
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
File: pv84Girr6m3M_g3mXUGWBAJx_pQ.mft (raw, json)
Hash identifier: Bx8xsIXw9uZTVWjJMi4sM7ie2yqm//hRSSpnxSK7iyY=
Subject key identifier: E0:51:90:1D:14:F0:BC:0C:48:D6:31:76:4E:5F:B6:A5:3F:3A:FE:DA
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Certificate issuer: /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial: 0BCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
Manifest number: 0BAA
Signing time: Tue 24 Mar 2026 18:49:35 +0000
Manifest this update: Tue 24 Mar 2026 18:49:35 +0000
Manifest next update: Tue 31 Mar 2026 18:49:35 +0000
Files and hashes: 1: pv84Girr6m3M_g3mXUGWBAJx_pQ.crl (hash: mkHPx1KnxD0a9blkX2W4I56dfqzvfDozC4ABYuSro5Q=)
2: 1DC0E5BC419811EAA268D964C4F9AE02.roa (hash: 2YRxMG7YO0sA77A0UNRyYRbSzxsD+ZJ1u+28GJUZh2M=)
3: 1E7D7344419811EAA268D964C4F9AE02.roa (hash: Hk8MYeDrcTehISfWRW8h+pEubI0TX43br5gNDb2uf6w=)
4: 1FC6B062419811EAA268D964C4F9AE02.roa (hash: hpHKLBPP8wI8/Ci6WbVWhmTT7Wqg4z+ABMYaCRqkCvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3021 (0xbcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED2BB, serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Validity
Not Before: Mar 24 18:49:35 2026 GMT
Not After : Mar 31 18:49:35 2026 GMT
Subject: CN=69c2dcbf-53d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:44:9d:5b:66:a1:11:96:35:48:15:90:c1:51:
07:ae:34:36:16:04:8c:bb:bf:f4:34:28:54:19:bd:
b0:ac:8a:06:f0:c3:29:61:bd:c9:6d:c7:1f:37:65:
63:3b:52:d0:b0:5c:25:01:1b:48:38:dd:47:6a:c8:
fc:7a:dd:71:7a:7d:4c:e9:7c:fa:f0:24:22:ee:ea:
52:63:56:41:e8:51:7c:ae:24:34:a3:cc:f6:06:b4:
67:0f:a5:81:12:79:cc:96:f6:89:aa:94:1d:a7:a5:
92:e2:ce:76:cc:a3:97:29:74:5f:ad:86:c6:b0:9e:
23:da:f2:fe:4a:10:7c:5d:9a:54:3a:86:b4:c1:8f:
14:9e:15:05:47:2e:45:03:48:c5:83:8b:71:91:93:
84:e0:36:5a:af:0b:42:7a:63:61:f3:ec:bf:e3:70:
b3:28:58:6c:56:cb:cf:44:49:4c:81:69:06:73:78:
6c:f5:51:e6:bc:b5:a5:e7:c8:60:54:3f:28:d8:9c:
56:89:b2:6b:e2:10:41:43:04:69:41:28:6c:c9:45:
ee:f8:ae:d7:77:74:c8:b9:c8:e5:31:2b:05:bc:7a:
39:00:f9:46:24:6f:89:24:8d:34:be:78:b7:cb:4d:
95:68:0b:b8:f7:0e:b5:c2:a2:3d:bc:fc:30:19:8c:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:51:90:1D:14:F0:BC:0C:48:D6:31:76:4E:5F:B6:A5:3F:3A:FE:DA
X509v3 Authority Key Identifier:
keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:ac:d1:80:80:87:86:5b:fe:c6:9a:ad:6e:41:e9:c2:6d:c8:
d4:69:42:aa:f2:f3:0d:aa:8d:73:e2:e2:32:23:4d:f7:25:05:
d4:44:63:41:4e:98:1a:31:2e:5a:87:90:fe:02:0f:2a:f3:38:
66:81:71:da:2b:88:94:a7:94:f3:0f:54:0a:f6:33:aa:72:2d:
6e:fa:fc:14:b9:67:bf:f7:27:c9:75:51:ec:a8:28:2e:ca:f2:
a8:f4:94:75:dc:5a:db:1e:28:a6:f3:9e:e0:e6:53:e7:11:f5:
51:a9:4b:39:aa:93:40:b8:ea:c0:30:e5:24:e3:b7:87:dd:bc:
a7:48:aa:7b:4c:28:d0:84:84:97:be:7f:8c:82:77:e4:6c:14:
25:3e:83:76:0f:1e:ba:f5:e9:ca:0e:66:f1:3c:bc:95:60:f9:
69:85:af:62:42:9a:e1:9d:6e:85:53:5a:9a:bd:50:b9:f4:48:
53:56:f4:83:ea:80:fe:0c:a3:8b:87:32:52:4e:8e:50:ad:0d:
d0:94:ce:0f:d4:8f:78:44:e1:1e:b7:4c:bf:00:21:80:20:fe:
5f:48:df:68:75:15:5e:ed:68:82:54:a0:2a:1f:86:79:ee:18:
bf:46:a3:de:60:bd:13:5d:f7:47:32:b2:54:ca:d9:58:38:81:
af:34:b8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:20 2026 by rpki-client