
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft
File: pKVwtST2YpG2kJvyMTPV24NQQe0.mft (raw, json)
Hash identifier: iLPlF6H+qvYgdKY7G5oGgQyz0FIBJwdgF+aKlSR4v4Q=
Subject key identifier: 45:1E:F4:68:5D:26:80:9B:7A:C7:19:AB:1A:64:21:47:DA:9D:96:45
Authority key identifier: A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED
Certificate issuer: /CN=A91A6C1A/serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED
Certificate serial: 4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft
Manifest number: 45
Signing time: Tue 13 Oct 2026 09:15:45 +0000
Manifest this update: Tue 13 Oct 2026 09:15:45 +0000
Manifest next update: Tue 20 Oct 2026 09:15:45 +0000
Files and hashes: 1: pKVwtST2YpG2kJvyMTPV24NQQe0.crl (hash: 5iV0s7xNr3wGGAcV9n0F5n9M7e/NZ7LMf+XuEvMavQ0=)
2: 694EC58664AE11F189DF701D9347A888.roa (hash: Mz6Te07lf/TFttYs/5xZ/WVJKDZVoMpf6rbwNPc0WGA=)
3: 8B417B6064AA11F19AE9C6D58F47A888.roa (hash: VxBq9ev4olTZHWXFb/0pr2uIN1FLk3ZIw2Udkr1ORSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl
rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 09:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6C1A, serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED
Validity
Not Before: Oct 13 09:15:45 2026 GMT
Not After : Oct 20 09:15:45 2026 GMT
Subject: CN=6acdf6c1-e4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:e6:23:33:01:57:1d:26:ee:70:73:ac:40:
38:2b:e7:0d:71:dc:f5:5d:f5:10:42:1d:07:a4:e6:
5c:03:1f:40:62:8c:fa:4b:70:ea:2d:a8:db:b2:f1:
8c:24:67:c0:6d:d2:7a:14:39:d1:f2:26:0f:72:46:
13:46:f9:13:63:3d:de:09:fe:7c:8d:51:01:e6:d7:
7c:27:73:ee:7b:97:ae:1f:00:46:94:a5:5a:44:16:
1c:54:dc:06:37:6a:fa:db:d6:2a:70:63:55:f6:05:
97:89:b5:ed:9e:5f:d8:eb:f7:8a:60:a1:12:26:cc:
37:3c:14:31:f5:be:71:cf:04:06:45:33:3f:3c:7e:
b6:77:dc:f8:ab:c2:3c:88:33:b3:4f:3b:42:4d:02:
7d:68:c8:32:53:b7:00:77:06:d7:83:60:4a:b9:5c:
e2:b4:89:19:98:9b:ec:1e:89:43:42:0f:72:f6:7c:
86:fb:56:75:72:11:d4:ad:a8:d5:be:d4:67:77:46:
a8:27:1a:90:85:1e:7a:84:b2:ad:3c:ac:f5:59:0a:
82:4f:17:8a:59:09:3c:37:e5:8c:0d:31:cb:2d:2f:
31:a1:95:40:8c:3b:72:1f:29:e2:d7:5c:e2:71:1c:
42:b9:8a:ff:36:36:24:18:e3:07:b3:ce:60:65:b5:
f6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1E:F4:68:5D:26:80:9B:7A:C7:19:AB:1A:64:21:47:DA:9D:96:45
X509v3 Authority Key Identifier:
keyid:A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:08:75:94:62:d2:4a:71:91:30:a9:e5:1f:6f:f4:52:4a:7f:
27:77:77:ce:56:71:94:b9:b5:fc:51:fc:90:49:69:45:e7:c0:
0f:31:7e:bb:e7:6d:4b:a0:28:56:a3:80:dc:02:77:1c:82:8f:
0b:f7:a2:67:1e:fa:c8:22:dc:c6:ca:77:27:13:d6:98:66:2d:
7d:41:53:7a:1d:a6:bd:d7:6b:42:ec:56:17:f1:1c:0d:8b:96:
12:0f:7b:2b:f4:f0:4a:59:51:39:df:12:86:48:82:a2:4a:d4:
f4:e7:30:21:10:49:80:43:18:fc:ec:28:97:fe:65:3a:a1:ac:
64:23:28:dd:15:c0:6d:86:43:09:ca:ad:25:77:58:14:d9:f8:
02:0c:ee:6b:08:ca:fb:93:69:79:61:a7:dd:59:8a:1e:84:12:
e5:f0:8a:db:3a:62:44:df:e7:8c:63:8a:b9:48:f0:90:12:94:
c5:28:c8:08:d9:6d:50:75:ea:55:be:84:a6:c0:d4:e3:69:48:
cd:0e:22:f0:7d:26:ac:cb:e9:7e:4d:80:e7:3a:d9:c3:8a:e5:
7d:2f:00:0d:d5:6a:05:02:0c:1e:a0:74:41:1e:d5:e1:c4:05:
a1:f3:c7:fa:f1:19:90:3e:42:3a:98:4c:2c:90:11:d9:10:2e:
40:61:42:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:36:34 2026 by rpki-client