
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
File: pCvBWA8L3pIR-4wIkUqlwsARIXs.mft (raw, json)
Hash identifier: cIBdhsnJS1o6x9YhPqE97Xje7PoEooz4ytehDV6ypT8=
Subject key identifier: A6:0F:54:F5:E4:83:F1:43:6E:0B:5D:BB:96:8D:FC:2D:C6:3B:2C:EA
Authority key identifier: A4:2B:C1:58:0F:0B:DE:92:11:FB:8C:08:91:4A:A5:C2:C0:11:21:7B
Certificate issuer: /CN=A9131667/serialNumber=A42BC1580F0BDE9211FB8C08914AA5C2C011217B
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
Manifest number: 5A
Signing time: Sat 17 Oct 2026 08:54:48 +0000
Manifest this update: Sat 17 Oct 2026 08:54:47 +0000
Manifest next update: Sat 24 Oct 2026 08:54:47 +0000
Files and hashes: 1: pCvBWA8L3pIR-4wIkUqlwsARIXs.crl (hash: qeGrFLWO36BE9BHkmCcWeKXDg1qFmyujDHE4MA6utUE=)
2: AE0F1BEA42AC11F1AC02065EBB833773.roa (hash: 2exTM74mYh/WV9DBBb+PAXb3+N+2GeJ1vzkMiQM/+Ls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.crl
rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 08:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131667, serialNumber=A42BC1580F0BDE9211FB8C08914AA5C2C011217B
Validity
Not Before: Oct 17 08:54:47 2026 GMT
Not After : Oct 24 08:54:47 2026 GMT
Subject: CN=6ad337d8-eb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:45:62:60:7e:d0:45:b1:76:ae:dd:23:51:
40:8a:1f:11:91:66:53:89:d5:c6:cf:39:97:35:9b:
14:f7:da:f5:6c:66:6e:f4:1a:48:c0:d7:9f:7d:9e:
d4:28:da:fc:a3:77:c8:66:b6:96:89:1e:eb:8d:22:
af:66:a2:31:d9:7f:89:18:d5:87:bf:36:81:fa:55:
25:ea:4e:20:1b:b2:5c:72:b2:62:bb:9f:72:c1:7c:
a7:c2:a3:bd:d3:07:3f:bc:60:90:d9:a4:af:41:ba:
f4:45:b5:62:16:8c:18:5d:37:30:2d:43:5f:32:4b:
0e:65:66:98:66:8c:4b:75:f4:23:83:19:56:38:ee:
ea:c0:74:5b:0f:61:df:2b:56:87:b5:bb:c3:3f:f0:
92:02:74:16:b0:e6:44:a1:c2:c7:c1:27:42:11:d7:
6a:3d:0b:96:7b:8a:80:aa:d5:e3:d5:1e:80:1f:4d:
e6:80:65:9d:a2:ed:d1:cc:89:ae:28:df:d5:63:50:
87:d4:73:c2:41:3d:09:b0:89:52:7d:f0:35:fb:74:
8d:fc:0c:b6:1f:06:6f:54:a3:e8:31:02:74:e9:00:
9f:57:32:8b:b2:cd:8c:a5:a8:51:1b:50:0d:5b:2d:
a5:5c:99:c9:29:0f:ca:f2:05:1e:7b:de:d0:43:8c:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0F:54:F5:E4:83:F1:43:6E:0B:5D:BB:96:8D:FC:2D:C6:3B:2C:EA
X509v3 Authority Key Identifier:
keyid:A4:2B:C1:58:0F:0B:DE:92:11:FB:8C:08:91:4A:A5:C2:C0:11:21:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:63:ad:b0:3a:25:27:aa:14:99:de:aa:e1:2a:8d:ca:5e:d4:
f5:3f:0e:59:90:71:4c:1b:88:09:92:48:98:08:63:7f:cc:39:
89:35:76:85:16:a7:e5:eb:46:ba:2f:ac:21:c0:29:65:92:d4:
c2:6a:74:87:bb:42:83:33:72:03:a1:e5:4a:16:f7:7a:fe:5d:
0b:09:19:af:1e:8b:63:57:fd:28:15:2f:65:71:c3:7c:68:b5:
16:fc:37:62:01:26:50:99:1c:41:c4:a3:31:7d:07:a9:79:1e:
8f:dc:37:d5:3a:6e:2e:f2:07:d6:19:0f:c3:fa:fc:ac:63:7c:
ad:49:1d:00:81:97:c8:02:58:00:9a:93:84:54:e8:b0:77:0c:
cf:ce:e8:0c:5a:67:01:e4:e7:17:e5:c6:9b:9f:a9:cc:5e:d4:
9f:6e:e3:48:93:a7:f5:2f:53:02:07:85:28:e4:56:4b:ed:1d:
09:d2:1f:bf:2c:38:3c:61:01:ac:29:ba:4e:f9:d9:6f:e5:48:
2e:14:8d:42:f9:ea:d4:69:83:8d:06:07:57:bd:43:0d:7e:7d:
6c:bb:e0:f7:e3:17:a3:6b:53:e2:7f:bf:20:85:35:45:ac:30:
96:5c:49:83:20:fb:59:b6:ce:f0:bf:50:70:b6:f1:b4:c3:f4:
2d:6c:3b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:50:36 2026 by rpki-client