
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
File: pv84Girr6m3M_g3mXUGWBAJx_pQ.mft (raw, json)
Hash identifier: k2NzxNMEk+z6kHVpPw4gzx8/XV9DfpAkzZTcXs5Xu2s=
Subject key identifier: 07:92:13:CB:A1:B0:7B:EC:30:C8:C7:A7:A5:DE:0A:35:55:22:B7:26
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Certificate issuer: /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial: 0BCF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
Manifest number: 0BAC
Signing time: Sat 28 Mar 2026 18:55:39 +0000
Manifest this update: Sat 28 Mar 2026 18:55:39 +0000
Manifest next update: Sat 04 Apr 2026 18:55:39 +0000
Files and hashes: 1: pv84Girr6m3M_g3mXUGWBAJx_pQ.crl (hash: agSXJ8RpyBOlxTV1366G2QfRk88ITp6H7R39MEUyYAU=)
2: 1DC0E5BC419811EAA268D964C4F9AE02.roa (hash: 2YRxMG7YO0sA77A0UNRyYRbSzxsD+ZJ1u+28GJUZh2M=)
3: 1E7D7344419811EAA268D964C4F9AE02.roa (hash: Hk8MYeDrcTehISfWRW8h+pEubI0TX43br5gNDb2uf6w=)
4: 1FC6B062419811EAA268D964C4F9AE02.roa (hash: hpHKLBPP8wI8/Ci6WbVWhmTT7Wqg4z+ABMYaCRqkCvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 18:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3023 (0xbcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED2BB, serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Validity
Not Before: Mar 28 18:55:39 2026 GMT
Not After : Apr 4 18:55:39 2026 GMT
Subject: CN=69c8242b-491d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:0a:87:ad:d7:26:6a:31:29:36:51:db:dc:
0c:13:28:0a:1e:df:bb:29:78:66:0a:89:50:49:09:
10:4c:7d:33:04:12:4d:31:08:bb:61:0c:d3:af:63:
dc:08:19:4a:18:96:0e:fc:c4:b8:2c:18:5e:75:20:
98:da:8d:6b:46:90:0e:dc:89:38:f9:58:f9:32:d4:
ac:7e:0d:5f:19:0e:e4:ca:89:92:e9:48:3f:af:35:
24:87:1c:6e:88:83:04:e9:26:c8:d5:1a:8b:4a:8d:
81:ae:b6:ab:96:84:06:ca:f2:42:26:85:b2:ce:cd:
ed:ac:6a:c4:71:a5:d9:1c:24:e5:70:9e:1c:ff:11:
97:11:87:9c:13:5d:0f:fc:5e:d9:07:59:b2:a9:36:
17:e1:c8:8d:b7:94:f2:eb:2e:4a:c2:70:53:f8:29:
29:ef:d4:c3:03:d6:cd:88:8d:86:dc:65:fa:c5:ab:
7d:6c:e8:cc:24:12:97:5a:0e:f6:0b:62:82:50:29:
eb:56:38:f8:95:eb:61:6b:47:b9:b8:d0:fa:d3:6b:
5b:d6:92:78:7e:89:6c:1f:98:b2:37:08:7c:22:d4:
31:aa:05:31:85:90:79:52:02:b4:7d:62:fd:5c:b7:
2f:89:9e:35:2d:db:a9:ab:c2:20:5f:c0:99:a7:05:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:92:13:CB:A1:B0:7B:EC:30:C8:C7:A7:A5:DE:0A:35:55:22:B7:26
X509v3 Authority Key Identifier:
keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:6b:f3:18:79:f1:dd:3e:3f:23:df:b8:93:a8:f4:6c:af:6b:
e2:88:99:67:fb:d2:f8:54:5e:53:65:9c:d7:5b:d6:b2:4e:62:
ec:77:7d:93:21:dd:86:b0:3c:e8:7e:7c:9a:3b:47:d9:00:ab:
01:2a:b8:d0:c7:ec:30:df:6d:8e:3d:0e:59:02:11:12:83:10:
7c:68:f1:03:85:2e:eb:e2:cd:37:a1:e3:19:8b:72:2f:e1:63:
e3:8c:42:14:21:7e:e2:a5:4d:4d:59:ba:d4:ac:16:60:4c:e2:
92:6f:b0:54:44:02:c0:29:10:ec:8a:5f:df:c0:d7:10:42:83:
86:a3:8c:4a:bc:ca:99:ae:2b:b4:73:d9:50:12:58:6a:37:3a:
79:65:c3:37:9e:c7:80:ec:61:bf:ca:76:a6:29:56:62:cd:0d:
f8:36:61:6c:8b:45:69:b9:4a:39:0a:a7:7b:a9:a6:90:5d:1b:
85:32:ab:68:a0:a9:ea:5b:f2:9f:78:9f:7f:b5:ef:6f:cf:78:
9b:21:8d:45:01:11:e4:a7:98:98:36:d2:53:d4:35:d6:e1:f2:
e4:b6:88:08:15:31:f0:fc:63:4a:6b:16:01:7c:97:80:55:df:
b6:a4:d6:ef:df:f1:c1:96:56:54:a7:9b:89:22:e9:c4:97:b6:
12:27:fb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:44:04 2026 by rpki-client