
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
File: PVoEjy0O64mMxmE79kE3I3iWTLA.mft (raw, json)
Hash identifier: fKt7scfMxZhgIqSKAXWjBxLRR61c8hTrNghvvmmEudA=
Subject key identifier: C3:F1:60:95:56:AD:84:4C:87:25:4A:14:5B:43:E5:4E:E3:3B:C2:73
Authority key identifier: 3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0
Certificate issuer: /CN=A919AFBE/serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
Manifest number: 66
Signing time: Tue 19 May 2026 07:47:07 +0000
Manifest this update: Tue 19 May 2026 07:47:06 +0000
Manifest next update: Tue 26 May 2026 07:47:06 +0000
Files and hashes: 1: PVoEjy0O64mMxmE79kE3I3iWTLA.crl (hash: ek9wVusD6z5322w2kfKBGH8LpcRltWdQHXid25rioD8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl
rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 07:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AFBE, serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
Validity
Not Before: May 19 07:47:06 2026 GMT
Not After : May 26 07:47:06 2026 GMT
Subject: CN=6a0c157b-00b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:69:65:e9:cc:e3:80:28:82:70:ff:ea:e2:
d1:d9:0b:6b:35:7f:78:75:2f:94:17:52:38:ca:46:
ac:9e:7a:db:e2:56:1c:eb:ea:03:5e:e9:fe:ed:bc:
3a:6d:da:87:79:95:ff:ad:36:d7:88:90:1d:9f:ff:
28:d0:e0:2e:50:9d:f9:2a:2f:7c:61:ca:44:0c:f3:
40:22:1b:cb:2e:01:bb:47:25:41:a1:44:cd:1a:89:
34:43:53:6f:2b:79:e3:d9:2f:3e:fd:51:d0:bc:bf:
ed:b3:85:05:2f:d9:76:1c:56:ef:43:b5:a6:2e:a1:
76:75:1b:06:a0:89:bc:42:07:cc:d0:7b:92:bd:35:
6b:45:3a:98:87:18:5d:1c:6b:6c:cd:21:b9:c9:92:
c6:46:af:ce:08:0b:8a:93:0d:74:5a:9f:b2:d8:99:
d0:e5:2b:e6:e8:1c:8e:89:28:d4:2b:81:1e:c1:58:
81:1e:76:52:74:eb:13:6d:51:48:5e:b5:ee:d2:cf:
53:2d:1a:9b:d5:65:d5:02:e2:53:23:23:b4:bc:d3:
c7:6e:4d:9f:5a:0f:c8:a5:5d:c9:de:6e:48:93:a5:
a9:27:32:ca:19:d3:73:90:0c:59:ec:bc:97:c3:dd:
28:d2:61:a5:11:74:b6:a6:fe:0c:4e:ba:7b:57:ea:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F1:60:95:56:AD:84:4C:87:25:4A:14:5B:43:E5:4E:E3:3B:C2:73
X509v3 Authority Key Identifier:
keyid:3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:3d:e9:da:6a:9b:16:9a:79:27:93:f7:23:7c:ca:6a:f3:71:
20:28:1b:d2:e2:ba:e8:7c:c7:31:b3:e7:be:42:bf:e5:ed:36:
98:eb:a5:44:ee:9e:db:87:c9:bf:b3:15:a5:54:80:03:2e:b1:
13:9d:95:b1:39:22:73:dd:bd:8c:d5:ca:ea:5b:bd:93:59:39:
3d:07:68:15:52:48:fd:eb:40:e5:7d:c2:07:47:98:61:ff:54:
0e:87:0d:ee:38:b4:32:09:80:6d:32:d3:cf:a1:44:75:62:ea:
2c:18:6c:27:ff:cd:7d:3d:34:6b:f5:7b:4e:85:a9:90:4f:73:
4e:70:84:5b:7a:07:2f:e0:ba:04:0c:18:4d:b6:d4:f4:d5:03:
cb:2e:e8:46:d9:e6:56:f8:4a:4a:34:eb:ab:28:e5:cb:5e:cb:
89:16:30:03:d4:bf:25:1c:1f:32:c1:3c:bf:7f:42:17:11:e5:
1a:07:1d:3e:9f:29:00:81:84:e6:95:5f:a6:84:0f:33:13:da:
ea:85:63:db:af:cd:5e:ac:c0:93:bd:ae:20:8d:fd:93:c1:5e:
26:71:5e:ee:2b:ca:79:9f:2e:3d:59:7a:e3:af:89:f2:ad:ef:
af:73:d6:11:e9:35:f5:90:15:32:9b:98:7d:b7:46:3e:d4:35:
b1:18:ad:3e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
QUZCRTExMC8GA1UEBRMoM0Q1QTA0OEYyRDBFRUI4OThDQzY2MTNCRjY0MTM3MjM3
ODk2NENCMDAeFw0yNjA1MTkwNzQ3MDZaFw0yNjA1MjYwNzQ3MDZaMBgxFjAUBgNV
BAMTDTZhMGMxNTdiLTAwYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZumll6czjgCiCcP/q4tHZC2s1f3h1L5QXUjjKRqyeetviVhzr6gNe6f7tvDpt
2od5lf+tNteIkB2f/yjQ4C5QnfkqL3xhykQM80AiG8suAbtHJUGhRM0aiTRDU28r
eePZLz79UdC8v+2zhQUv2XYcVu9DtaYuoXZ1GwagibxCB8zQe5K9NWtFOpiHGF0c
a2zNIbnJksZGr84IC4qTDXRan7LYmdDlK+boHI6JKNQrgR7BWIEedlJ06xNtUUhe
te7Sz1MtGpvVZdUC4lMjI7S808duTZ9aD8ilXcnebkiTpaknMsoZ03OQDFnsvJfD
3SjSYaURdLam/gxOuntX6oCPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUw/FglVat
hEyHJUoUW0PlTuM7wnMwHwYDVR0jBBgwFoAUPVoEjy0O64mMxmE79kE3I3iWTLAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBRkJFL0MzODgyNzYyQkEx
RTExRjBCOTg3MzkzQkM0RjlBRTAyL1BWb0VqeTBPNjRtTXhtRTc5a0UzSTNpV1RM
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUFZvRWp5ME82NG1NeG1FNzlrRTNJM2lXVExBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB
RkJFL0MzODgyNzYyQkExRTExRjBCOTg3MzkzQkM0RjlBRTAyL1BWb0VqeTBPNjRt
TXhtRTc5a0UzSTNpV1RMQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQACPenaapsWmnknk/cjfMpq83EgKBvS4rrofMcxs+e+Qr/l7TaY66VE7p7bh8m/
sxWlVIADLrETnZWxOSJz3b2M1crqW72TWTk9B2gVUkj960DlfcIHR5hh/1QOhw3u
OLQyCYBtMtPPoUR1YuosGGwn/819PTRr9XtOhamQT3NOcIRbegcv4LoEDBhNttT0
1QPLLuhG2eZW+EpKNOurKOXLXsuJFjAD1L8lHB8ywTy/f0IXEeUaBx0+nykAgYTm
lV+mhA8zE9rqhWPbr81erMCTva4gjf2TwV4mcV7uK8p5ny49WXrjr4nyre+vc9YR
6TX1kBUym5h9t0Y+1DWxGK0+
-----END CERTIFICATE-----
Generated at Thu May 21 09:39:01 2026 by rpki-client