
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json)
Hash identifier: 09kvB6YYUgfdNra7OjyiwAr3Hl74y26tBwKJHDXSt7Y=
Subject key identifier: A8:BF:7F:B5:AC:4D:28:91:C8:4A:D5:46:8C:D4:1F:A2:73:2F:DF:0E
Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6
Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6
Certificate serial: 0F2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
Manifest number: 0F1D
Signing time: Thu 16 Apr 2026 17:30:50 +0000
Manifest this update: Thu 16 Apr 2026 17:30:50 +0000
Manifest next update: Thu 23 Apr 2026 17:30:50 +0000
Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: giuSw26UXauXn/5Yz9s+bwWbV5HC6DVsdHzoENxeMTc=)
2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: nwEIy7xPw+1tR+gqF3l6cQwTi+bhxEm67T3G2uPpLSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl
rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3884 (0xf2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6
Validity
Not Before: Apr 16 17:30:50 2026 GMT
Not After : Apr 23 17:30:50 2026 GMT
Subject: CN=69e11cca-9d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:62:42:43:be:1b:42:b3:58:82:e8:e3:72:
16:1c:af:2a:cb:9e:8d:1e:71:06:e7:10:bc:be:77:
d7:4d:3e:77:52:51:d3:d7:2b:79:d0:aa:1b:ed:f1:
8d:22:a5:cb:a5:16:83:06:c8:0a:b0:1d:b6:c0:d1:
66:9a:45:ea:d1:22:56:e6:26:2d:71:03:6b:5b:66:
8a:54:73:9d:51:ba:ba:53:f0:2b:47:92:2a:06:d3:
65:f0:f1:27:83:0c:bb:e1:c9:30:97:5b:96:6c:c7:
31:bc:39:3b:f2:ea:71:4e:6d:fa:51:e1:2d:98:b8:
b1:c5:bc:7a:70:93:80:d8:b4:81:38:10:23:fd:6e:
e4:f6:25:0b:9a:16:06:71:f1:96:72:a7:7f:78:96:
8d:b7:93:6b:e1:89:1e:4a:ba:1b:6d:72:af:bc:4f:
99:70:9b:a3:6b:e0:76:5d:11:14:f9:d0:0f:88:54:
e5:e6:21:f5:bb:71:03:f0:be:0c:ad:4d:47:39:48:
41:9a:48:32:ac:6e:9a:e7:e2:11:d1:df:58:53:44:
2b:9f:38:38:45:f8:2f:b2:25:6a:5c:23:50:ea:86:
70:6e:83:af:c9:1d:42:92:77:cd:2c:f6:9c:1b:01:
d4:a1:c4:e5:7f:d8:21:0f:88:d0:06:88:4c:38:3b:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BF:7F:B5:AC:4D:28:91:C8:4A:D5:46:8C:D4:1F:A2:73:2F:DF:0E
X509v3 Authority Key Identifier:
keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:ea:b7:ec:83:ca:90:f7:dd:9e:22:c2:dd:a7:01:28:e0:93:
30:ad:9d:87:f7:ea:e6:8e:e2:12:74:43:4d:47:18:74:9b:13:
e5:7b:49:4d:f2:be:df:8f:e2:42:ca:19:44:3e:59:bb:b2:0e:
70:92:df:4e:af:5a:c2:11:f2:0d:50:1d:b0:c1:f7:68:b8:bb:
b1:91:f0:97:59:c6:90:7d:2a:9b:5e:75:64:fd:e6:de:d6:7d:
53:29:34:63:20:ff:f6:09:28:58:2d:29:76:21:37:d7:31:83:
59:cb:4a:b3:96:04:11:be:ae:ea:82:a5:ce:2a:f9:d4:8b:bd:
8f:1f:33:6b:68:03:8c:6a:ee:af:15:a4:20:dc:91:b3:1a:b8:
7e:2a:3f:6d:8d:50:09:e1:ed:3c:4f:fc:d5:a1:0d:1d:06:66:
a1:53:25:77:f1:6d:76:a7:b9:13:d6:e6:0d:98:3e:e5:50:a3:
84:07:9a:3f:39:e8:ac:bc:bd:21:b5:6f:cc:d2:e4:56:f8:9b:
21:92:27:b2:5c:e8:9c:3f:8f:d2:cb:c2:4d:47:85:82:da:8b:
da:38:44:3b:9e:fa:74:94:9d:f6:db:59:3e:dd:b3:2e:3c:96:
8e:36:73:a6:fd:8f:41:04:47:ad:a9:df:79:dc:49:6c:ca:11:
b0:cd:29:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:12 2026 by rpki-client