
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json)
Hash identifier: AmZ7jEJaQbU9Vw0SEDmb/z81n7MiB4lbomV7/ZXctDQ=
Subject key identifier: 95:CE:65:47:74:56:46:B7:DB:99:7F:C9:7D:03:5B:00:89:42:92:70
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial: 15EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
Manifest number: 15CD
Signing time: Tue 12 May 2026 16:45:52 +0000
Manifest this update: Tue 12 May 2026 16:45:52 +0000
Manifest next update: Tue 19 May 2026 16:45:52 +0000
Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: mud5RHwfh7YGzkvcpcbmWGU1cAEOT82Lop6+cyTw3Xg=)
2: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: GqZMFA0L7ACjbBy6EEKhCEh6yrXjeUh2/sYjzUSadNQ=)
3: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: GS7Hz+JO/tFd7f6jkV506RLU0L8tY/ifzdZjJQhwPzk=)
4: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: 49JEiOnck3YIqSnh0w+N5FmwAfU3DdS+vbKJpG7LI7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5614 (0x15ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Validity
Not Before: May 12 16:45:52 2026 GMT
Not After : May 19 16:45:52 2026 GMT
Subject: CN=6a035940-3112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:93:6e:e7:b9:1d:dd:bd:b0:f6:04:1a:ba:
9d:36:8d:29:13:39:f6:a2:5b:94:07:07:17:99:78:
d2:b9:66:25:f0:e6:5f:e5:c2:d3:04:e6:58:f3:8b:
dc:ae:f5:2b:b8:df:ea:eb:26:5c:49:ed:2a:ec:43:
5e:b6:dc:b3:29:99:3a:8a:3b:64:82:6d:23:1b:01:
19:9a:b7:e1:ce:c5:c3:04:8b:50:eb:03:62:0d:05:
5c:1c:33:cf:31:fa:bd:e1:45:52:63:a3:9a:37:5b:
95:ee:fc:41:6c:b3:f5:fd:f9:00:07:71:73:80:78:
57:9e:36:cf:ea:ea:ff:56:aa:a1:3e:35:d1:f8:c4:
bf:38:88:6b:b1:67:f5:66:49:6b:cf:ea:f3:54:92:
f4:4d:5d:3e:16:f6:33:c3:06:3e:54:cf:a1:10:ab:
cb:9d:28:d9:b1:4b:24:a6:e6:19:2e:3d:2f:e0:38:
3d:a2:8f:99:cc:88:a3:4b:fe:59:30:90:59:ce:68:
d6:b4:31:bd:e9:5d:28:01:fc:86:cf:47:ff:59:72:
69:51:e1:42:77:23:f7:48:9d:bc:53:3a:31:63:47:
ab:09:77:fc:c0:5b:50:fe:64:78:30:c4:5a:11:ba:
66:54:06:05:41:3e:74:1c:fe:ed:c4:ba:63:ff:e1:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CE:65:47:74:56:46:B7:DB:99:7F:C9:7D:03:5B:00:89:42:92:70
X509v3 Authority Key Identifier:
keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:d2:57:13:49:9c:f7:6d:32:67:8d:80:e9:bb:7a:57:73:55:
f4:f4:e7:ef:7f:b5:b0:62:37:84:9f:c9:a8:a8:be:fd:4d:50:
c0:80:47:47:19:fa:be:d4:db:e7:d8:92:ad:1c:5a:71:d1:19:
54:71:27:ee:cf:b8:cf:bc:2f:0a:bf:60:70:4a:5e:a5:86:84:
20:49:51:c4:85:f3:e9:bf:42:94:eb:5e:95:62:dd:31:25:82:
a6:dd:50:d2:dc:0a:76:75:0e:8d:13:db:9e:dd:26:ed:1c:8f:
7d:c3:11:5c:62:3e:5f:86:ae:d3:80:29:b9:6a:f7:e0:f5:5f:
54:1f:9f:06:da:cc:8a:38:2e:6f:a7:29:e7:1c:8b:a7:37:a8:
04:9f:f7:28:0d:b7:c0:de:d5:45:ec:01:9c:66:4d:0b:62:b1:
75:71:00:cf:b9:cf:6e:16:6d:03:7c:f8:4e:fd:73:9e:c4:0d:
14:11:45:79:42:35:83:a3:a4:58:c6:a1:47:76:65:00:c5:e2:
7d:65:37:a2:2d:bb:45:cd:b6:f9:26:47:3a:59:be:3d:16:54:
3e:50:65:57:79:f8:40:0b:5e:b5:ca:76:e5:b4:4b:9d:73:14:
93:b2:88:f9:b0:51:3c:cd:0c:80:25:c9:a6:30:bb:21:13:89:
97:ba:4f:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD
QzQ5NzA1OTMwHhcNMjYwNTEyMTY0NTUyWhcNMjYwNTE5MTY0NTUyWjAYMRYwFAYD
VQQDEw02YTAzNTk0MC0zMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv9+Tbue5Hd29sPYEGrqdNo0pEzn2oluUBwcXmXjSuWYl8OZf5cLTBOZY84vc
rvUruN/q6yZcSe0q7ENettyzKZk6ijtkgm0jGwEZmrfhzsXDBItQ6wNiDQVcHDPP
Mfq94UVSY6OaN1uV7vxBbLP1/fkAB3FzgHhXnjbP6ur/VqqhPjXR+MS/OIhrsWf1
Zklrz+rzVJL0TV0+FvYzwwY+VM+hEKvLnSjZsUskpuYZLj0v4Dg9oo+ZzIijS/5Z
MJBZzmjWtDG96V0oAfyGz0f/WXJpUeFCdyP3SJ28UzoxY0erCXf8wFtQ/mR4MMRa
EbpmVAYFQT50HP7txLpj/+EeiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJXOZUd0
Vka325l/yX0DWwCJQpJwMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD
QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03
emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAedJXE0mc920yZ42A6bt6V3NV9PTn73+1sGI3hJ/JqKi+/U1QwIBHRxn6vtTb
59iSrRxacdEZVHEn7s+4z7wvCr9gcEpepYaEIElRxIXz6b9ClOtelWLdMSWCpt1Q
0twKdnUOjRPbnt0m7RyPfcMRXGI+X4au04ApuWr34PVfVB+fBtrMijgub6cp5xyL
pzeoBJ/3KA23wN7VRewBnGZNC2KxdXEAz7nPbhZtA3z4Tv1znsQNFBFFeUI1g6Ok
WMahR3ZlAMXifWU3oi27Rc22+SZHOlm+PRZUPlBlV3n4QAtetcp25bRLnXMUk7KI
+bBRPM0MgCXJpjC7IROJl7pPFQ==
-----END CERTIFICATE-----
Generated at Wed May 13 20:12:47 2026 by rpki-client