
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
File: PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json)
Hash identifier: vFqv9X5SlwopvWPr39HKccoPFm3zyWSSqtiLkV5NKDI=
Subject key identifier: 16:82:23:A0:65:F4:10:18:5D:2B:63:A4:C8:16:E8:EC:2A:46:7B:81
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Certificate issuer: /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial: 04F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
Manifest number: 04EE
Signing time: Tue 12 May 2026 23:52:37 +0000
Manifest this update: Tue 12 May 2026 23:52:36 +0000
Manifest next update: Tue 19 May 2026 23:52:36 +0000
Files and hashes: 1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: HySdmhcDfG15xPmobfyTMme1eE/9ZpCmP8YygCgGl6Y=)
2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: MZAkwEcI/RhPtb0HLVaP6vZemaPmWHrryFBvzadhdrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1270 (0x4f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Validity
Not Before: May 12 23:52:36 2026 GMT
Not After : May 19 23:52:36 2026 GMT
Subject: CN=6a03bd45-4c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:8e:28:2b:c3:df:1b:b3:0f:91:d3:c0:b2:
dc:d3:cf:13:84:d9:f9:c7:7a:93:f1:60:b1:d2:c1:
5a:78:a0:90:01:14:29:b3:85:5f:50:af:27:e2:b8:
5b:4f:d2:85:cd:e3:1f:5c:e5:e3:16:fc:72:bc:fd:
e0:8e:5d:e9:4b:42:53:95:08:c1:67:0f:3b:90:a4:
5f:27:48:bc:f2:64:0c:08:af:8d:b0:3f:9d:9b:01:
9d:84:08:24:58:94:41:da:b8:92:f9:bb:9e:df:12:
43:b3:83:41:51:18:0d:1a:86:33:c5:b6:a2:a3:88:
12:b4:92:78:49:45:90:70:f4:52:ca:64:ed:e7:78:
36:4c:71:f8:51:34:c4:96:1f:4b:26:07:f9:a5:ab:
70:b8:60:af:f7:e9:39:a3:c9:78:3e:b8:7c:2a:39:
56:ae:0b:7a:4b:20:6e:d1:c5:1a:ed:04:58:aa:16:
45:71:7b:5b:a1:c1:4a:7e:e2:95:6e:7b:96:a0:7f:
92:0b:8a:5e:41:63:48:0a:c9:00:d2:97:99:08:4b:
de:c9:8e:3b:f3:a7:5f:ae:1b:48:2f:12:5d:96:20:
15:4a:73:2f:84:ae:9a:1c:f3:88:80:8d:a1:c8:77:
a8:ea:77:26:e8:c0:d2:8d:0d:3e:d0:57:84:94:1e:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:82:23:A0:65:F4:10:18:5D:2B:63:A4:C8:16:E8:EC:2A:46:7B:81
X509v3 Authority Key Identifier:
keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:49:be:dd:5b:08:53:0d:02:48:41:8d:0e:2c:85:c7:b7:2f:
c1:5d:84:e4:e4:d5:06:f6:4c:f4:84:e6:7d:c0:2d:e5:07:dc:
14:57:a1:b6:de:b2:73:dd:70:46:8a:c9:b1:a8:87:4a:cb:d1:
9e:fe:68:03:22:e4:13:33:e5:5e:46:21:5a:f1:b5:d2:a1:71:
93:30:54:3f:d8:ed:eb:36:e3:e9:8d:2c:85:c8:e9:2c:37:48:
8b:bf:ae:58:d1:3c:c6:d0:36:77:dd:01:31:f9:56:2b:f0:9b:
2e:e6:67:a0:26:8a:6c:66:e0:dd:7c:1b:c7:55:54:85:d6:56:
cb:4b:5b:e0:93:4b:f6:9c:3b:f3:f6:dc:cf:f6:7a:80:e0:97:
95:14:25:cb:e0:78:72:c1:da:02:0d:fb:cc:a6:33:74:d6:60:
45:48:55:f7:ab:07:38:5e:63:f8:1b:a0:d9:52:df:c5:f0:fc:
d2:a2:21:aa:d8:91:7b:66:cd:d8:64:bc:f1:5f:11:dd:e9:4a:
96:d3:2d:b3:81:e0:e8:57:fd:2a:ab:3c:24:63:89:e4:94:b6:
83:8d:82:27:73:da:36:31:da:f7:59:25:b0:67:bc:91:bd:23:
b7:ec:29:3f:a9:d6:0d:b9:dc:91:ee:47:37:ba:7c:36:64:56:
12:a8:bd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:25 2026 by rpki-client