
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
File: pv84Girr6m3M_g3mXUGWBAJx_pQ.mft (raw, json)
Hash identifier: 1kIMdIpENTx2zBMKoLTr0XvDnl4F5VljI5tujV38E3I=
Subject key identifier: E2:74:17:52:10:04:00:EB:12:DF:D6:2D:B6:5A:FB:10:1A:76:7A:16
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Certificate issuer: /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial: 0BE8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
Manifest number: 0BC5
Signing time: Sat 16 May 2026 18:56:12 +0000
Manifest this update: Sat 16 May 2026 18:56:11 +0000
Manifest next update: Sat 23 May 2026 18:56:11 +0000
Files and hashes: 1: pv84Girr6m3M_g3mXUGWBAJx_pQ.crl (hash: F6eMDx74ayW2qp/RG778vq77Aw/98IT3luwHlK0Z4n0=)
2: 1E7D7344419811EAA268D964C4F9AE02.roa (hash: Hk8MYeDrcTehISfWRW8h+pEubI0TX43br5gNDb2uf6w=)
3: 1DC0E5BC419811EAA268D964C4F9AE02.roa (hash: 2YRxMG7YO0sA77A0UNRyYRbSzxsD+ZJ1u+28GJUZh2M=)
4: 1FC6B062419811EAA268D964C4F9AE02.roa (hash: hpHKLBPP8wI8/Ci6WbVWhmTT7Wqg4z+ABMYaCRqkCvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3048 (0xbe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED2BB, serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Validity
Not Before: May 16 18:56:11 2026 GMT
Not After : May 23 18:56:11 2026 GMT
Subject: CN=6a08bdcb-5f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:b5:6c:f5:22:4e:fd:06:7a:24:b3:3b:a9:
5b:61:19:14:82:5a:82:67:a6:42:a0:29:8d:41:17:
b9:6b:89:0b:72:7a:37:23:72:65:d5:83:6b:ff:24:
55:83:c7:fa:bf:9f:b8:80:a5:5d:22:e6:5d:a4:4e:
dc:80:e8:5d:f0:8b:6a:bf:db:5a:fe:c5:10:da:37:
43:80:3a:d0:e8:c7:c9:71:a4:0b:55:57:a1:63:06:
93:d3:77:57:86:db:b2:1a:33:d7:56:76:01:37:8e:
80:67:9b:d1:b1:9d:cf:f1:45:9f:eb:cc:0c:ab:08:
50:c8:01:1b:dd:4e:43:6c:99:7d:43:3f:df:a4:cc:
6c:db:21:78:50:69:4e:63:9d:eb:e2:4b:d0:19:52:
37:7f:1a:bb:35:40:c7:93:4e:e1:e3:37:1b:8d:09:
e6:b0:71:17:24:b3:e9:a2:e2:61:eb:fc:69:d6:d4:
b1:33:11:aa:38:7c:49:bd:a0:0b:fc:4b:7a:5d:ce:
65:a0:e5:97:d9:8b:01:3d:0c:89:0d:41:4a:7c:df:
72:9e:85:49:47:62:68:bf:1b:c0:ff:a9:18:b1:e3:
1f:8f:e5:59:d6:30:ad:7d:02:cf:de:d7:9f:26:e3:
eb:41:aa:3d:f2:c5:8e:1f:96:6c:06:78:11:be:ac:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:74:17:52:10:04:00:EB:12:DF:D6:2D:B6:5A:FB:10:1A:76:7A:16
X509v3 Authority Key Identifier:
keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:2a:d7:35:ed:2a:ef:9f:7c:7d:75:45:16:58:b4:3c:a4:a2:
49:25:66:55:d1:10:23:35:db:25:93:5d:9f:ae:4c:47:a4:c2:
a5:6a:32:8c:f8:12:d5:2f:4a:af:5d:b7:9f:1c:4b:3e:df:76:
2a:11:00:04:96:db:29:df:ee:e1:f7:7f:3f:dd:32:36:b8:f0:
6e:da:1e:b4:43:87:3f:a6:6f:bb:4a:0b:26:1c:a9:b2:93:ba:
75:3b:b6:08:a7:29:9f:55:93:21:a3:79:17:2b:27:c6:a2:34:
33:ed:20:ca:51:69:c8:4d:96:a8:dc:d0:c5:de:02:b1:53:6b:
8e:a2:7c:67:a0:48:56:7a:f9:cb:da:18:f8:0c:ef:32:88:35:
08:0b:72:d8:bf:0d:0f:2e:a4:08:08:1f:cb:3e:53:2d:bb:5b:
43:23:02:b3:06:87:18:58:16:3b:20:d4:90:02:58:75:6e:37:
b1:28:68:d3:4f:5d:24:ec:85:14:17:7e:58:0e:aa:ac:9d:e7:
28:c3:64:d6:60:9b:4a:f9:d3:ef:95:68:1e:cb:55:17:ec:38:
37:6e:76:e9:65:da:d5:27:a9:bf:5c:4f:6f:95:f3:e6:d5:38:
e1:8c:91:68:70:a4:8c:bf:40:3a:14:23:74:e5:c1:6e:30:38:
8a:80:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 06:59:44 2026 by rpki-client