
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
File: PVoEjy0O64mMxmE79kE3I3iWTLA.mft (raw, json)
Hash identifier: /ve4A2LEtPchRKNFH5mW66kfuwc4MhXK0xJI1ZAXh8M=
Subject key identifier: 7B:AC:34:35:53:FB:D2:14:85:AA:23:4C:B3:C9:EC:74:15:A6:F8:6B
Authority key identifier: 3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0
Certificate issuer: /CN=A919AFBE/serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
Manifest number: 8A
Signing time: Fri 17 Jul 2026 08:49:39 +0000
Manifest this update: Fri 17 Jul 2026 08:49:38 +0000
Manifest next update: Fri 24 Jul 2026 08:49:38 +0000
Files and hashes: 1: PVoEjy0O64mMxmE79kE3I3iWTLA.crl (hash: 5d6ZHIouj70aoybcWtTNg+zM16yqDL1n32SmigzNJO4=)
2: 49897D0A6E3511F1B6ACEAD77AA30FBC.roa (hash: JkXwVVHd7lwJJQ/NTtKotISrkpcWB+71sqmfcxbph+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl
rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AFBE, serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
Validity
Not Before: Jul 17 08:49:38 2026 GMT
Not After : Jul 24 08:49:38 2026 GMT
Subject: CN=6a59eca3-9f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:ac:fa:1e:a3:de:a3:07:a3:06:4a:95:db:
dc:8e:d7:3f:d3:ae:da:86:d6:b5:5d:ff:07:16:29:
21:a2:72:9d:0f:08:82:96:18:cb:86:29:20:6b:f1:
ed:39:07:80:e6:c2:b1:45:3a:40:d5:d0:0e:fc:c0:
f0:f3:26:47:11:04:a0:16:74:99:e6:39:ff:f6:c1:
ed:69:cc:c2:b6:b7:c6:34:8e:20:03:f6:10:ce:74:
d1:88:01:f6:0c:bf:8a:bf:19:0d:e0:f2:88:01:93:
59:42:6b:ac:47:5b:ce:00:a3:a3:f3:64:01:31:81:
3d:d1:18:e0:03:7a:75:44:7a:3a:a6:39:99:13:0d:
df:8f:61:51:7c:7d:99:25:33:e4:b6:63:44:d5:ee:
b1:7a:d6:eb:78:e0:ac:0c:57:6b:2f:1b:b7:5f:46:
81:c1:3c:6e:3c:67:e3:2e:97:2f:75:bc:49:fa:26:
de:ec:26:f8:8a:c1:a3:e9:5e:9c:ac:71:5e:74:fe:
cc:c1:ce:cd:9b:69:5f:cf:d6:76:35:8b:00:a5:6d:
e1:b6:40:57:d5:22:05:18:ae:ad:7e:e8:c5:1d:93:
0f:a2:3c:65:a9:0f:74:c2:fa:3b:08:93:5c:b3:16:
fe:6f:8d:02:45:26:4c:4a:4d:b7:3e:d9:7f:8e:3a:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AC:34:35:53:FB:D2:14:85:AA:23:4C:B3:C9:EC:74:15:A6:F8:6B
X509v3 Authority Key Identifier:
keyid:3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:5d:e9:1a:1c:46:1e:52:00:63:a7:f3:7f:f2:6d:7b:5e:83:
ea:ac:ec:5d:0f:b2:e9:8c:e3:37:eb:2f:ff:33:14:89:62:80:
51:0f:96:8c:e8:b0:20:eb:65:ba:8e:b8:7e:34:12:3d:c1:cf:
f8:72:89:fe:36:8e:a4:15:c5:f0:a0:32:05:58:21:62:3c:6f:
f8:16:a3:49:87:2f:9e:33:ea:ef:9f:fd:69:97:07:38:fc:a1:
71:0e:28:ff:04:1d:b4:1d:5d:c2:1f:12:94:75:b8:1e:a1:a4:
41:71:0b:c8:cc:0a:1a:f9:b4:c7:aa:0d:f5:e7:2c:03:38:96:
29:e5:7a:4f:41:28:84:e6:75:27:1a:1e:3b:8b:84:fe:47:f4:
1e:6d:1b:f4:bb:d6:b2:9e:00:d7:83:de:b3:d7:a7:f2:12:2f:
4d:28:1c:f2:ac:ad:65:4f:52:03:34:7b:ae:4d:d3:0c:2c:b9:
b4:60:24:ec:6c:9d:47:1c:91:12:b6:9b:bf:6c:ae:24:c7:22:
5a:40:f4:ff:30:74:4f:4c:b3:ae:59:3f:88:d6:69:6e:91:55:
1b:a7:95:08:2a:43:23:39:db:b9:86:91:f4:0b:62:0a:c6:88:
cb:29:d5:1e:71:f3:0a:5f:3a:ee:f2:e5:36:ca:7e:d6:7d:54:
5a:76:71:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUFGQkUxMTAvBgNVBAUTKDNENUEwNDhGMkQwRUVCODk4Q0M2NjEzQkY2NDEzNzIz
Nzg5NjRDQjAwHhcNMjYwNzE3MDg0OTM4WhcNMjYwNzI0MDg0OTM4WjAYMRYwFAYD
VQQDEw02YTU5ZWNhMy05ZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs96s+h6j3qMHowZKldvcjtc/067ahta1Xf8HFikhonKdDwiClhjLhikga/Ht
OQeA5sKxRTpA1dAO/MDw8yZHEQSgFnSZ5jn/9sHtaczCtrfGNI4gA/YQznTRiAH2
DL+KvxkN4PKIAZNZQmusR1vOAKOj82QBMYE90RjgA3p1RHo6pjmZEw3fj2FRfH2Z
JTPktmNE1e6xetbreOCsDFdrLxu3X0aBwTxuPGfjLpcvdbxJ+ibe7Cb4isGj6V6c
rHFedP7Mwc7Nm2lfz9Z2NYsApW3htkBX1SIFGK6tfujFHZMPojxlqQ90wvo7CJNc
sxb+b40CRSZMSk23Ptl/jjrK4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHusNDVT
+9IUhaojTLPJ7HQVpvhrMB8GA1UdIwQYMBaAFD1aBI8tDuuJjMZhO/ZBNyN4lkyw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUZCRS9DMzg4Mjc2MkJB
MUUxMUYwQjk4NzM5M0JDNEY5QUUwMi9QVm9FankwTzY0bU14bUU3OWtFM0kzaVdU
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BWb0VqeTBPNjRtTXhtRTc5a0UzSTNpV1RMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QUZCRS9DMzg4Mjc2MkJBMUUxMUYwQjk4NzM5M0JDNEY5QUUwMi9QVm9FankwTzY0
bU14bUU3OWtFM0kzaVdUTEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABF3pGhxGHlIAY6fzf/Jte16D6qzsXQ+y6YzjN+sv/zMUiWKAUQ+WjOiwIOtl
uo64fjQSPcHP+HKJ/jaOpBXF8KAyBVghYjxv+BajSYcvnjPq75/9aZcHOPyhcQ4o
/wQdtB1dwh8SlHW4HqGkQXELyMwKGvm0x6oN9ecsAziWKeV6T0EohOZ1JxoeO4uE
/kf0Hm0b9LvWsp4A14Pes9en8hIvTSgc8qytZU9SAzR7rk3TDCy5tGAk7GydRxyR
Erabv2yuJMciWkD0/zB0T0yzrlk/iNZpbpFVG6eVCCpDIznbuYaR9AtiCsaIyynV
HnHzCl867vLlNsp+1n1UWnZxGQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:13:50 2026 by rpki-client