26:1e:26:8e:db:4e:62:45:6c:cb:d9:aa:d0:
64:71:6b:50:5c:d1:f3:a4:a4:39:5c:ae:ca:28:c8:f7:97:c5:
d5:73:29:40:53:fe:c1:49:e3:6f:da:d1:5f:55:ba:32:40:93:
29:59:5f:b4:93:1b:5c:07:74:8f:b9:c2:da:38:8e:11:ee:13:
0e:98:5c:28:be:e5:6d:a5:5f:ac:04:91:64:41:68:7b:4d:3c:
ac:6a:37:65:0d:ed:bc:26:87:2e:6a:ee:34:cf:38:3f:33:d5:
a4:c9:51:20:f5:16:83:50:f8:c2:13:19:d0:b4:37:dd:26:e1:
8b:06:d6:fc:41:61:2a:bc:03:c4:12:44:76:53:ab:79:23:08:
a1:8d:d0:89:74:93:5f:7c:90:7e:5d:56:3c:b5:b1:10:c1:80:
ad:b2:85:7a:f5:68:99:a1:a1:ac:d8:b1:9e:88:a7:1b:ea:15:
15:49:ee:09:ea:d5:dd:8e:6f:7d:a4:e0:fb:07:22:7d:42:d8:
72:9f:2b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:34 2026 by rpki-client