
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
File: PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json)
Hash identifier: AXwaKdCd1YaZtTtAQDYEiaKWvroAbKfP3YDGjEiRJ8I=
Subject key identifier: F6:C4:7D:4B:0D:14:F7:C6:5B:8A:AB:F9:83:68:22:DD:29:A9:71:83
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Certificate issuer: /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial: 051C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
Manifest number: 0514
Signing time: Mon 27 Jul 2026 00:37:54 +0000
Manifest this update: Mon 27 Jul 2026 00:37:53 +0000
Manifest next update: Mon 03 Aug 2026 00:37:53 +0000
Files and hashes: 1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: Wj7FM4J3/drozxPZ1hraFL2BHscSlZ9Fl8gmA4OTadA=)
2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: MZAkwEcI/RhPtb0HLVaP6vZemaPmWHrryFBvzadhdrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1308 (0x51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Validity
Not Before: Jul 27 00:37:53 2026 GMT
Not After : Aug 3 00:37:53 2026 GMT
Subject: CN=6a66a862-9e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:b6:9b:28:da:59:28:e7:9e:93:e2:f9:ba:
5f:4c:c0:b9:d2:72:58:91:19:cb:22:fd:a6:7f:58:
f8:12:8e:46:91:12:00:74:4a:d4:ca:94:ed:3d:4f:
40:77:1a:aa:6a:66:74:ec:10:6a:f1:33:2b:bd:bf:
c5:14:10:a6:ce:09:50:c4:6e:0a:3e:a5:68:e3:d0:
10:2e:7a:95:81:2a:b0:34:f2:ed:ab:12:1e:91:83:
4c:46:bc:b4:a1:f4:f3:76:22:ab:63:37:aa:d9:a3:
d4:b3:15:d2:a1:9c:af:69:d8:85:2d:c5:45:85:76:
86:a2:d6:8e:5e:78:7c:32:75:55:e3:27:e6:5d:e6:
b9:0c:b0:f5:c9:ba:74:62:90:d8:8b:96:b7:28:d2:
c2:68:e5:e7:4d:15:2c:9a:c7:eb:a9:95:a8:70:d1:
48:38:38:91:87:fc:d6:60:2e:7d:13:e1:81:9a:16:
0d:80:ca:b6:d6:2c:8d:67:f3:cb:e4:a6:a4:14:9e:
9e:71:41:5e:61:38:d4:47:01:2b:74:40:b8:08:d7:
17:ce:48:5b:72:1e:b3:6e:a3:eb:e3:5e:b2:bc:eb:
94:2a:08:3c:c7:d1:b2:d5:3a:d0:87:f4:bf:73:5c:
a0:f2:9a:3a:de:52:75:92:d7:be:f0:ba:3d:8a:b7:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C4:7D:4B:0D:14:F7:C6:5B:8A:AB:F9:83:68:22:DD:29:A9:71:83
X509v3 Authority Key Identifier:
keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:7e:14:bc:73:ff:39:91:ae:99:91:0e:86:58:9b:92:d3:2a:
03:75:bd:1b:f9:5f:72:34:86:9f:be:63:c6:a1:cc:9e:09:3b:
93:12:20:a5:e9:66:c9:dd:8c:8c:f7:c0:3b:45:79:81:d5:ff:
e5:5b:eb:21:c8:77:fb:af:55:8c:20:3f:6a:a3:40:28:37:d4:
cf:8e:10:68:a4:3a:17:4a:3a:c3:63:ca:7e:22:ac:d7:c0:37:
c6:9d:73:1a:ca:78:55:8c:c4:f7:a5:0d:47:72:71:c3:80:3d:
61:4b:d4:35:c7:28:88:79:89:48:03:83:6c:01:28:41:a0:b5:
5c:f7:7d:7d:9e:1e:78:51:94:de:03:5f:1c:94:2b:fa:d7:f0:
83:78:0a:60:c5:ab:30:7d:ee:b3:15:89:52:22:9f:a2:e6:fd:
c2:e9:26:b6:85:b3:72:9f:c6:8f:d9:49:79:e7:e7:45:5c:7f:
b5:08:c6:75:24:83:e8:8f:8f:99:23:f2:7d:1f:dd:a5:a5:23:
34:33:13:43:87:a1:0f:79:c9:60:9f:9a:4e:9e:d8:42:81:37:
e2:16:10:d4:de:a3:f8:83:f8:eb:7f:82:be:9a:89:66:aa:48:
6f:9a:1e:42:15:70:df:31:28:d5:46:79:da:de:b0:c7:aa:74:
96:a1:fa:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBFRjIxMTAvBgNVBAUTKDNENUQ4NjQ3QUJBOUJCNDA2MjVDM0M2NDNDRDgzNjdG
MTUwNzgwMUEwHhcNMjYwNzI3MDAzNzUzWhcNMjYwODAzMDAzNzUzWjAYMRYwFAYD
VQQDEw02YTY2YTg2Mi05ZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqp+2myjaWSjnnpPi+bpfTMC50nJYkRnLIv2mf1j4Eo5GkRIAdErUypTtPU9A
dxqqamZ07BBq8TMrvb/FFBCmzglQxG4KPqVo49AQLnqVgSqwNPLtqxIekYNMRry0
ofTzdiKrYzeq2aPUsxXSoZyvadiFLcVFhXaGotaOXnh8MnVV4yfmXea5DLD1ybp0
YpDYi5a3KNLCaOXnTRUsmsfrqZWocNFIODiRh/zWYC59E+GBmhYNgMq21iyNZ/PL
5KakFJ6ecUFeYTjURwErdEC4CNcXzkhbch6zbqPr416yvOuUKgg8x9Gy1TrQh/S/
c1yg8po63lJ1kte+8Lo9ircF4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbEfUsN
FPfGW4qr+YNoIt0pqXGDMB8GA1UdIwQYMBaAFD1dhkerqbtAYlw8ZDzYNn8VB4Aa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGMi9BQjZCMjdGNjVF
RTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9QVjJHUjZ1cHUwQmlYRHhrUE5nMmZ4VUhn
Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BWMkdSNnVwdTBCaVhEeGtQTmcyZnhVSGdCby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEVGMi9BQjZCMjdGNjVFRTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9QVjJHUjZ1cHUw
QmlYRHhrUE5nMmZ4VUhnQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaX4UvHP/OZGumZEOhlibktMqA3W9G/lfcjSGn75jxqHMngk7kxIgpelmyd2M
jPfAO0V5gdX/5VvrIch3+69VjCA/aqNAKDfUz44QaKQ6F0o6w2PKfiKs18A3xp1z
Gsp4VYzE96UNR3Jxw4A9YUvUNccoiHmJSAODbAEoQaC1XPd9fZ4eeFGU3gNfHJQr
+tfwg3gKYMWrMH3usxWJUiKfoub9wukmtoWzcp/Gj9lJeefnRVx/tQjGdSSD6I+P
mSPyfR/dpaUjNDMTQ4ehD3nJYJ+aTp7YQoE34hYQ1N6j+IP463+CvpqJZqpIb5oe
QhVw3zEo1UZ52t6wx6p0lqH6eA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:17:22 2026 by rpki-client