
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
File: pv84Girr6m3M_g3mXUGWBAJx_pQ.mft (raw, json)
Hash identifier: 9DrR87QjwVevwdCxCxwPDzBcaqLHV2439amgSPZbnps=
Subject key identifier: A2:03:16:5C:4D:8B:B8:D8:FA:9F:1D:BC:86:C8:DC:FE:55:B2:61:85
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Certificate issuer: /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial: 0C18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
Manifest number: 0BF5
Signing time: Tue 18 Aug 2026 19:10:12 +0000
Manifest this update: Tue 18 Aug 2026 19:10:12 +0000
Manifest next update: Tue 25 Aug 2026 19:10:12 +0000
Files and hashes: 1: pv84Girr6m3M_g3mXUGWBAJx_pQ.crl (hash: U0k+Z1KEPc2yqeeGVjF2ryBKwt91lvTyrPD+JLcB404=)
2: 1DC0E5BC419811EAA268D964C4F9AE02.roa (hash: 2YRxMG7YO0sA77A0UNRyYRbSzxsD+ZJ1u+28GJUZh2M=)
3: 1FC6B062419811EAA268D964C4F9AE02.roa (hash: hpHKLBPP8wI8/Ci6WbVWhmTT7Wqg4z+ABMYaCRqkCvI=)
4: 1E7D7344419811EAA268D964C4F9AE02.roa (hash: Hk8MYeDrcTehISfWRW8h+pEubI0TX43br5gNDb2uf6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED2BB, serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Validity
Not Before: Aug 18 19:10:12 2026 GMT
Not After : Aug 25 19:10:12 2026 GMT
Subject: CN=6a84ae14-ec50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:9c:81:d3:72:af:40:c8:ab:1c:bb:48:73:
a1:50:40:bc:ab:62:fe:a9:89:3c:21:db:f9:e5:ea:
dc:fe:4f:37:02:25:9d:d6:f2:d2:1e:9c:6c:e5:7c:
2c:f7:d7:1d:91:31:9f:58:d1:63:3b:14:f9:ae:52:
6e:6d:65:c7:95:63:16:31:58:16:e8:1e:c0:ea:45:
d7:0f:23:3b:bc:ee:b5:8c:58:23:95:3d:38:28:2c:
bc:51:44:de:f7:90:4a:f3:76:d2:8f:09:f0:c2:dc:
1d:59:25:81:ee:a6:7d:85:e3:86:7d:aa:20:fb:7c:
50:e1:2d:b2:6b:95:ce:11:73:21:a3:a5:ba:f5:5b:
80:8a:e6:fd:1e:97:17:9a:64:22:49:b1:54:ee:3e:
ab:24:ad:d8:f8:e1:c2:6b:65:43:0b:72:e6:de:59:
4e:c4:cb:a8:ce:6e:86:3b:3b:18:34:da:c9:cf:98:
a1:73:8c:0e:0d:ea:f7:23:02:0d:5d:1f:28:b6:ff:
b1:b1:59:e8:9b:c0:be:b4:4e:cf:09:24:ac:fd:74:
e5:24:02:d9:5f:de:a9:43:e4:f0:09:c8:75:73:b7:
23:ac:8e:91:6b:1e:f0:26:03:91:e0:8e:3a:21:d5:
37:ce:76:8b:26:32:23:64:89:64:8e:3a:ce:d7:16:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:16:5C:4D:8B:B8:D8:FA:9F:1D:BC:86:C8:DC:FE:55:B2:61:85
X509v3 Authority Key Identifier:
keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:fb:53:ae:d1:df:68:c1:d7:91:32:e6:5b:ac:69:11:5c:27:
e7:57:75:0e:6b:e6:17:dc:24:a8:90:6e:2e:28:5c:c2:f0:7b:
30:39:18:75:33:4b:1c:d7:88:fe:8c:96:02:05:cd:37:32:5d:
87:80:6a:9a:78:f8:5f:12:f0:6e:08:e0:7e:28:e5:a0:58:75:
b6:bf:fa:a5:52:1d:11:dc:ce:f2:68:b2:3b:13:34:31:70:8a:
10:0e:64:29:64:90:25:16:4d:06:4f:54:86:d4:c4:32:0d:13:
dc:74:d3:66:0e:58:6a:d7:4d:e0:14:72:9e:a3:fb:05:c5:b8:
b9:fd:f6:23:a8:9d:94:6a:a7:a5:67:13:2a:a7:24:a1:08:17:
58:af:a9:d2:d5:cc:02:36:df:f3:0f:fa:35:a1:4d:3c:07:d4:
0b:f7:24:0e:4b:32:d6:70:aa:4c:a6:ad:68:18:b3:2b:12:c2:
81:a9:53:1e:b4:52:e0:72:19:97:14:81:02:20:95:5e:e0:1a:
b8:07:0d:1b:4f:fc:66:23:4e:18:8d:3e:5f:c6:50:12:26:81:
b9:12:c8:85:7d:6c:f6:f2:84:66:37:dd:d8:e3:d0:32:2a:4f:
00:70:0f:29:08:5d:a6:e0:a3:2f:dc:3b:1b:c3:e9:e4:4b:35:
9f:9e:89:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:32 2026 by rpki-client