
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft
File: PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json)
Hash identifier: 6fI1I2eG17q8xMvZhPTHJg6Gsqm6By24xRnL7M3/dso=
Subject key identifier: 33:FD:DD:08:E5:E1:90:6F:2A:7E:0F:4C:69:47:3E:08:0E:22:86:48
Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8
Certificate issuer: /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8
Certificate serial: 0158
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft
Manifest number: 014C
Signing time: Wed 25 Mar 2026 04:31:22 +0000
Manifest this update: Wed 25 Mar 2026 04:31:22 +0000
Manifest next update: Wed 01 Apr 2026 04:31:22 +0000
Files and hashes: 1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: PsmOxM17CXdB6O70+GCZPycqu2Sxv562AhX+iUk6Jr4=)
2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: tezFkMvINZIT10T6DSqOZvxH2uZ604PG/XeQKOGYnuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl
rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9E0A, serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8
Validity
Not Before: Mar 25 04:31:22 2026 GMT
Not After : Apr 1 04:31:22 2026 GMT
Subject: CN=69c3651a-6965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:e9:a4:c7:cb:7e:07:ce:27:9d:1d:89:70:
24:50:f0:a7:0d:eb:d3:0b:c3:c5:5c:47:13:15:52:
37:71:41:ed:9f:00:9c:a0:af:64:8c:59:0a:e1:12:
d5:ed:a2:06:7f:b5:95:cc:c4:f2:25:21:71:d6:0b:
9e:49:09:af:8e:3b:90:d7:6e:a5:fa:c3:78:4b:93:
f7:f1:f5:6c:f5:4a:86:56:ff:2c:25:cc:ae:df:e5:
15:57:a0:67:23:c8:a3:a2:9f:0c:1d:6e:7d:59:03:
d1:45:31:f1:70:3a:a4:e8:1d:34:1b:88:7e:44:22:
dd:7e:ea:1c:e8:f6:4c:9c:94:9c:e6:46:18:d5:a9:
cf:7e:cc:01:38:d0:23:4c:67:e0:2a:20:22:4d:73:
f1:74:6c:13:13:ec:24:6d:1a:d1:e9:a4:99:36:2d:
e6:d7:ef:2d:df:c2:17:12:ca:04:83:41:7a:08:85:
d8:a2:b2:d7:df:07:37:a4:f0:37:c5:91:5f:32:2d:
15:f5:0d:bc:2b:b0:33:99:a7:bd:f9:a7:db:54:f0:
05:3a:35:6e:6f:e5:f2:4f:98:b3:c8:95:09:cb:49:
0c:b5:50:f9:5d:99:e5:d0:7c:92:5b:71:82:26:d1:
73:95:d7:fc:ef:02:6e:7e:d6:a6:b0:4d:bc:9c:60:
cc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FD:DD:08:E5:E1:90:6F:2A:7E:0F:4C:69:47:3E:08:0E:22:86:48
X509v3 Authority Key Identifier:
keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:09:f5:69:ff:5f:8f:7e:23:e4:f1:1c:06:d5:89:0a:eb:83:
f7:2f:34:c3:b8:3a:bf:10:69:db:15:61:36:58:9a:ae:9a:82:
08:f2:be:86:dd:f1:e6:6b:f9:1f:fd:9a:85:01:a7:04:24:6c:
ce:f5:22:4f:78:6a:3b:13:96:07:a4:c4:ba:f1:51:36:c1:e5:
ef:72:a4:14:9d:ed:87:c4:72:c5:c8:06:40:55:c2:f8:bf:e0:
42:c8:06:ea:e9:a7:0c:08:22:49:86:7e:7a:60:5c:fe:e3:dc:
5b:bb:af:08:19:55:92:89:56:2f:6a:85:40:0e:69:69:ad:2d:
b5:83:77:d1:db:d6:3a:4f:ec:8c:7c:06:10:52:f0:6c:e5:26:
1f:fa:a4:d1:09:b7:d2:b5:f6:8e:0d:e4:29:81:74:94:84:94:
68:bc:0c:91:c6:40:a6:e8:71:99:ca:5c:cf:64:c9:8e:54:fe:
35:68:c9:bb:6b:5b:74:a9:53:70:71:70:d2:35:2f:72:9f:ce:
3b:a9:c3:ed:20:70:a2:d0:f2:9b:ea:b6:cb:ff:ee:f7:79:0b:
ee:66:f9:1a:0f:8d:73:df:84:1c:24:d0:17:c0:49:26:e2:db:
b7:72:c9:16:f9:22:58:7e:c1:f1:90:3e:aa:d4:32:18:fe:33:
c0:6a:98:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:32:25 2026 by rpki-client