
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
File: PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json)
Hash identifier: wVArain9FZneLoZV8A3JP1fo8Te/dfQZ2nwytOMa6jA=
Subject key identifier: 8B:18:82:C8:91:31:3A:CE:93:7D:C9:F3:17:FC:1C:F7:7B:01:71:43
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Certificate issuer: /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial: 04D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
Manifest number: 04CA
Signing time: Mon 02 Mar 2026 23:56:39 +0000
Manifest this update: Mon 02 Mar 2026 23:56:39 +0000
Manifest next update: Mon 09 Mar 2026 23:56:39 +0000
Files and hashes: 1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: m7ROCHhMrMqrAdXFcdW6Gd1+/0Gyrdvk++2zTocRAy8=)
2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: MZAkwEcI/RhPtb0HLVaP6vZemaPmWHrryFBvzadhdrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 23:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1234 (0x4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Validity
Not Before: Mar 2 23:56:39 2026 GMT
Not After : Mar 9 23:56:39 2026 GMT
Subject: CN=69a623b7-69a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:a5:b5:f7:dd:1a:35:71:b4:1e:df:f2:f0:
41:71:4b:1b:c0:f0:d8:f6:8e:51:1a:b5:fc:cb:89:
bc:47:2c:95:ba:6c:0f:5a:44:b3:aa:5e:ad:15:1b:
8d:b2:a9:f1:78:45:47:50:5b:9a:b4:9a:64:15:85:
a4:af:25:31:3b:32:8d:49:cb:ff:5c:fc:05:b7:a9:
4a:0b:09:95:ee:03:66:d4:2b:f9:df:d8:3f:5b:b0:
41:2e:12:ef:c3:8e:75:b0:e6:80:38:b9:58:b5:aa:
a4:9e:43:51:f1:eb:ef:d4:29:89:41:d3:ae:1a:35:
fa:99:1d:05:d4:b4:2b:97:c8:fa:df:ad:a2:b1:99:
50:a4:19:f6:ce:8f:40:60:a9:3b:65:50:7b:5d:0c:
ae:67:a4:cb:20:f9:63:e4:3d:a5:c9:d4:dc:a8:c7:
fd:62:18:1e:79:21:98:d9:c3:fd:8b:5f:da:c0:50:
c5:0e:b1:04:cd:68:7b:ec:6e:45:e1:49:b1:b6:7b:
34:f1:cd:25:0d:36:32:0b:54:9e:84:77:af:76:fd:
c7:8b:13:00:52:e7:15:a3:bc:52:eb:8a:ce:c9:c5:
02:4b:cb:8c:b6:f6:8c:da:10:ed:a9:d3:f2:2a:f5:
d9:45:16:b5:9e:2d:42:06:82:c5:2a:07:56:33:5a:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:18:82:C8:91:31:3A:CE:93:7D:C9:F3:17:FC:1C:F7:7B:01:71:43
X509v3 Authority Key Identifier:
keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b0:77:c7:f8:88:05:a7:dc:9b:5e:c0:21:00:c4:33:c1:5f:
73:a8:18:c1:58:d8:aa:fd:dd:19:86:cf:aa:cb:e8:84:60:a1:
cb:18:65:1e:bf:10:ae:b3:77:e7:40:4d:15:ec:57:ea:02:b8:
fb:51:0f:79:3d:eb:99:d5:9f:85:1f:02:37:16:44:eb:9d:52:
03:37:2d:f2:34:b3:45:de:cb:c1:15:ef:31:34:b3:ab:5d:67:
13:65:cf:3f:bb:96:de:eb:bc:54:85:2a:5c:fc:4d:38:ea:ae:
f4:c4:69:10:2c:5e:8c:bb:7f:c4:6e:ac:98:01:a1:4d:ed:36:
95:a9:18:81:07:75:be:13:a6:3c:d7:f5:7f:7c:73:91:15:90:
d9:69:51:6c:4a:b2:88:5e:6f:4d:6e:ed:c0:96:e2:2a:ae:cd:
4e:17:41:6c:3f:9c:eb:cb:31:90:d7:e4:b0:d8:07:20:05:e1:
5d:e3:7d:94:ed:81:8c:02:12:d8:b3:ff:fb:b2:1a:87:5c:78:
8d:b8:a8:c9:b1:d4:34:15:d5:1e:f1:24:64:39:a4:06:8c:2c:
68:55:3e:c0:bd:29:5e:b1:92:40:eb:b1:9f:86:ca:8b:e3:ff:
cc:07:a3:3e:0d:4b:79:b1:ab:f2:da:42:ad:ba:aa:3a:61:5f:
03:99:1f:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBFRjIxMTAvBgNVBAUTKDNENUQ4NjQ3QUJBOUJCNDA2MjVDM0M2NDNDRDgzNjdG
MTUwNzgwMUEwHhcNMjYwMzAyMjM1NjM5WhcNMjYwMzA5MjM1NjM5WjAYMRYwFAYD
VQQDEw02OWE2MjNiNy02OWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2SltffdGjVxtB7f8vBBcUsbwPDY9o5RGrX8y4m8RyyVumwPWkSzql6tFRuN
sqnxeEVHUFuatJpkFYWkryUxOzKNScv/XPwFt6lKCwmV7gNm1Cv539g/W7BBLhLv
w451sOaAOLlYtaqknkNR8evv1CmJQdOuGjX6mR0F1LQrl8j6362isZlQpBn2zo9A
YKk7ZVB7XQyuZ6TLIPlj5D2lydTcqMf9YhgeeSGY2cP9i1/awFDFDrEEzWh77G5F
4Umxtns08c0lDTYyC1SehHevdv3HixMAUucVo7xS64rOycUCS8uMtvaM2hDtqdPy
KvXZRRa1ni1CBoLFKgdWM1oLvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsYgsiR
MTrOk33J8xf8HPd7AXFDMB8GA1UdIwQYMBaAFD1dhkerqbtAYlw8ZDzYNn8VB4Aa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGMi9BQjZCMjdGNjVF
RTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9QVjJHUjZ1cHUwQmlYRHhrUE5nMmZ4VUhn
Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BWMkdSNnVwdTBCaVhEeGtQTmcyZnhVSGdCby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEVGMi9BQjZCMjdGNjVFRTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9QVjJHUjZ1cHUw
QmlYRHhrUE5nMmZ4VUhnQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwLB3x/iIBafcm17AIQDEM8Ffc6gYwVjYqv3dGYbPqsvohGChyxhlHr8QrrN3
50BNFexX6gK4+1EPeT3rmdWfhR8CNxZE651SAzct8jSzRd7LwRXvMTSzq11nE2XP
P7uW3uu8VIUqXPxNOOqu9MRpECxejLt/xG6smAGhTe02lakYgQd1vhOmPNf1f3xz
kRWQ2WlRbEqyiF5vTW7twJbiKq7NThdBbD+c68sxkNfksNgHIAXhXeN9lO2BjAIS
2LP/+7Iah1x4jbioybHUNBXVHvEkZDmkBowsaFU+wL0pXrGSQOuxn4bKi+P/zAej
Pg1LebGr8tpCrbqqOmFfA5kfiw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:02 2026 by rpki-client