
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
File: PVoEjy0O64mMxmE79kE3I3iWTLA.mft (raw, json)
Hash identifier: aPR4vwIVoQUNYY/opB/Gqp9WbQM9SCz9SjbDWrwsPzQ=
Subject key identifier: A6:45:49:1B:B5:37:61:A2:35:C9:4D:65:F8:5B:64:E5:AB:C4:54:32
Authority key identifier: 3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0
Certificate issuer: /CN=A919AFBE/serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
Manifest number: 4A
Signing time: Wed 25 Mar 2026 07:28:33 +0000
Manifest this update: Wed 25 Mar 2026 07:28:33 +0000
Manifest next update: Wed 01 Apr 2026 07:28:33 +0000
Files and hashes: 1: PVoEjy0O64mMxmE79kE3I3iWTLA.crl (hash: KrXyHDo4sKWg4xJnJN98kcUQKNibCaX8LgLygGr857A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl
rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AFBE, serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
Validity
Not Before: Mar 25 07:28:33 2026 GMT
Not After : Apr 1 07:28:33 2026 GMT
Subject: CN=69c38ea1-b025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:6a:dc:84:5e:d3:27:ad:bd:46:f4:d8:c5:
6d:50:62:44:d1:c6:42:67:b3:79:8b:d6:5e:dc:1d:
96:49:ac:64:5e:1f:ff:3d:37:53:b7:24:a9:3e:61:
92:0e:a0:70:99:68:22:34:cf:33:8a:e0:18:36:4c:
90:21:34:e2:49:92:3d:3c:d1:f0:f8:ae:9b:e0:bf:
af:bc:62:f2:d5:cd:c4:9b:b9:25:7f:c4:a0:fb:2d:
e5:b3:a9:11:a4:a8:61:d1:d1:42:b9:aa:24:70:2d:
e8:e3:1f:a2:0f:cd:84:b9:c1:9c:46:50:94:45:7e:
88:04:26:97:c4:4c:2e:05:78:9c:dd:8d:5a:f7:7b:
dd:38:5e:77:6d:bb:d1:e6:04:52:bb:1e:c5:dc:c1:
5c:73:c6:2c:6c:df:1b:92:d1:0a:86:21:c7:ab:7e:
a2:40:36:7b:f8:a4:3b:02:ef:0f:88:4b:af:30:51:
c8:47:f4:f1:f4:c4:5f:d9:58:c0:80:9a:db:d7:f1:
86:26:c6:4f:f0:e9:f5:6c:31:aa:a0:cf:f6:22:79:
a3:7f:f0:da:c1:8c:7e:6c:84:42:24:39:82:ba:39:
31:0a:f7:94:cb:77:65:9f:e3:fe:3f:63:f3:87:f1:
c1:f0:a2:a7:eb:8c:0a:53:ab:93:af:db:05:50:69:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:45:49:1B:B5:37:61:A2:35:C9:4D:65:F8:5B:64:E5:AB:C4:54:32
X509v3 Authority Key Identifier:
keyid:3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a9:15:9d:a2:d7:a9:cc:a0:f0:c2:b7:15:bf:7f:33:1f:0e:
00:13:78:a6:20:a6:b5:1a:78:17:fb:41:c3:80:ce:d0:c4:07:
b4:5d:d7:10:a5:08:7b:88:a1:d5:31:fd:75:71:ac:86:2b:78:
e8:c0:03:9b:6b:aa:95:69:da:52:7d:54:7c:25:bb:f9:cf:47:
e5:2d:f9:26:2c:d5:08:d3:ae:12:9e:23:40:b9:67:ce:00:42:
dc:61:65:91:46:ae:5c:e4:75:2b:f7:4a:56:3b:1b:3e:66:6b:
f8:5f:27:47:7b:bf:41:5c:6d:bf:ea:bd:73:47:df:03:14:d3:
d0:ab:04:36:8e:5c:8f:43:8c:05:22:ea:9a:9a:b8:a4:66:2b:
f9:b3:75:9c:d4:48:29:c2:90:6b:3a:4c:a5:d5:f5:29:0d:e2:
ea:c4:d0:2f:90:d6:a1:e4:85:b0:5c:75:5b:03:b0:42:ec:cc:
34:5c:89:ab:59:2e:84:d5:66:57:6c:1f:4a:e2:11:34:c4:45:
5a:bc:d7:39:e5:45:2b:45:3a:d2:dd:68:70:ea:4d:43:7d:5e:
70:6d:4a:7f:4e:cb:34:64:77:59:66:82:cd:7e:0d:3f:d6:78:
26:f0:cd:9b:6d:f4:f3:73:53:8b:f0:2e:e3:af:5e:1f:23:da:
e6:02:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:22 2026 by rpki-client