
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
File: pCvBWA8L3pIR-4wIkUqlwsARIXs.mft (raw, json)
Hash identifier: ooK2n8KFrPVM8v54Z6T5uCKFRgUw0eJKMTaco1C1h8M=
Subject key identifier: 17:C9:EB:8F:F2:9F:8D:E1:6F:C8:75:F1:A4:7B:E6:06:76:97:A8:28
Authority key identifier: A4:2B:C1:58:0F:0B:DE:92:11:FB:8C:08:91:4A:A5:C2:C0:11:21:7B
Certificate issuer: /CN=A9131667/serialNumber=A42BC1580F0BDE9211FB8C08914AA5C2C011217B
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
Manifest number: 2E
Signing time: Thu 23 Jul 2026 10:46:23 +0000
Manifest this update: Thu 23 Jul 2026 10:46:22 +0000
Manifest next update: Thu 30 Jul 2026 10:46:22 +0000
Files and hashes: 1: pCvBWA8L3pIR-4wIkUqlwsARIXs.crl (hash: /q0OMXrAncNw0ljaIRNnDOqRAVows6hyQx3zuscVg8o=)
2: AE0F1BEA42AC11F1AC02065EBB833773.roa (hash: 2exTM74mYh/WV9DBBb+PAXb3+N+2GeJ1vzkMiQM/+Ls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.crl
rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131667, serialNumber=A42BC1580F0BDE9211FB8C08914AA5C2C011217B
Validity
Not Before: Jul 23 10:46:22 2026 GMT
Not After : Jul 30 10:46:22 2026 GMT
Subject: CN=6a61f0ff-ea26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:35:2f:f2:8a:0c:98:06:2e:8e:01:3b:8c:a1:
77:34:fc:33:70:da:cb:11:93:dc:81:5f:e4:33:4a:
f7:52:28:47:cd:e1:aa:63:5b:7b:62:3c:41:08:70:
20:88:37:f7:ae:f8:6d:32:a7:15:ec:9a:46:34:b6:
51:71:82:52:67:28:12:f6:b0:d8:32:19:62:ed:ca:
5c:8e:84:2a:dd:dd:66:3a:06:16:ae:a9:91:7d:c4:
92:00:8e:9d:6d:48:17:b8:2f:75:fc:26:60:70:02:
56:8b:28:b9:74:03:e5:bc:27:dc:62:53:b5:0f:e7:
80:af:d7:76:e2:13:3c:11:b4:ef:20:75:22:d9:cb:
30:3b:94:aa:5e:ad:e5:0c:e7:89:18:52:91:56:29:
c9:9b:5f:6a:be:f7:07:32:82:39:b6:8f:91:b7:e2:
6e:26:f2:92:da:55:51:c2:87:d1:3e:71:fb:3d:2c:
5c:57:51:e5:bb:ce:41:4c:32:9a:70:dc:78:30:27:
1e:b0:01:8f:78:88:cf:ce:73:47:82:15:9c:fe:56:
34:89:35:e3:29:7a:ff:49:28:63:a0:03:68:33:2f:
a1:40:dd:fe:71:ba:c6:dd:06:dc:2d:7b:c8:8b:a7:
c3:71:a4:68:03:49:0e:b9:b4:6b:fd:c4:53:a6:c8:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:EB:8F:F2:9F:8D:E1:6F:C8:75:F1:A4:7B:E6:06:76:97:A8:28
X509v3 Authority Key Identifier:
keyid:A4:2B:C1:58:0F:0B:DE:92:11:FB:8C:08:91:4A:A5:C2:C0:11:21:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:74:68:48:03:5a:d3:9a:b7:a1:fc:18:bc:d7:7a:12:74:0d:
