
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json)
Hash identifier: TthvnbyPB7ncWZKUUjb66eKTZQZV6F6+271B27WFMTs=
Subject key identifier: 27:BF:30:5A:AD:92:50:BD:E4:5D:C6:E5:10:36:70:EA:5C:AF:81:25
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial: 15D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
Manifest number: 15B3
Signing time: Thu 26 Mar 2026 16:43:50 +0000
Manifest this update: Thu 26 Mar 2026 16:43:49 +0000
Manifest next update: Thu 02 Apr 2026 16:43:49 +0000
Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: UGq2bmw1TuP+3wA6Upfo30U/WZFUwxKtUjtSUC8Xylg=)
2: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: eceVmoVwI80yJc6q0NKt6qLgzjIlJclr4V7xOY6Y66Q=)
3: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: gtcSmglfyYET8vx9KgH4eUS7gxVQjUPaqIq5ZBBWWaA=)
4: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: wRYNEthuBGtR46T7J0rofVnIpvrM/V01eqIrwpJUWdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 16:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5585 (0x15d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Validity
Not Before: Mar 26 16:43:49 2026 GMT
Not After : Apr 2 16:43:49 2026 GMT
Subject: CN=69c56245-e95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:3b:98:0d:2e:27:9a:0b:ca:28:58:34:2c:
b1:fe:05:48:4d:fb:aa:1e:66:0d:db:c0:87:f1:86:
aa:ce:c3:d8:c4:79:a3:74:c7:a1:9d:d4:07:90:e6:
df:3c:e7:13:31:a2:a2:ee:57:3e:85:42:43:1d:51:
ba:03:96:a4:ae:f0:b1:f1:30:cc:61:87:c1:68:e7:
32:a1:0f:6c:50:ea:7a:11:2d:c4:86:6b:37:1e:fb:
e1:3a:af:9f:0f:38:67:1b:c2:7a:5a:58:0e:c0:77:
6a:2d:33:4b:7f:b0:9f:19:4b:7a:47:66:56:81:a7:
b4:ea:06:97:b4:08:39:d1:3c:07:c8:b7:e5:31:33:
00:91:b5:09:bf:3e:94:f7:7a:0e:03:2a:09:e1:eb:
c9:01:56:1b:3b:f3:c4:4c:5e:72:82:7a:f8:29:e3:
3a:92:b6:2e:68:08:83:9b:95:2b:e0:2c:86:38:f0:
ae:47:4a:99:9a:99:16:48:42:5c:25:91:32:c4:c6:
c9:cd:38:02:e9:df:7e:a6:e1:89:db:b1:f8:0c:ac:
a4:3f:2b:7a:e6:f7:2c:6c:87:27:a2:36:18:55:c8:
06:20:a9:cb:cd:eb:04:30:ca:fc:61:c7:58:99:26:
d2:46:ca:c8:6c:15:bf:84:47:bd:44:e7:d3:6a:06:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BF:30:5A:AD:92:50:BD:E4:5D:C6:E5:10:36:70:EA:5C:AF:81:25
X509v3 Authority Key Identifier:
keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ef:27:a3:17:4c:87:9a:0e:62:48:72:7e:b9:99:3f:5a:e8:
78:95:c8:84:7c:90:86:ec:8c:b2:41:28:90:8d:09:88:10:74:
b7:e0:89:39:3b:d7:a6:fb:b8:90:15:8f:1a:bd:15:36:ed:8c:
3c:70:78:94:b5:7f:e4:95:dc:8b:28:cd:51:f4:fe:fd:e8:a2:
a9:83:b7:a6:e9:26:24:4d:b6:63:d4:ee:8a:f2:9a:12:57:19:
30:81:a8:25:dc:74:95:d0:a5:d9:83:fc:16:f7:d5:fe:a5:ef:
17:e1:de:9a:78:37:bb:5a:57:ac:ce:d7:a1:7f:6b:e6:13:e7:
e6:89:d2:cf:d4:6a:22:cb:eb:c8:fe:3c:c5:d3:15:2e:12:2e:
b1:09:60:7d:ce:81:87:87:09:d5:16:57:6d:74:48:7e:86:31:
6a:01:92:4a:64:c2:7b:6e:26:1e:62:e2:c8:ed:20:83:56:32:
ee:f3:7a:c1:73:f8:ee:3f:48:6d:36:d4:dc:ad:24:9a:57:4c:
f9:36:79:af:2e:22:50:c3:59:a3:18:ac:66:e7:f7:3e:bf:76:
c6:96:33:a4:9e:8a:ad:0c:a0:88:9d:e3:aa:d9:8b:9a:29:cc:
d2:17:61:a6:81:aa:86:de:17:b8:94:db:f1:1d:9e:51:85:b5:
51:b5:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:12:44 2026 by rpki-client