
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
File: pv84Girr6m3M_g3mXUGWBAJx_pQ.mft (raw, json)
Hash identifier: cLsCNqxx756KfWEAnufo7MgMryQzUL699ssEJZJDYuk=
Subject key identifier: F2:FE:68:E4:FD:4E:43:E2:C7:57:C9:C2:1F:CB:67:6C:C1:80:2B:32
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Certificate issuer: /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial: 0BC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
Manifest number: 0B9E
Signing time: Mon 02 Mar 2026 01:20:26 +0000
Manifest this update: Mon 02 Mar 2026 01:20:24 +0000
Manifest next update: Mon 09 Mar 2026 01:20:24 +0000
Files and hashes: 1: pv84Girr6m3M_g3mXUGWBAJx_pQ.crl (hash: JnkVtoKqCp8b9lvEIqMtGXzGs2b0a9xw/xL1dTwVBZg=)
2: 1E7D7344419811EAA268D964C4F9AE02.roa (hash: Hk8MYeDrcTehISfWRW8h+pEubI0TX43br5gNDb2uf6w=)
3: 1FC6B062419811EAA268D964C4F9AE02.roa (hash: hpHKLBPP8wI8/Ci6WbVWhmTT7Wqg4z+ABMYaCRqkCvI=)
4: 1DC0E5BC419811EAA268D964C4F9AE02.roa (hash: 2YRxMG7YO0sA77A0UNRyYRbSzxsD+ZJ1u+28GJUZh2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3009 (0xbc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED2BB, serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Validity
Not Before: Mar 2 01:20:24 2026 GMT
Not After : Mar 9 01:20:24 2026 GMT
Subject: CN=69a4e5d9-9c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:81:5f:a3:82:12:0f:3d:f5:4d:8f:7f:41:
c5:a3:37:20:8f:8e:1f:7c:8b:77:b4:af:8c:79:6f:
a6:1a:b2:b7:85:45:c1:e4:ce:83:87:7d:e5:3d:93:
9e:cb:57:34:b5:2a:53:50:64:a3:d5:26:21:35:64:
f6:b7:25:62:97:e7:3e:b3:39:bd:9c:be:11:16:42:
19:45:5b:bf:83:07:24:d3:f1:f5:79:84:38:15:9a:
09:2c:57:ab:a5:57:cc:b2:6f:93:dc:9c:56:d5:e3:
6d:28:00:30:61:91:8c:8b:cd:35:81:3d:42:d7:9c:
5b:5e:1a:16:c2:1c:3d:c4:63:95:e2:57:59:37:3f:
f1:06:f2:26:c5:54:ee:17:95:c5:86:1b:a7:be:2b:
53:3a:c9:c8:28:87:26:85:0c:45:71:57:fe:6b:aa:
1d:38:0a:3d:ac:12:24:e2:ea:83:a6:b5:e5:f0:98:
47:76:fe:92:e4:eb:6d:69:5b:5f:d1:de:8d:ba:f4:
4f:7c:17:aa:92:ed:d4:83:fb:df:77:93:52:13:2b:
0b:4a:ed:59:f5:22:39:53:a5:7c:90:e0:a9:e3:f3:
79:46:ec:74:a5:be:7b:47:d7:8e:0a:9a:b1:b2:23:
71:86:f5:cc:a3:aa:41:65:fc:71:d2:22:07:44:30:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FE:68:E4:FD:4E:43:E2:C7:57:C9:C2:1F:CB:67:6C:C1:80:2B:32
X509v3 Authority Key Identifier:
keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d9:a6:02:d5:90:31:96:27:57:a8:be:89:95:eb:2a:55:c3:
bf:5b:47:e1:f1:ff:7d:0a:13:0e:82:1a:8e:f6:b8:21:de:08:
19:66:63:7d:68:51:ae:3b:8d:f8:92:fc:86:81:3f:ac:de:94:
37:a1:40:36:40:f2:af:73:80:b1:55:5c:8f:76:96:6d:20:f4:
2e:6f:3b:9d:70:fd:09:e4:36:1e:c3:66:0e:3e:be:a5:12:de:
72:dc:66:7e:c6:ee:9c:10:4e:af:41:29:de:8d:36:15:9d:74:
74:5e:b9:dc:35:54:29:6a:2a:1b:26:66:05:00:24:2d:73:ea:
d3:92:9b:14:fd:2f:93:f1:79:47:05:14:0a:61:27:95:b4:d6:
45:55:83:42:57:31:33:8c:80:73:91:01:08:ac:42:43:df:2a:
a8:ae:34:ab:24:f4:f2:63:c5:15:d6:0d:0d:53:ad:7f:6f:38:
0f:f6:4e:fa:6a:d8:54:89:77:eb:79:2d:b6:69:ab:fe:e5:e1:
28:47:2a:ab:62:78:4a:7c:24:df:1a:93:ce:4a:e2:eb:40:cf:
1d:00:2a:76:b7:a5:26:56:50:be:f3:7f:b8:2e:36:cb:b9:39:
f3:dd:a2:ff:04:01:15:cb:ec:4d:80:da:71:13:ab:c1:4a:5b:
56:80:ae:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:17 2026 by rpki-client