
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
File: PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json)
Hash identifier: 2/pyadzqyliMWCUjCCvUDM0N+N2dprFolulQ5us1wq0=
Subject key identifier: 9A:5F:CA:47:5B:BD:02:94:32:2F:32:E0:93:38:15:78:D6:DD:E4:75
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Certificate issuer: /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial: 04D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
Manifest number: 04C9
Signing time: Sun 01 Mar 2026 22:56:18 +0000
Manifest this update: Sun 01 Mar 2026 22:56:18 +0000
Manifest next update: Sun 08 Mar 2026 22:56:18 +0000
Files and hashes: 1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: vN7AxbK+JoPdPro5GOb1tR+v+SHv1Rz+t/adaB0iDL4=)
2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: MZAkwEcI/RhPtb0HLVaP6vZemaPmWHrryFBvzadhdrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1233 (0x4d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Validity
Not Before: Mar 1 22:56:18 2026 GMT
Not After : Mar 8 22:56:18 2026 GMT
Subject: CN=69a4c412-9477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:9c:df:ad:b7:96:fc:7f:bf:d8:42:d6:63:
3c:fc:d4:96:f9:c8:9d:92:a8:9f:62:a0:e3:7c:c0:
d1:96:77:83:eb:2e:59:58:e1:6b:32:bf:4f:20:f4:
96:e7:91:56:0d:da:3e:2e:61:30:ae:4e:a1:35:a3:
7e:d5:b0:70:af:d0:80:f9:05:a6:3b:23:77:b0:f5:
a1:b5:8e:d8:17:d4:42:41:28:59:31:ba:66:9c:4c:
6e:8d:49:a1:f5:04:d2:48:63:83:2e:f7:fa:47:03:
37:60:e6:cb:82:52:8f:70:9d:a1:cb:e9:c0:92:bb:
37:ac:40:41:f3:b1:ba:d4:80:5f:6d:d7:9e:34:99:
c0:64:67:a1:f0:85:ad:39:da:c7:30:08:1c:67:87:
bf:df:a9:ec:ac:84:33:eb:66:b0:2f:b9:8d:dc:ef:
12:43:f9:e9:e6:2e:5f:aa:14:d1:23:9b:bb:d4:ea:
63:a6:cc:82:e2:43:03:19:b0:9b:e9:df:98:94:4e:
6d:36:97:32:e4:b8:b0:d7:a0:45:32:aa:1c:6e:13:
ca:10:cf:b6:1d:da:4c:2d:36:6a:ac:51:7f:ee:24:
de:44:19:19:d0:dd:9a:d0:00:16:44:ae:53:95:cb:
94:dd:a3:eb:4c:ee:11:05:44:51:e6:b8:81:71:79:
38:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5F:CA:47:5B:BD:02:94:32:2F:32:E0:93:38:15:78:D6:DD:E4:75
X509v3 Authority Key Identifier:
keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4d:eb:58:5c:6b:94:94:ee:38:c4:e2:33:2b:5c:a2:4c:d0:
a7:f5:8d:71:7a:08:ce:81:38:32:91:b8:1c:0f:65:cf:74:d9:
88:9f:01:80:bc:4a:22:29:7e:db:5f:c3:2f:43:a5:29:c4:c0:
0b:55:27:26:ff:fa:76:c8:91:42:42:91:20:5b:83:48:2b:3c:
79:80:3b:05:b1:83:f8:fb:be:0b:34:52:75:49:29:d9:75:29:
5d:a2:02:f6:03:3c:c6:38:c6:dc:a1:3b:8e:e1:e3:df:93:93:
e7:55:72:1a:cb:92:fd:12:1d:96:ed:42:69:76:27:b0:43:94:
1d:06:3a:73:45:c7:83:83:5d:97:7b:8b:17:02:a6:99:f4:cd:
9b:c2:4d:16:ce:46:f9:77:5e:94:3b:a4:29:c3:43:4c:ab:f9:
82:4e:57:1e:4b:a0:af:ed:19:3f:92:4a:cf:76:7c:23:21:ff:
2d:9b:35:07:30:96:74:af:81:7e:24:0f:ef:76:0b:f8:79:bf:
d1:03:83:d0:39:ae:70:2a:c5:53:6f:e9:4b:4a:74:15:f0:2f:
4c:33:89:49:09:18:e4:5f:c9:fc:0c:47:c4:95:1e:a6:8d:0e:
8f:4f:b7:83:af:1c:0e:00:9a:62:24:58:c1:4b:bd:c3:45:51:
50:24:a8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:25 2026 by rpki-client