
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json)
Hash identifier: gBiWL9i9n763ahhs3YAAdoKa43BxEA9ziZUsv21Z1T8=
Subject key identifier: 43:34:CC:D6:F4:06:6A:78:3B:ED:7E:B8:1D:ED:91:43:63:70:CD:D6
Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6
Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6
Certificate serial: 0F89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
Manifest number: 0F78
Signing time: Sun 04 Oct 2026 17:33:49 +0000
Manifest this update: Sun 04 Oct 2026 17:33:48 +0000
Manifest next update: Sun 11 Oct 2026 17:33:48 +0000
Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: 3sF+6Iwx32lVsIUDfQQyX5F3fIVzIPMpJojJdq2YIFA=)
2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: YNBFBbDYDj4mNBC+V1HiyO4vpNMunMhvxcfcPzCMYGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl
rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 17:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3977 (0xf89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6
Validity
Not Before: Oct 4 17:33:48 2026 GMT
Not After : Oct 11 17:33:48 2026 GMT
Subject: CN=6ac28dfd-6495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:71:8e:47:38:33:a6:06:90:34:b9:2a:06:1d:
43:44:65:4f:52:af:43:ca:b5:46:d3:24:8a:3f:87:
36:50:84:45:da:d5:9c:50:07:1d:19:3c:ef:71:5f:
b8:d1:21:8c:6b:dc:1e:3e:6e:ab:a3:ca:37:24:8d:
b2:4d:c5:c1:d8:2f:d6:1c:19:45:fe:7f:5a:1b:e9:
ed:20:dd:dd:0f:36:07:5a:e9:0d:3e:1a:cb:d1:72:
96:82:b6:92:eb:41:b0:90:8c:ee:70:5c:6b:f6:67:
99:98:d7:f8:ad:d2:1f:a3:7c:56:ba:1d:d4:1a:b6:
49:df:ae:ff:55:c2:ed:7d:c3:2c:fa:91:4a:04:f4:
b0:13:67:30:48:1a:5d:b3:b6:94:6b:5b:b9:a5:e2:
51:86:cf:4a:5a:bf:ef:d8:f8:b8:8b:49:f4:9e:38:
7e:8f:39:41:b6:01:7a:fb:1d:2d:ad:ae:4c:c3:b3:
d2:34:70:f0:11:e3:c9:d9:91:8f:96:26:80:89:43:
f9:1a:aa:4b:03:07:91:41:76:1c:2d:87:81:46:75:
74:51:9f:6d:ca:46:1b:72:bc:a7:a7:d0:39:e4:e8:
01:55:30:68:35:59:83:36:10:48:bf:ac:ce:64:83:
dd:5c:b3:77:ab:b7:d9:7a:6e:5a:b0:27:26:64:e9:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:34:CC:D6:F4:06:6A:78:3B:ED:7E:B8:1D:ED:91:43:63:70:CD:D6
X509v3 Authority Key Identifier:
keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:52:54:f6:bd:55:5f:98:25:8c:9b:dd:16:20:e5:35:e9:d9:
2b:b9:f2:9f:ad:54:bf:05:4f:85:bd:25:7e:11:4c:e5:2a:8a:
84:4d:93:a7:7a:7a:89:e7:7c:27:bd:9c:6b:a5:f7:bf:5b:94:
e5:d7:d0:0e:40:ad:1d:e3:0e:59:37:d1:5c:f7:0d:55:9f:71:
13:f5:55:8e:42:ef:ac:26:4e:bb:19:02:f6:19:1d:d9:0d:9f:
11:0e:49:72:3d:bb:66:49:f5:f8:7c:5f:8b:e8:3e:f0:80:ea:
7c:85:22:05:10:10:3a:b1:bb:3d:cb:c9:5d:8c:44:ee:98:c0:
af:07:4a:dc:33:1c:d1:47:39:4a:31:92:90:b9:7a:9b:9f:cb:
e5:41:12:60:7a:f0:d2:3f:8c:42:b9:bf:af:84:69:63:db:f7:
9c:ce:63:8e:ff:24:e6:f7:95:7a:a8:df:80:1f:db:28:f0:51:
35:dc:45:c4:e5:fc:13:5a:80:99:d3:92:3a:ef:1e:ed:7b:35:
a1:66:4a:43:d9:0f:b7:46:4e:bd:93:83:bb:a5:b0:0e:09:4c:
0b:c0:a2:74:16:37:f8:21:5b:30:4a:50:03:f8:ce:ca:49:a8:
b0:8c:36:9c:9c:db:d9:f8:61:f1:85:60:b0:5c:0e:06:a4:b6:
ba:17:5c:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ2NjgxMTAvBgNVBAUTKDNEMDU1NkQxOTNCQzkyQTIxRUE3NDdGOTU4QzY5N0E5
N0VDNUQ1RDYwHhcNMjYxMDA0MTczMzQ4WhcNMjYxMDExMTczMzQ4WjAYMRYwFAYD
VQQDEw02YWMyOGRmZC02NDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz3GORzgzpgaQNLkqBh1DRGVPUq9DyrVG0ySKP4c2UIRF2tWcUAcdGTzvcV+4
0SGMa9wePm6ro8o3JI2yTcXB2C/WHBlF/n9aG+ntIN3dDzYHWukNPhrL0XKWgraS
60GwkIzucFxr9meZmNf4rdIfo3xWuh3UGrZJ367/VcLtfcMs+pFKBPSwE2cwSBpd
s7aUa1u5peJRhs9KWr/v2Pi4i0n0njh+jzlBtgF6+x0tra5Mw7PSNHDwEePJ2ZGP
liaAiUP5GqpLAweRQXYcLYeBRnV0UZ9tykYbcrynp9A55OgBVTBoNVmDNhBIv6zO
ZIPdXLN3q7fZem5asCcmZOm1JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEM0zNb0
Bmp4O+1+uB3tkUNjcM3WMB8GA1UdIwQYMBaAFD0FVtGTvJKiHqdH+VjGl6l+xdXW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY2OC83QzkwMDlBQzk3
RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtxSWVwMGY1V01hWHFYN0Yx
ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BRVlcwWk84a3FJZXAwZjVXTWFYcVg3RjFkWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDY2OC83QzkwMDlBQzk3RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtx
SWVwMGY1V01hWHFYN0YxZFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMFJU9r1VX5gljJvdFiDlNenZK7nyn61UvwVPhb0lfhFM5SqKhE2Tp3p6ied8
J72ca6X3v1uU5dfQDkCtHeMOWTfRXPcNVZ9xE/VVjkLvrCZOuxkC9hkd2Q2fEQ5J
cj27Zkn1+Hxfi+g+8IDqfIUiBRAQOrG7PcvJXYxE7pjArwdK3DMc0Uc5SjGSkLl6
m5/L5UESYHrw0j+MQrm/r4RpY9v3nM5jjv8k5veVeqjfgB/bKPBRNdxFxOX8E1qA
mdOSOu8e7Xs1oWZKQ9kPt0ZOvZODu6WwDglMC8CidBY3+CFbMEpQA/jOykmosIw2
nJzb2fhh8YVgsFwOBqS2uhdcew==
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:35:10 2026 by rpki-client