ab:15:f0:e9:b0:6b:c2:b6:03:c0:ee:31:16:b0:a5:f7:6e:32:
08:9e:8d:46:a2:09:18:9c:0c:c8:37:a3:09:89:5f:38:94:7d:
ae:f0:a1:64:75:dc:fc:81:eb:8b:78:da:5f:df:86:d7:6b:03:
3a:92:d1:f2:6c:93:c9:3e:14:f4:44:ab:00:5e:5f:fb:56:b8:
60:9c:e0:1b:d5:66:56:39:14:3f:52:a3:27:7e:7a:43:4a:71:
bc:48:80:a8:0d:d5:86:3d:53:02:77:96:67:84:4f:9e:6f:90:
32:d8:c0:fa:4f:73:83:60:1d:01:52:ba:52:7f:90:4d:8e:14:
ee:16:51:18:4b:51:58:4a:58:28:c1:cb:40:36:0f:86:05:58:
37:97:b9:c1:07:38:c6:6c:37:6a:d6:8b:9b:19:d5:30:46:f3:
f1:e8:72:50:a2:89:2b:ca:dd:33:05:36:62:ae:22:72:32:33:
48:77:51:dd:91:1d:3a:87:0e:f8:9e:57:2a:a9:10:8c:28:0a:
8e:92:3c:e8:c8:19:26:39:b4:6b:28:82:8d:c8:7b:a7:61:cf:
ac:13:73:12:da:14:0e:bd:66:0f:8e:9e:21:1e:60:c4:ff:6c:
9a:e0:53:f8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MTY2NzExMC8GA1UEBRMoQTQyQkMxNTgwRjBCREU5MjExRkI4QzA4OTE0QUE1QzJD
MDExMjE3QjAeFw0yNjA3MjMxMDQ2MjJaFw0yNjA3MzAxMDQ2MjJaMBgxFjAUBgNV
BAMTDTZhNjFmMGZmLWVhMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCTNS/yigyYBi6OATuMoXc0/DNw2ssRk9yBX+QzSvdSKEfN4apjW3tiPEEIcCCI
N/eu+G0ypxXsmkY0tlFxglJnKBL2sNgyGWLtylyOhCrd3WY6BhauqZF9xJIAjp1t
SBe4L3X8JmBwAlaLKLl0A+W8J9xiU7UP54Cv13biEzwRtO8gdSLZyzA7lKpereUM
54kYUpFWKcmbX2q+9wcygjm2j5G34m4m8pLaVVHCh9E+cfs9LFxXUeW7zkFMMppw
3HgwJx6wAY94iM/Oc0eCFZz+VjSJNeMpev9JKGOgA2gzL6FA3f5xusbdBtwte8iL
p8NxpGgDSQ65tGv9xFOmyDQhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUF8nrj/Kf
jeFvyHXxpHvmBnaXqCgwHwYDVR0jBBgwFoAUpCvBWA8L3pIR+4wIkUqlwsARIXsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxNjY3L0Q3RTk5MkNDNDI5
QTExRjFBRUZDOTA4NUI1ODMzNzczL3BDdkJXQThMM3BJUi00d0lrVXFsd3NBUklY
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcEN2QldBOEwzcElSLTR3SWtVcWx3c0FSSVhzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx
NjY3L0Q3RTk5MkNDNDI5QTExRjFBRUZDOTA4NUI1ODMzNzczL3BDdkJXQThMM3BJ
Ui00d0lrVXFsd3NBUklYcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC9dGhIA1rTmreh/Bi813oSdA2rFfDpsGvCtgPA7jEWsKX3bjIIno1GogkYnAzI
N6MJiV84lH2u8KFkddz8geuLeNpf34bXawM6ktHybJPJPhT0RKsAXl/7VrhgnOAb
1WZWORQ/UqMnfnpDSnG8SICoDdWGPVMCd5ZnhE+eb5Ay2MD6T3ODYB0BUrpSf5BN
jhTuFlEYS1FYSlgowctANg+GBVg3l7nBBzjGbDdq1oubGdUwRvPx6HJQookryt0z
BTZiriJyMjNId1HdkR06hw74nlcqqRCMKAqOkjzoyBkmObRrKIKNyHunYc+sE3MS
2hQOvWYPjp4hHmDE/2ya4FP4
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:50:29 2026 by rpki-client