
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json)
Hash identifier: g4p7zRdVo9w8LNj1TrHOvbog2tbb3BhIki2W/zqr4X0=
Subject key identifier: 42:6C:99:57:40:26:B9:7F:77:03:A4:6B:8B:06:68:4E:F6:CE:EA:E5
Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6
Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6
Certificate serial: 0F14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
Manifest number: 0F05
Signing time: Sun 01 Mar 2026 23:46:24 +0000
Manifest this update: Sun 01 Mar 2026 23:46:22 +0000
Manifest next update: Sun 08 Mar 2026 23:46:22 +0000
Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: uS2XwduWuJ+g4eNrndJAg3jx2OApYMURTxejH55bhmU=)
2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: nwEIy7xPw+1tR+gqF3l6cQwTi+bhxEm67T3G2uPpLSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl
rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3860 (0xf14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6
Validity
Not Before: Mar 1 23:46:22 2026 GMT
Not After : Mar 8 23:46:22 2026 GMT
Subject: CN=69a4cfd0-28f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:5d:c6:9f:20:ac:9d:84:a2:94:41:19:ec:
04:8e:17:a2:7e:b1:9b:f2:fb:01:0e:5f:b7:7b:73:
2b:c6:fa:1c:55:7e:5d:ae:4a:13:66:34:29:da:dd:
4a:a0:fd:bd:d9:04:65:23:b8:bc:d5:df:6c:83:e3:
82:92:f5:bf:bd:39:c9:1c:58:7c:de:4a:13:53:30:
14:99:e8:f2:bb:68:96:b9:d9:66:08:fa:65:b6:a6:
b7:f0:ca:51:57:e7:a3:2b:23:af:1d:70:d9:25:cb:
cd:08:2e:80:c9:30:5a:77:c9:e8:19:89:04:41:0b:
8b:1a:9f:b9:ad:8d:92:c3:53:66:38:14:4b:84:ca:
91:16:b7:11:23:4e:64:26:0d:0c:c7:61:39:63:fa:
de:a0:26:8b:2c:7e:c2:55:0c:2d:03:47:9d:1c:37:
2f:4e:ee:93:80:bc:3a:80:03:b5:96:5f:03:d5:f8:
4e:7e:ec:8e:42:ed:9a:72:b2:f9:e0:22:d1:db:52:
8e:d3:5c:3c:7f:b9:da:2d:fb:15:89:36:45:3f:1f:
66:38:9e:52:4d:e9:08:e2:c5:91:75:e6:6c:1f:c5:
a6:d6:f9:3f:64:fb:71:e7:3d:f3:b8:9e:9f:fe:02:
16:f5:bf:1c:bb:4a:18:f6:dc:9e:52:c5:e9:56:49:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6C:99:57:40:26:B9:7F:77:03:A4:6B:8B:06:68:4E:F6:CE:EA:E5
X509v3 Authority Key Identifier:
keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0f:64:b5:da:1e:65:6c:33:a3:a1:a6:c2:03:2b:07:aa:e8:
d0:2b:52:b7:6e:03:23:80:a5:1a:bd:f8:d9:6f:0a:13:0c:41:
ad:92:1b:1e:4e:dd:25:2f:5e:d6:80:df:35:71:07:9d:e9:fc:
8e:13:d0:e0:8a:26:4f:fb:60:02:03:ad:28:a9:c7:9d:b0:36:
fc:d7:1f:98:da:28:62:bb:e8:68:6a:3f:1e:f5:1a:f5:92:c2:
84:a1:bd:37:d5:60:10:10:92:28:5b:72:dd:95:b7:ce:5b:33:
a7:b4:8a:7f:3e:b3:b4:e3:80:67:0c:99:d0:92:66:e4:14:13:
ed:7f:73:6d:b5:e2:76:13:18:24:f0:a2:42:b0:2d:81:b4:6a:
17:40:a3:d5:12:7a:02:5e:6f:b4:93:aa:3d:c3:c8:3c:da:91:
02:b7:eb:d2:50:ca:ba:79:1e:68:af:ce:6d:f4:43:5c:62:19:
15:f3:d4:01:1a:8f:2f:63:51:c2:6b:7c:d4:60:af:8b:02:2f:
e8:dd:7b:6b:84:1b:62:4b:e7:9d:33:d1:68:96:34:60:04:60:
b2:86:e2:ca:e8:d6:b4:a6:3a:fd:5b:db:0f:d7:6d:bb:82:22:
c2:6b:e5:b0:9e:b1:bb:e5:62:23:a2:cc:74:3a:9b:6c:17:0f:
cc:b7:df:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:52 2026 by rpki-client