
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
File: pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json)
Hash identifier: s00k1l402Jbe18EpoB2N0cSjNzaC91xKh8EgFPUQOao=
Subject key identifier: F8:3D:84:9F:6C:D8:11:E3:9D:6A:19:F8:48:7E:C5:DD:C8:4C:8D:15
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Certificate issuer: /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial: 01CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
Manifest number: 01C3
Signing time: Thu 23 Jul 2026 05:13:18 +0000
Manifest this update: Thu 23 Jul 2026 05:13:17 +0000
Manifest next update: Thu 30 Jul 2026 05:13:17 +0000
Files and hashes: 1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: ZB1O3s90ZaPp6TvcoxuHYIDwwAISMjlvNOyV5o9s57I=)
2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: mtMrgn8E6rJ7Yx0iQX63xtbQeZIjjv/MdEQJpqPZR5c=)
3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: 33xsa1I7dTsH1mG4g4Z5bezPgV/Y0HHBZjYGiwsfW78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Validity
Not Before: Jul 23 05:13:17 2026 GMT
Not After : Jul 30 05:13:17 2026 GMT
Subject: CN=6a61a2ed-7318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6e:18:96:a7:90:84:b1:b3:34:43:93:78:ca:
aa:90:b8:4a:8b:24:cb:96:66:b4:dd:f1:4e:0e:d9:
1c:c9:df:34:29:42:d4:cb:c2:30:95:65:fa:23:7b:
82:d1:bd:19:3e:72:9f:f0:db:f2:10:11:b5:9d:5f:
d5:e6:62:8e:e3:03:67:39:44:ed:ba:04:e5:f9:1b:
6f:00:47:b0:55:92:f8:96:45:11:7f:64:8b:bb:9a:
35:8f:6e:20:bf:cf:db:b4:d1:e9:11:32:ed:cd:a9:
d8:b5:ea:79:59:52:20:a0:f9:30:17:8f:15:bc:17:
46:61:91:8a:b3:51:c4:8d:4b:5a:69:64:3f:4c:ab:
f2:4f:1b:3d:d8:df:f1:1d:02:e0:37:30:39:61:eb:
4e:1f:f0:ca:28:7f:9a:d8:80:4d:72:d5:91:14:a7:
b6:cb:3f:8f:0a:df:a1:10:ed:b0:9e:64:7c:ba:10:
4f:d3:5e:a8:71:f4:81:b3:4a:bc:bc:a1:3e:ee:1c:
11:8a:f6:ac:9f:bd:a0:dd:7f:bf:c9:b0:4e:7b:1e:
51:03:90:66:36:a1:8d:98:42:95:33:91:10:09:be:
3d:76:f1:d3:28:3d:72:71:54:7d:c4:2e:23:7e:e6:
9c:e1:91:ae:23:58:7a:48:e8:ad:51:2e:1f:c8:69:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3D:84:9F:6C:D8:11:E3:9D:6A:19:F8:48:7E:C5:DD:C8:4C:8D:15
X509v3 Authority Key Identifier:
keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:45:4f:05:55:45:83:41:04:07:5f:ed:c3:9a:00:58:d5:24:
cb:4a:dc:42:b0:85:fd:89:4d:81:aa:51:f5:89:10:5d:01:b5:
e5:6d:d3:02:42:df:62:1a:cf:7c:cc:fe:ba:c9:85:e4:4a:c2:
ac:ad:56:33:42:b6:87:d1:38:85:5e:40:b5:b0:f3:e9:6d:6d:
dc:89:d0:db:1a:a4:36:62:50:62:8c:6b:15:7f:7f:9c:b8:57:
f6:c4:b0:97:c9:2d:c0:34:34:1f:15:30:42:d5:ae:2f:4f:3c:
80:be:54:95:7f:f1:a9:aa:0d:1f:a0:83:3d:2f:35:5f:dd:02:
a0:83:c8:4f:c3:3a:0c:67:6e:d0:b9:ae:a8:b6:05:25:51:db:
24:0b:f1:16:fb:c9:2e:3a:85:6b:25:44:8a:98:1e:84:5d:5f:
5c:3a:24:04:cd:20:0d:2e:e1:f0:84:4f:0e:97:63:ab:96:41:
cb:8f:40:e9:5b:a9:ea:71:57:fd:4c:fb:e9:3c:a5:45:57:60:
e4:aa:7a:0a:9b:12:f2:11:3e:00:b0:87:e1:91:20:ba:61:ca:
d7:93:ac:64:3e:d4:ab:22:11:41:13:e2:b3:50:2c:02:ee:8d:
91:bf:d1:e8:57:a9:59:97:14:98:74:11:bf:d7:dd:54:17:b5:
1b:db:3c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:39 2026 by rpki-client