
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft
File: parvp2FTU0y7DrZLaMQp9dx_ngo.mft (raw, json)
Hash identifier: zbiQb17medqUFKz5PCBQccplk27OdN4vNojf1yqBhBc=
Subject key identifier: 3C:D6:37:D2:03:0A:3F:14:EA:79:88:52:B5:5B:51:39:36:A5:32:87
Authority key identifier: A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A
Certificate issuer: /CN=A918A2D9/serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft
Manifest number: A1
Signing time: Mon 01 Jun 2026 08:06:17 +0000
Manifest this update: Mon 01 Jun 2026 08:06:17 +0000
Manifest next update: Mon 08 Jun 2026 08:06:17 +0000
Files and hashes: 1: parvp2FTU0y7DrZLaMQp9dx_ngo.crl (hash: gZKg28TttzlNEgV1SYWeRr9fEkTVT0S9bbaHhCPZAhk=)
2: B1291960691911F08409AD61C4F9AE02.roa (hash: ljIvCH94VnRJKOZpinJz66F/PBUT8yWf/MpJf56yOko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl
rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A2D9, serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A
Validity
Not Before: Jun 1 08:06:17 2026 GMT
Not After : Jun 8 08:06:17 2026 GMT
Subject: CN=6a1d3d79-b9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:5b:36:e3:8f:4f:c2:e9:22:b4:74:b6:82:
94:32:94:d0:5a:52:a4:bc:7a:da:0e:69:51:1b:0c:
ef:88:34:7a:cc:fb:1e:33:27:a9:9c:3d:b4:16:f2:
11:d8:39:0f:1d:de:49:0f:f1:bb:9c:05:1e:0e:e2:
86:ad:7b:18:7c:cc:58:9d:00:39:eb:b3:09:7b:9e:
59:11:a0:4e:21:77:b3:57:fe:42:ed:be:56:06:16:
16:09:6f:fe:21:fd:95:83:20:3a:77:ce:69:b9:2b:
12:8b:40:22:9c:fa:4a:87:18:6b:82:0d:2e:68:c6:
24:56:2d:eb:15:5f:15:b1:9a:fe:cd:2c:ae:0f:f7:
36:53:7a:95:41:bd:7e:90:b3:9b:24:88:ac:7b:51:
72:67:d7:4a:e2:fd:55:2f:69:26:c1:33:4c:37:2c:
20:2c:a7:90:b5:9f:0d:76:d2:77:94:9f:80:29:95:
3c:e0:25:4d:be:9a:a8:bf:23:ef:fc:54:f7:ee:72:
7b:31:4a:45:52:60:f6:c6:f7:5c:83:49:f5:d2:bd:
13:76:32:2a:72:00:6f:c9:af:63:d1:50:fe:af:7a:
93:88:b8:7e:1a:e1:4c:e5:c5:00:79:1d:ab:cf:49:
89:d0:c2:d0:db:4d:65:fa:b1:d8:6b:e9:a4:ec:5b:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D6:37:D2:03:0A:3F:14:EA:79:88:52:B5:5B:51:39:36:A5:32:87
X509v3 Authority Key Identifier:
keyid:A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:e8:97:a1:d5:66:2b:1a:35:44:98:d5:e9:28:ea:f1:95:4c:
fa:dd:0a:85:34:ae:d4:84:23:7a:dc:cc:5d:45:d3:1f:74:19:
8c:28:8a:47:05:a2:2f:29:f4:44:d4:6c:a8:10:8e:40:c9:4c:
0a:33:4a:cc:6b:75:52:0e:07:2b:0a:c6:8b:cf:aa:1f:93:be:
83:c3:45:60:26:52:00:2b:2c:57:b8:27:f9:7c:ac:88:b4:e5:
91:3e:07:1b:14:56:fb:37:b7:0c:97:75:5a:1e:a8:16:36:23:
4d:34:8c:21:8f:bc:7f:7d:93:af:0d:7b:7c:fc:36:ca:ff:d5:
53:fe:c9:5a:09:bd:13:89:3c:88:ff:d2:50:14:58:93:0b:93:
81:21:39:7d:0b:2f:1f:9e:0b:f9:c6:b6:9f:77:81:a0:d7:97:
e2:9f:2d:9e:6b:53:06:e9:61:58:43:dd:22:01:36:1a:81:f2:
75:d1:3a:73:34:eb:80:78:32:4f:ef:b0:35:1c:b6:cd:50:60:
b8:b3:11:09:ee:aa:12:75:d0:e7:cd:37:44:c5:c6:50:9a:ce:
70:ec:e9:8f:eb:ef:9f:32:9c:93:9f:f9:ab:80:84:3d:55:fe:
43:a3:21:a8:59:1e:e9:bb:63:3b:dc:06:e4:0b:32:51:3c:b4:
f1:57:e2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:09 2026 by rpki-client