
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json)
Hash identifier: 6cxrwpXMVa4wNCNNYNMGrKKpcO9dwVtNXsXki/hFwiE=
Subject key identifier: 14:23:D9:97:77:7E:F3:CF:78:8D:51:6F:7C:E3:0D:8E:81:AC:E8:BB
Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6
Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6
Certificate serial: 0F81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
Manifest number: 0F71
Signing time: Thu 24 Sep 2026 17:29:21 +0000
Manifest this update: Thu 24 Sep 2026 17:29:20 +0000
Manifest next update: Thu 01 Oct 2026 17:29:20 +0000
Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: MZ72gC8LyRfvZQR7IN7tj/CxBAN5F/mhrFu1U9Nnum8=)
2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: RRHBbu8CLmSmiPxmYAkEV9Yq+PqsqGzcbre4j4oCADM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl
rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3969 (0xf81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6
Validity
Not Before: Sep 24 17:29:20 2026 GMT
Not After : Oct 1 17:29:20 2026 GMT
Subject: CN=6ab55df1-f603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:ea:77:58:db:fe:45:05:ec:d8:4d:2d:75:
fa:ef:54:81:f4:2b:ca:b6:3a:7a:4e:4c:27:ae:2d:
bb:1b:dc:32:0a:1c:cb:84:77:3b:b1:bc:a0:3c:a6:
51:c7:0f:98:cf:96:83:5f:d2:bc:75:90:bd:ff:43:
f9:3b:b9:5d:c3:c7:7d:e4:bc:dc:0c:af:e9:73:a5:
c5:72:48:be:ed:15:fb:b0:41:0e:c9:d1:6f:a1:6d:
ba:b0:cb:1b:d3:0b:b2:12:cc:3d:38:c3:64:68:5a:
ec:06:bf:a5:b8:f8:62:ed:d4:5f:34:12:ba:b2:94:
a3:c9:41:0b:b2:72:81:15:52:38:58:91:81:d2:ac:
82:52:d5:26:e3:2c:c0:fb:cf:fd:ea:08:b4:6e:57:
23:da:05:29:38:5c:7f:5a:29:5f:bb:e4:83:b7:77:
e8:fb:f6:0b:a8:37:a2:16:62:be:55:1c:3c:c7:26:
79:b4:5d:cc:a4:dd:cc:df:c4:ad:df:c9:17:ce:fc:
66:8d:3c:9f:e0:19:79:fd:b8:6d:30:20:b2:ee:cd:
42:ec:cf:b5:65:c3:d7:33:7a:58:9e:83:8e:ac:16:
5f:d2:7a:0e:b4:42:5e:c3:35:f4:cf:e3:c1:b6:b7:
a4:d8:f6:9f:4f:b7:68:ea:e4:a2:4a:51:4f:0b:79:
64:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:23:D9:97:77:7E:F3:CF:78:8D:51:6F:7C:E3:0D:8E:81:AC:E8:BB
X509v3 Authority Key Identifier:
keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3f:36:c8:4a:c5:3c:97:37:e2:49:58:d6:f8:aa:56:f5:25:
ae:8f:a2:3a:ae:22:2d:bb:33:cd:47:9f:35:14:23:14:50:a3:
ee:55:bc:11:ef:f9:6d:49:6f:a6:5e:03:ee:01:55:27:26:f5:
41:fe:fb:c9:9e:f0:fe:b8:43:a4:74:fa:cf:6b:96:af:29:c7:
0f:79:b1:b1:5e:de:1f:42:14:fa:59:e8:08:40:ad:91:33:c7:
03:7d:48:3a:cb:3c:d1:cc:6a:e4:c6:66:45:fd:04:35:0b:31:
22:28:05:83:5c:69:6c:01:a2:c5:67:6e:73:75:41:83:44:35:
d3:0b:4f:8f:ab:29:e1:d8:81:2b:e2:e7:72:a2:ff:f7:b6:b5:
73:5d:95:60:ae:51:1f:97:3b:d9:d5:d2:33:0b:74:68:32:e1:
1d:56:31:3b:20:0e:16:83:e5:07:07:4f:15:85:04:fa:93:b1:
7b:34:98:6d:c6:c2:d0:b6:24:4c:75:6d:0d:7c:00:95:89:65:
a2:21:ec:0e:a6:0d:f9:15:71:de:a3:87:61:4f:fe:70:ef:36:
6a:78:84:08:3a:ff:d6:02:f8:73:4a:aa:9f:7f:ca:ad:84:40:
8e:93:f2:69:bb:b5:39:37:79:0e:fc:09:37:58:93:d7:87:49:
72:53:17:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ2NjgxMTAvBgNVBAUTKDNEMDU1NkQxOTNCQzkyQTIxRUE3NDdGOTU4QzY5N0E5
N0VDNUQ1RDYwHhcNMjYwOTI0MTcyOTIwWhcNMjYxMDAxMTcyOTIwWjAYMRYwFAYD
VQQDEw02YWI1NWRmMS1mNjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsbDqd1jb/kUF7NhNLXX671SB9CvKtjp6Tkwnri27G9wyChzLhHc7sbygPKZR
xw+Yz5aDX9K8dZC9/0P5O7ldw8d95LzcDK/pc6XFcki+7RX7sEEOydFvoW26sMsb
0wuyEsw9OMNkaFrsBr+luPhi7dRfNBK6spSjyUELsnKBFVI4WJGB0qyCUtUm4yzA
+8/96gi0blcj2gUpOFx/Wilfu+SDt3fo+/YLqDeiFmK+VRw8xyZ5tF3MpN3M38St
38kXzvxmjTyf4Bl5/bhtMCCy7s1C7M+1ZcPXM3pYnoOOrBZf0noOtEJewzX0z+PB
trek2PafT7do6uSiSlFPC3lkrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQj2Zd3
fvPPeI1Rb3zjDY6BrOi7MB8GA1UdIwQYMBaAFD0FVtGTvJKiHqdH+VjGl6l+xdXW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY2OC83QzkwMDlBQzk3
RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtxSWVwMGY1V01hWHFYN0Yx
ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BRVlcwWk84a3FJZXAwZjVXTWFYcVg3RjFkWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDY2OC83QzkwMDlBQzk3RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtx
SWVwMGY1V01hWHFYN0YxZFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXj82yErFPJc34klY1viqVvUlro+iOq4iLbszzUefNRQjFFCj7lW8Ee/5bUlv
pl4D7gFVJyb1Qf77yZ7w/rhDpHT6z2uWrynHD3mxsV7eH0IU+lnoCECtkTPHA31I
Oss80cxq5MZmRf0ENQsxIigFg1xpbAGixWduc3VBg0Q10wtPj6sp4diBK+LncqL/
97a1c12VYK5RH5c72dXSMwt0aDLhHVYxOyAOFoPlBwdPFYUE+pOxezSYbcbC0LYk
THVtDXwAlYlloiHsDqYN+RVx3qOHYU/+cO82aniECDr/1gL4c0qqn3/KrYRAjpPy
abu1OTd5DvwJN1iT14dJclMXEA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:40:44 2026 by rpki-client