
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json)
Hash identifier: gn/TdPqbcy50JHAMUAaSIe0E+K5fj/D8yHWrzZYMkZ4=
Subject key identifier: D6:F2:85:22:4D:EC:28:D6:63:0D:3E:37:A0:A0:9E:B7:64:CE:1A:7E
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial: 15DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
Manifest number: 15BA
Signing time: Sat 04 Apr 2026 16:39:47 +0000
Manifest this update: Sat 04 Apr 2026 16:39:46 +0000
Manifest next update: Sat 11 Apr 2026 16:39:46 +0000
Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: TS+Uri55ZD+dERygLzP/XVMOwtYSuGcdTdUsqF2GzDE=)
2: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: GqZMFA0L7ACjbBy6EEKhCEh6yrXjeUh2/sYjzUSadNQ=)
3: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: 49JEiOnck3YIqSnh0w+N5FmwAfU3DdS+vbKJpG7LI7Q=)
4: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: GS7Hz+JO/tFd7f6jkV506RLU0L8tY/ifzdZjJQhwPzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5595 (0x15db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Validity
Not Before: Apr 4 16:39:46 2026 GMT
Not After : Apr 11 16:39:46 2026 GMT
Subject: CN=69d13ed3-794a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:11:ee:d3:08:fc:af:1c:f2:df:3b:26:34:04:
46:c4:b5:87:d1:3e:81:45:a2:e8:60:80:82:81:8c:
d7:49:41:fa:44:c3:dd:13:28:fa:a0:05:86:aa:66:
57:df:e7:b5:30:48:8e:2e:d3:29:5c:77:15:df:00:
4b:46:63:63:7d:25:a0:5e:dd:7d:8a:6b:82:4b:0f:
1b:94:72:d1:bc:13:a5:c1:79:b6:68:b5:de:6f:3a:
b5:b3:e1:38:7e:10:b7:76:e3:b3:c7:8a:8d:da:8c:
d6:e4:da:bc:a7:e2:9a:d6:ae:1c:a0:65:01:34:51:
81:06:f4:ea:5b:9b:f1:89:80:90:81:a0:94:2d:26:
ff:ca:a6:1d:b2:ed:3d:09:3b:8f:26:12:f7:db:5d:
6c:23:92:4d:ad:79:55:31:2f:61:a3:4f:12:55:52:
ad:f7:c2:f9:f0:71:37:a0:7d:55:49:20:22:10:5d:
64:55:05:80:de:18:05:1c:86:97:f5:d5:fc:33:6b:
3b:f1:7f:b8:fe:d0:50:68:25:84:e7:0d:e1:1b:56:
20:f0:80:15:cd:da:8c:46:79:a2:c2:14:81:59:f7:
93:26:36:9a:4a:df:c8:09:cc:13:09:5c:9a:2c:c8:
fc:4e:86:da:84:81:32:ac:59:b1:d8:67:03:02:47:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F2:85:22:4D:EC:28:D6:63:0D:3E:37:A0:A0:9E:B7:64:CE:1A:7E
X509v3 Authority Key Identifier:
keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:14:d0:54:b5:08:41:04:c8:9a:68:3c:1a:a5:d2:0b:6d:8b:
2e:48:95:3e:c7:31:8f:17:f8:e2:65:e9:0c:3b:36:42:36:99:
ba:a3:08:3a:07:9d:d3:61:d7:be:53:0e:0c:3a:11:8e:7f:6e:
b4:2b:f5:43:e4:f0:ac:ce:ed:a1:b3:8b:92:2b:16:0a:03:21:
79:0e:bb:ff:4f:11:78:42:60:45:a3:d7:de:b1:26:63:cb:57:
44:5f:7c:39:6e:9a:a8:96:9c:c7:6e:c0:e3:75:b3:e2:c3:59:
4f:ea:10:f3:7a:5a:01:8e:60:55:23:22:98:b4:74:77:11:12:
41:06:ea:9a:53:0e:93:df:27:59:88:01:6a:ab:03:d5:ad:ed:
f5:0c:70:99:b4:10:c7:f2:f3:8e:51:aa:e0:2b:5d:2e:3c:8b:
76:54:3b:20:e7:94:6d:c7:8d:7b:fa:86:7a:be:55:06:f5:26:
c1:3e:66:cc:8b:a2:9b:9b:fd:6e:b7:67:f2:ec:47:62:d3:aa:
f1:28:12:3d:6c:e4:79:fe:9e:89:84:14:a3:64:c3:27:88:c9:
80:00:da:ca:10:d2:9b:2a:5f:47:9c:ab:88:f2:24:15:d6:bc:
5a:d6:5e:f6:38:19:ed:e4:0e:47:75:0d:ea:a9:ca:e2:83:ab:
88:94:cf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:07 2026 by rpki-client