
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
File: pCvBWA8L3pIR-4wIkUqlwsARIXs.mft (raw, json)
Hash identifier: 2NrMxtvfUMDd/NxOZlmZ6h3A0bBtPapHit9ENsEvBBM=
Subject key identifier: F7:90:30:F6:CE:3E:10:61:B6:82:34:2C:5E:E0:39:78:97:7C:3B:C6
Authority key identifier: A4:2B:C1:58:0F:0B:DE:92:11:FB:8C:08:91:4A:A5:C2:C0:11:21:7B
Certificate issuer: /CN=A9131667/serialNumber=A42BC1580F0BDE9211FB8C08914AA5C2C011217B
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
Manifest number: 4E
Signing time: Wed 23 Sep 2026 08:04:33 +0000
Manifest this update: Wed 23 Sep 2026 08:04:33 +0000
Manifest next update: Wed 30 Sep 2026 08:04:33 +0000
Files and hashes: 1: pCvBWA8L3pIR-4wIkUqlwsARIXs.crl (hash: 6zBnPb8c3otxfiqWq9ZH2XQashCwhDF+6CVXrXQO8Gc=)
2: AE0F1BEA42AC11F1AC02065EBB833773.roa (hash: 2exTM74mYh/WV9DBBb+PAXb3+N+2GeJ1vzkMiQM/+Ls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.crl
rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131667, serialNumber=A42BC1580F0BDE9211FB8C08914AA5C2C011217B
Validity
Not Before: Sep 23 08:04:33 2026 GMT
Not After : Sep 30 08:04:33 2026 GMT
Subject: CN=6ab38811-6864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:8e:18:ac:2c:ef:79:3d:6a:71:1d:b2:0a:
4d:54:e9:75:77:76:79:ec:9b:43:2b:b2:01:60:cd:
a7:6d:9f:2b:13:4c:c3:62:c2:99:eb:b5:82:26:85:
ee:7f:7d:cd:f4:cc:34:07:b7:1e:b5:01:63:d6:f3:
ee:ba:39:2a:dc:13:3c:b2:b1:ad:cd:c7:48:24:fe:
f6:f3:a6:7f:76:f8:9f:42:b4:62:2e:5e:32:22:f1:
50:3b:0b:b3:e3:0d:58:8a:79:be:09:bb:6d:80:ee:
36:33:e8:f3:95:97:90:f6:72:1f:9b:dd:6f:80:1c:
4e:1c:f1:52:6c:fc:49:31:47:91:0a:a4:1a:7a:33:
5f:5b:3b:04:ef:13:21:85:6d:a5:53:e6:8d:8f:7f:
55:57:87:43:6c:7a:31:d3:fc:b6:9c:9b:36:f3:b6:
02:60:45:bf:c1:cc:98:33:d1:3f:02:d0:57:ac:8e:
d7:2c:3c:75:d8:ad:f8:46:bb:21:79:da:76:c2:92:
97:2f:f3:7c:02:a6:2b:1b:13:0b:f3:8d:3d:68:91:
9c:ad:fb:87:be:2d:bb:6e:b1:94:95:1b:7a:54:da:
e9:f6:d0:80:7a:f3:e4:e3:41:c3:aa:88:44:da:cd:
c8:92:dd:d1:26:7d:b1:25:8b:da:c5:08:08:c7:b4:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:90:30:F6:CE:3E:10:61:B6:82:34:2C:5E:E0:39:78:97:7C:3B:C6
X509v3 Authority Key Identifier:
keyid:A4:2B:C1:58:0F:0B:DE:92:11:FB:8C:08:91:4A:A5:C2:C0:11:21:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:64:50:ee:bd:58:f6:1e:2b:68:4a:47:5e:9d:e5:7b:0f:ae:
e8:dc:30:17:26:c5:46:1a:60:3c:0f:bf:55:fc:03:e2:f4:15:
60:b8:d5:ff:da:ce:44:96:08:13:9b:88:7d:b1:fc:7f:7f:3f:
15:e0:cc:49:df:c5:0c:f0:c5:69:b9:13:cf:53:80:c4:0f:7c:
22:45:8f:a8:80:9c:80:92:09:0b:31:82:6b:6a:01:d5:4a:05:
91:9c:df:5c:ed:75:9b:db:09:f7:1c:e6:46:74:fa:0e:99:08:
12:87:60:99:d9:b3:bd:49:97:28:ea:f2:f9:ec:1f:7e:85:e8:
27:4a:22:ac:e0:e9:58:aa:30:68:e9:56:e9:b6:be:89:59:3b:
94:bf:92:ce:fe:ff:eb:fe:d9:04:99:21:dc:0c:54:5e:63:6f:
95:1f:e6:2c:8e:1f:f4:17:0e:f1:ee:bd:fe:15:12:a5:2d:fd:
71:ee:36:1d:da:e1:a6:54:03:48:08:2e:68:36:24:21:d1:4c:
bf:e3:61:4e:21:78:b1:7f:27:e5:84:af:70:f4:60:67:48:2a:
84:8d:69:b4:d9:40:83:1e:df:ba:d7:d2:f9:fd:1a:21:a7:db:
04:b4:a4:53:97:8a:43:f8:40:ae:98:56:73:c1:bc:05:1d:14:
9a:83:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:59:53 2026 by rpki-client