
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
File: PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json)
Hash identifier: Bo2FcVw21y8hahXCbAsuYfdLfPQsCelGg7erPEmnkUo=
Subject key identifier: 80:9D:D1:42:1C:B5:74:55:FF:4C:26:8D:FA:36:20:0F:EA:40:07:F7
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Certificate issuer: /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial: 0541
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
Manifest number: 0539
Signing time: Tue 06 Oct 2026 23:39:24 +0000
Manifest this update: Tue 06 Oct 2026 23:39:23 +0000
Manifest next update: Tue 13 Oct 2026 23:39:23 +0000
Files and hashes: 1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: VeJl/zqQxjilg0gP4MTd8AA6/BN2uVSh7L+PCE9iwN4=)
2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: MZAkwEcI/RhPtb0HLVaP6vZemaPmWHrryFBvzadhdrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1345 (0x541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Validity
Not Before: Oct 6 23:39:23 2026 GMT
Not After : Oct 13 23:39:23 2026 GMT
Subject: CN=6ac586ab-0bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:65:d2:68:c4:9b:e4:5a:d2:13:94:a6:b4:
c6:48:b7:c0:20:47:e2:fa:f4:f0:7f:98:29:46:b2:
a3:e6:14:ef:f0:4b:41:00:fa:95:fa:13:0e:8b:42:
44:39:3a:3a:5f:ba:8b:3d:5d:dc:f0:15:b6:0c:6a:
e5:d6:64:0c:53:fd:92:f0:1b:75:5a:cd:fc:9e:5b:
ed:a1:f8:29:23:ea:cf:50:e9:f9:e4:c4:f3:6f:0c:
d6:7c:eb:85:ce:c5:5e:51:52:f9:3e:8f:e9:a2:b1:
03:4f:69:c1:5b:40:29:4d:41:e5:01:9e:a1:07:ff:
ee:e1:8b:b0:a5:6c:ff:5e:95:3c:12:99:cc:a1:52:
6f:7a:90:02:e1:21:6a:35:c4:73:c4:da:1c:f0:5f:
5d:f9:a9:6f:01:b1:f8:81:b9:b2:84:d5:1c:04:ed:
2c:00:8b:1f:ae:5e:21:28:bf:c9:e1:ac:3f:da:f1:
f9:44:be:58:54:53:f7:54:25:a7:d6:4c:de:8a:b8:
2d:43:8c:65:c3:a3:07:61:a2:43:b0:fc:a5:e3:38:
84:db:12:37:54:51:41:07:a2:cd:10:d5:aa:43:24:
37:3f:8e:ef:89:a9:f9:3c:f3:b5:f9:4f:9f:d3:5a:
38:12:48:db:ec:a5:93:2e:cf:0c:53:ab:d9:57:1c:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9D:D1:42:1C:B5:74:55:FF:4C:26:8D:FA:36:20:0F:EA:40:07:F7
X509v3 Authority Key Identifier:
keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:8a:b6:96:3c:98:39:c9:5f:33:3c:d7:99:cf:a2:63:07:e5:
b0:38:69:de:7d:33:34:6d:3d:c5:a0:46:f8:e8:2b:2a:96:8c:
39:0c:7b:cf:68:fd:c2:4f:7a:8e:71:b7:d8:97:a9:37:60:b0:
ea:1f:59:76:7c:4c:b9:2e:59:e6:e3:65:dc:aa:01:f3:4f:d0:
fe:fa:fa:40:6f:ef:c6:69:b0:a8:18:fd:c7:68:0d:3e:78:9e:
9e:4c:d4:2d:32:6f:06:cb:a1:1a:f5:84:93:a9:c8:28:72:d1:
f3:3f:4f:8e:7c:bd:ab:ed:1e:44:3a:38:16:d4:f6:3d:0a:e8:
a7:83:0e:7c:32:6c:16:d6:a9:10:1e:01:78:ae:f8:67:8d:87:
fb:fd:e3:6b:82:b2:75:3a:26:a8:f6:af:4b:d4:88:9b:2e:63:
8b:0b:37:80:72:1f:4e:f9:6c:3c:bd:da:10:3c:84:e0:f3:23:
22:04:31:b3:53:6f:15:d5:d5:8c:a3:59:d6:46:b6:2b:e7:ac:
ff:4d:4e:f1:1b:72:12:bf:47:91:9e:cb:25:3d:f0:70:7d:2c:
08:09:75:9f:a6:52:e1:f5:56:80:22:de:02:9f:be:00:f8:a8:
d2:fd:1a:d7:db:5e:f9:e7:77:9a:c8:f2:15:67:0d:ef:99:0b:
7f:10:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:44:36 2026 by rpki-client