
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft
File: parvp2FTU0y7DrZLaMQp9dx_ngo.mft (raw, json)
Hash identifier: ZQUu7y9u0egcq3dABfH6aUnDzNFO0Rh5/4JD2m4NmRg=
Subject key identifier: 33:46:F3:53:74:44:60:8D:E6:DD:1A:27:D6:9B:A8:F8:CB:AB:C9:82
Authority key identifier: A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A
Certificate issuer: /CN=A918A2D9/serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft
Manifest number: 97
Signing time: Wed 13 May 2026 07:34:08 +0000
Manifest this update: Wed 13 May 2026 07:34:07 +0000
Manifest next update: Wed 20 May 2026 07:34:07 +0000
Files and hashes: 1: parvp2FTU0y7DrZLaMQp9dx_ngo.crl (hash: Nk0HaRIxwu5gcHfyDlw4iU/qY8SAOwCKq5fjJJSGT+s=)
2: B1291960691911F08409AD61C4F9AE02.roa (hash: ljIvCH94VnRJKOZpinJz66F/PBUT8yWf/MpJf56yOko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl
rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A2D9, serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A
Validity
Not Before: May 13 07:34:07 2026 GMT
Not After : May 20 07:34:07 2026 GMT
Subject: CN=6a042970-88ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:b7:56:26:ce:5f:34:e3:67:87:01:93:c2:
36:98:52:58:42:c6:2e:c3:8a:8b:7d:e3:f5:86:c3:
fb:7f:99:9f:88:11:d4:ac:9a:6d:92:51:a4:81:7a:
20:6e:f9:dc:5a:9c:c4:e6:39:3b:42:eb:9a:c4:59:
b9:6d:53:dc:54:8a:90:ea:55:9a:18:d2:8b:3d:23:
ed:0f:54:cc:ba:68:ec:0a:bd:7e:f8:5d:65:a1:72:
86:85:02:04:93:2c:9c:24:73:6d:e3:d7:8d:77:c8:
ae:85:07:39:aa:fb:b0:31:24:f8:30:fa:bc:4d:9f:
55:12:89:41:35:68:61:61:59:a9:60:10:d1:30:e2:
07:c5:fe:40:36:00:83:e6:a3:0b:bc:53:a3:2d:c4:
2b:6a:4e:9b:d4:d0:5d:7a:b8:ac:f9:be:bd:7a:42:
68:4e:31:c4:24:1f:68:02:8f:9c:69:c0:ce:52:8b:
73:8a:35:25:3c:16:30:00:8b:83:96:29:61:f7:e2:
0a:e7:70:d4:3c:9a:3c:d6:94:80:49:2b:07:38:8b:
bc:c0:47:41:27:47:7c:b1:87:f9:70:55:ce:b8:49:
a8:cd:c3:8c:41:f8:9f:75:ee:df:cd:2a:9e:f5:a2:
eb:6e:f4:b6:15:01:6f:79:48:e5:bc:c0:ed:82:97:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:46:F3:53:74:44:60:8D:E6:DD:1A:27:D6:9B:A8:F8:CB:AB:C9:82
X509v3 Authority Key Identifier:
keyid:A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2e:b1:c1:4f:26:26:a6:79:e1:d4:f5:e9:1c:f1:09:fd:06:
5d:19:ca:6d:0f:02:09:38:ef:53:6c:9a:ce:9f:8f:f0:5d:a3:
e4:4f:2b:c5:e9:0e:b1:77:7e:67:ab:16:9b:ca:35:8a:b3:7c:
08:8f:79:38:71:e0:c3:4b:c9:af:de:fa:df:95:89:4e:26:0c:
55:f2:47:76:e0:60:7c:1f:bd:81:bb:36:a1:5e:f6:6a:0f:4c:
95:c6:0d:ef:dc:96:9a:76:d2:cb:c8:58:38:81:6d:dc:2f:69:
48:06:3d:bd:e5:78:6e:56:49:ac:d9:07:fa:70:3e:98:35:f3:
c4:a0:65:9b:ea:0b:ba:61:e6:87:6c:b9:f0:6f:d7:5f:20:64:
1e:20:1e:19:f8:b8:70:df:21:ee:f7:09:d3:51:08:ee:15:1f:
03:69:6c:29:6f:bb:57:4c:11:6b:4a:20:6e:67:e4:be:bc:e4:
1f:2f:73:19:79:33:31:1b:05:0f:ec:2c:92:f7:42:0a:e8:fc:
a6:ca:80:4e:6f:0b:9d:2e:58:51:08:b1:89:40:10:32:d6:7e:
2e:a3:95:d5:89:7d:05:80:03:76:b1:fa:0d:c8:a0:12:5a:1b:
8e:e5:59:87:b6:66:d5:d8:e9:3d:6d:70:81:5a:b5:15:b9:29:
5e:24:33:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEyRDkxMTAvBgNVBAUTKEE1QUFFRkE3NjE1MzUzNENCQjBFQjY0QjY4QzQyOUY1
REM3RjlFMEEwHhcNMjYwNTEzMDczNDA3WhcNMjYwNTIwMDczNDA3WjAYMRYwFAYD
VQQDEw02YTA0Mjk3MC04OGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyc63VibOXzTjZ4cBk8I2mFJYQsYuw4qLfeP1hsP7f5mfiBHUrJptklGkgXog
bvncWpzE5jk7QuuaxFm5bVPcVIqQ6lWaGNKLPSPtD1TMumjsCr1++F1loXKGhQIE
kyycJHNt49eNd8iuhQc5qvuwMST4MPq8TZ9VEolBNWhhYVmpYBDRMOIHxf5ANgCD
5qMLvFOjLcQrak6b1NBderis+b69ekJoTjHEJB9oAo+cacDOUotzijUlPBYwAIuD
lilh9+IK53DUPJo81pSASSsHOIu8wEdBJ0d8sYf5cFXOuEmozcOMQfifde7fzSqe
9aLrbvS2FQFveUjlvMDtgpes7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNG81N0
RGCN5t0aJ9abqPjLq8mCMB8GA1UdIwQYMBaAFKWq76dhU1NMuw62S2jEKfXcf54K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTJEOS9FOUUxNDc0QzY5
MTgxMUYwQTEwRjhCNUZDNEY5QUUwMi9wYXJ2cDJGVFUweTdEclpMYU1RcDlkeF9u
Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BhcnZwMkZUVTB5N0RyWkxhTVFwOWR4X25nby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTJEOS9FOUUxNDc0QzY5MTgxMUYwQTEwRjhCNUZDNEY5QUUwMi9wYXJ2cDJGVFUw
eTdEclpMYU1RcDlkeF9uZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAai6xwU8mJqZ54dT16RzxCf0GXRnKbQ8CCTjvU2yazp+P8F2j5E8rxekOsXd+
Z6sWm8o1irN8CI95OHHgw0vJr97635WJTiYMVfJHduBgfB+9gbs2oV72ag9MlcYN
79yWmnbSy8hYOIFt3C9pSAY9veV4blZJrNkH+nA+mDXzxKBlm+oLumHmh2y58G/X
XyBkHiAeGfi4cN8h7vcJ01EI7hUfA2lsKW+7V0wRa0ogbmfkvrzkHy9zGXkzMRsF
D+wskvdCCuj8psqATm8LnS5YUQixiUAQMtZ+LqOV1Yl9BYADdrH6DcigElobjuVZ
h7Zm1djpPW1wgVq1FbkpXiQzwg==
-----END CERTIFICATE-----
Generated at Wed May 13 11:20:34 2026 by rpki-client