
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
File: povAkQ-DHeyBilCjIUX3Q1XOY8A.mft (raw, json)
Hash identifier: DOA9dYHwMRHenvox2mtDtbAS+ZLTTSPpG4Py/mhYSyE=
Subject key identifier: 21:CC:73:DE:CE:A9:81:24:D9:B0:F6:A7:46:7C:84:38:FF:D3:FB:09
Authority key identifier: A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0
Certificate issuer: /CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0
Certificate serial: 06F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
Manifest number: 06EB
Signing time: Sun 31 May 2026 22:49:12 +0000
Manifest this update: Sun 31 May 2026 22:49:12 +0000
Manifest next update: Sun 07 Jun 2026 22:49:12 +0000
Files and hashes: 1: povAkQ-DHeyBilCjIUX3Q1XOY8A.crl (hash: kFQ0CR6TVqNvMd3EKDmEfiaTosWKNOdePuNhpYSWLOw=)
2: 7CEDB29645AB11F0B5F06B1EC4F9AE02.roa (hash: cuTcSvsy91evXebubUcglrHQy4himiOB3q1RBQePizU=)
3: 61C842F4467A11F08609BD71C4F9AE02.roa (hash: XYlsQmUIHcjvKGfLOavm1lS+/6BxzuVhj/mxq5UNHus=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl
rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 22:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1782 (0x6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B6FC, serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0
Validity
Not Before: May 31 22:49:12 2026 GMT
Not After : Jun 7 22:49:12 2026 GMT
Subject: CN=6a1cbae8-651b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:7e:6a:54:c7:ec:49:48:b3:f5:94:f9:6d:
d0:e7:28:58:74:c2:26:10:f4:87:a6:79:22:1b:b3:
bb:38:d0:ab:3c:57:ba:72:d8:2e:2b:50:0f:af:2d:
b1:e3:98:07:be:52:e0:40:ad:a8:4f:97:b1:a1:a5:
5f:3b:43:e5:04:5f:22:42:6b:26:c2:35:9f:9b:e0:
03:f7:34:07:88:e3:9b:80:33:2f:c7:1b:38:f7:64:
dc:91:32:fe:ef:47:34:25:cc:a5:36:ff:af:67:0f:
ad:c3:5e:c0:9d:0f:29:d4:85:fc:23:eb:16:02:47:
6e:2f:79:b1:e7:b2:5c:79:32:39:f8:7d:b5:56:99:
d2:fc:4a:3d:d3:25:be:13:94:91:46:b5:1d:22:19:
22:b6:87:b6:12:0a:fa:c6:4d:78:39:3e:e7:f1:1e:
54:58:38:c3:0f:08:da:75:d0:84:ff:6c:55:0a:fa:
a5:13:3f:35:38:09:db:59:e7:dd:c2:7c:5c:5b:21:
27:b6:24:3c:77:2e:8e:19:30:ba:43:65:65:f2:f0:
cc:c4:f5:c9:2e:9d:b2:cb:79:98:1b:35:b7:f5:c3:
28:f9:69:ff:18:1d:7e:1c:08:2a:dc:a0:35:44:22:
2b:9e:3b:d9:1c:49:6e:f1:7e:be:f0:d9:dd:c7:8e:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CC:73:DE:CE:A9:81:24:D9:B0:F6:A7:46:7C:84:38:FF:D3:FB:09
X509v3 Authority Key Identifier:
keyid:A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:4b:f7:2a:cb:e9:5d:8c:4d:fe:4b:79:5b:dd:b4:97:1f:15:
4e:f0:7e:8e:6f:da:5c:2f:64:b3:8b:30:ad:33:73:18:60:8b:
5b:67:80:08:90:f1:40:23:ce:e5:19:31:08:e0:c0:81:c4:bc:
23:e1:2c:34:f0:bf:f3:a8:c1:f7:6f:17:7d:ab:b2:03:05:8e:
f0:5e:03:5f:48:85:a0:cd:31:17:8f:e9:f3:7c:84:ce:fd:e3:
4f:ea:ec:97:67:08:23:1a:85:41:55:65:2d:94:78:4d:54:b7:
16:d1:bb:09:30:00:59:66:17:15:6c:5d:bf:5d:e9:96:fc:da:
76:72:12:5e:c2:43:7f:b0:98:73:58:fc:7f:6f:3c:e3:24:07:
97:b9:d4:98:48:a0:77:6c:d7:fa:c6:87:cf:21:53:24:a2:fd:
c4:86:3c:4d:58:9d:26:c3:04:51:3b:2e:51:ef:d0:52:50:d3:
a6:77:da:d0:f0:b1:c1:49:ec:ba:3d:3a:a8:b4:62:7f:f8:9a:
8d:e3:ba:e3:58:e7:eb:e4:80:54:f2:e0:69:3f:fa:0b:7c:a0:
23:4f:8a:87:bb:78:10:8b:15:cd:e0:62:60:fa:f0:c6:4b:0f:
be:d6:64:bd:fd:83:1a:ed:60:6e:c0:f1:4c:aa:07:aa:7b:c1:
24:1b:48:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:02:36 2026 by rpki-client