
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
File: PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json)
Hash identifier: OxEstjQ5rriXwvAprTwX9++fxuCpWUd3O/v5DT1qwdo=
Subject key identifier: D7:9D:E7:FC:18:1E:2E:45:7B:B8:26:CD:EB:D1:02:62:FA:EA:66:44
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Certificate issuer: /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial: 053B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
Manifest number: 0533
Signing time: Thu 24 Sep 2026 23:24:19 +0000
Manifest this update: Thu 24 Sep 2026 23:24:18 +0000
Manifest next update: Thu 01 Oct 2026 23:24:18 +0000
Files and hashes: 1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: 2TEvgSNsVDDb4zoMW3/E7lzu8FeWOD2T9zok6LVJRr0=)
2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: MZAkwEcI/RhPtb0HLVaP6vZemaPmWHrryFBvzadhdrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1339 (0x53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Validity
Not Before: Sep 24 23:24:18 2026 GMT
Not After : Oct 1 23:24:18 2026 GMT
Subject: CN=6ab5b122-5869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:bf:89:a6:9b:e8:8d:0f:e0:88:c8:17:0a:
d2:7d:9a:1e:89:e3:7d:ed:bc:1d:3b:d7:8b:01:2a:
39:76:4c:c7:03:0b:bf:ee:de:85:1e:0e:48:a4:8a:
b0:f3:1a:f2:66:b4:64:16:12:ab:cd:9e:4c:7a:5a:
94:79:6c:d4:f6:8a:11:fb:0f:90:3c:4f:af:0c:d6:
f7:3e:dd:40:7f:cb:26:c3:bf:ce:07:d2:69:8a:2a:
21:da:28:dc:0c:1d:33:8c:56:81:9f:c5:bc:62:30:
60:0e:39:c1:3f:5c:d7:95:43:8c:70:f0:c9:73:e0:
30:4c:82:46:70:75:e9:d5:8d:a0:36:62:d9:ff:08:
64:ef:d6:a5:85:56:ed:48:b6:dd:d7:df:c1:e7:b3:
8d:48:38:38:4d:cf:a7:86:9b:e8:47:7d:08:04:20:
2c:b3:32:6b:a4:bf:28:ef:57:89:25:14:c7:a8:b3:
40:99:6f:71:b5:ea:48:ba:6b:fc:93:44:3a:8d:fd:
40:3e:a1:36:b8:aa:24:a5:84:13:a5:b9:23:a6:0a:
65:30:3d:73:5d:8f:84:5f:05:63:d2:42:9c:bb:c3:
95:b8:d0:33:b0:f0:4d:e6:8a:df:c9:ab:a4:a5:3b:
dc:76:9c:bc:85:92:11:d2:d5:03:8d:f4:bd:8c:75:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9D:E7:FC:18:1E:2E:45:7B:B8:26:CD:EB:D1:02:62:FA:EA:66:44
X509v3 Authority Key Identifier:
keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:b7:59:95:74:68:64:47:88:55:ac:57:41:04:13:f3:97:f6:
b9:6b:46:15:f4:52:1f:8c:4f:1f:59:64:e9:1f:20:04:d6:72:
25:bc:15:f4:f2:9f:6d:b6:c3:96:b2:a0:d4:35:38:d2:2a:37:
e5:09:91:2e:ad:3b:95:60:93:b3:79:64:7e:1a:80:dd:ef:9c:
68:5f:a6:b0:d3:2f:41:2c:e0:8b:35:8e:9e:b6:06:9d:10:ec:
dd:0c:2f:31:c9:bb:46:3c:9a:68:34:f9:e0:57:c8:5d:11:74:
40:01:01:c3:e7:81:49:70:61:f9:4f:46:0a:5d:11:47:b3:03:
28:4c:ec:8c:6b:66:22:50:56:86:54:fd:b8:cb:6c:e8:d7:e6:
1a:2e:87:67:98:26:d3:6e:d4:09:e0:00:87:fd:88:19:56:2d:
2e:d8:67:ec:3f:22:c2:b6:dd:93:a4:5d:71:3c:ad:fd:0a:a5:
a6:8b:f4:01:50:8f:d1:a1:4f:01:b8:b6:ed:72:9f:a7:75:6d:
53:1c:73:7c:7b:9a:24:bd:1c:ca:e6:11:d9:e0:49:f0:83:e9:
cd:87:ef:5e:93:a8:3e:2b:3f:93:d7:a2:d9:37:de:66:57:e3:
44:7f:2c:6a:32:57:11:f1:dc:31:36:f4:eb:8d:a1:15:53:16:
bd:2a:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:10:17 2026 by rpki-client