
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
File: pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json)
Hash identifier: /jYPxfOXXh2EWs6GdLRXU0ucBT2oRvSPXyDWtVBjwvA=
Subject key identifier: 82:4C:0A:D3:EE:EE:BE:F3:BF:A6:40:3F:42:07:FB:6E:C7:A7:7E:CF
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Certificate issuer: /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
Manifest number: 0187
Signing time: Wed 25 Mar 2026 03:47:58 +0000
Manifest this update: Wed 25 Mar 2026 03:47:58 +0000
Manifest next update: Wed 01 Apr 2026 03:47:58 +0000
Files and hashes: 1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: wy8f/0atycdBzFaG5SkW9fDgCijFeASXiviLLOcBpxc=)
2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: mtMrgn8E6rJ7Yx0iQX63xtbQeZIjjv/MdEQJpqPZR5c=)
3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: 33xsa1I7dTsH1mG4g4Z5bezPgV/Y0HHBZjYGiwsfW78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Validity
Not Before: Mar 25 03:47:58 2026 GMT
Not After : Apr 1 03:47:58 2026 GMT
Subject: CN=69c35aee-f129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:89:46:cc:1f:8c:f6:0b:f7:e1:4a:84:6d:e1:
19:fe:51:4b:cc:55:ef:dc:29:1a:2c:9f:53:a5:d3:
7f:26:2f:50:6c:fc:a9:2b:ba:67:3e:da:42:2a:9c:
f6:e4:37:ad:de:90:a5:7d:1a:ce:aa:7f:55:23:a8:
8e:35:59:f0:96:86:ed:80:28:a3:a1:92:f9:0b:09:
31:2b:ca:c6:b7:c7:b6:90:51:7e:74:e8:e8:e0:eb:
3b:95:b7:4a:37:41:61:e1:a2:30:fe:6d:a7:00:32:
57:71:78:dc:0e:d5:26:e1:80:89:0e:35:86:19:b0:
8a:e5:ab:9d:6d:79:6d:45:00:01:3c:26:b2:d1:12:
1c:f7:f9:a8:45:a6:63:23:22:ff:e0:5b:45:fe:ed:
1c:2e:c9:f0:af:83:87:30:43:3f:eb:fe:4d:fd:19:
75:ed:bf:9e:34:b9:8e:dc:09:85:29:22:f3:84:d4:
ac:e9:d9:ff:d1:61:b0:41:72:c0:34:18:29:f9:55:
c7:78:70:8f:33:31:23:58:1c:27:4e:02:1a:86:68:
1c:b7:dc:9e:f1:6e:04:9f:53:bb:49:74:40:e0:87:
9c:c3:37:5a:8f:db:4e:7b:5b:8f:a2:07:0f:94:e9:
fd:2c:94:47:51:68:5d:54:e8:9f:e3:02:a8:d6:0c:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4C:0A:D3:EE:EE:BE:F3:BF:A6:40:3F:42:07:FB:6E:C7:A7:7E:CF
X509v3 Authority Key Identifier:
keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:19:1d:fe:8e:39:57:fb:52:ed:80:6c:92:f8:73:c5:c2:c5:
71:03:5b:1b:2f:e0:d7:e6:d6:9b:ad:21:3f:89:bd:50:06:cc:
9a:da:87:a5:bc:a8:b9:19:56:2f:45:4e:7a:00:47:0a:22:f7:
bc:fd:09:f1:fc:b6:9c:36:22:dc:79:a9:6c:2e:a0:b7:23:90:
d4:95:19:03:6c:63:42:30:88:3c:9e:e8:93:7a:c7:0f:fa:0b:
cb:8e:cc:f1:d7:d2:1f:09:2b:4d:64:da:fa:1e:2a:5b:c1:f7:
8b:67:d1:32:03:42:1c:ef:45:f3:9b:41:bf:41:35:ab:eb:5f:
3c:6e:0c:40:05:86:5e:41:d6:1e:08:07:5b:51:44:9f:85:d6:
50:76:b9:d8:dc:88:cb:14:0d:1b:54:c2:69:dd:71:cc:56:bb:
1f:cb:f8:ea:7e:0a:4c:70:af:6e:63:28:cf:cc:98:fb:f1:73:
54:a7:92:fa:d1:b9:27:e4:f4:b9:44:d0:82:be:e4:d6:bb:20:
27:76:0b:7d:90:05:6e:ad:7b:3f:2b:5f:30:48:7c:f4:b2:b8:
c4:ca:b2:9f:58:bf:f8:c5:6f:ab:4f:ba:8c:89:7b:44:f5:6f:
9e:3e:3c:0f:20:28:87:88:d8:14:29:2c:77:15:d5:6b:98:ee:
92:ef:bf:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIwMTAxMTAvBgNVBAUTKEE2MDlBOTRFNkEyMTAxQkFGOTVDOEMyRjU1Q0VDNDE3
OTI1QkVGQ0YwHhcNMjYwMzI1MDM0NzU4WhcNMjYwNDAxMDM0NzU4WjAYMRYwFAYD
VQQDEw02OWMzNWFlZS1mMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4YlGzB+M9gv34UqEbeEZ/lFLzFXv3CkaLJ9TpdN/Ji9QbPypK7pnPtpCKpz2
5Det3pClfRrOqn9VI6iONVnwlobtgCijoZL5CwkxK8rGt8e2kFF+dOjo4Os7lbdK
N0Fh4aIw/m2nADJXcXjcDtUm4YCJDjWGGbCK5audbXltRQABPCay0RIc9/moRaZj
IyL/4FtF/u0cLsnwr4OHMEM/6/5N/Rl17b+eNLmO3AmFKSLzhNSs6dn/0WGwQXLA
NBgp+VXHeHCPMzEjWBwnTgIahmgct9ye8W4En1O7SXRA4Iecwzdaj9tOe1uPogcP
lOn9LJRHUWhdVOif4wKo1gybfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJMCtPu
7r7zv6ZAP0IH+27Hp37PMB8GA1UdIwQYMBaAFKYJqU5qIQG6+VyML1XOxBeSW+/P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAxMC9FQTAyMUE5NEQ1
M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFicjVYSXd2VmM3RUY1SmI3
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BnbXBUbW9oQWJyNVhJd3ZWYzdFRjVKYjc4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjAxMC9FQTAyMUE5NEQ1M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFi
cjVYSXd2VmM3RUY1SmI3ODgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1hkd/o45V/tS7YBskvhzxcLFcQNbGy/g1+bWm60hP4m9UAbMmtqHpbyouRlW
L0VOegBHCiL3vP0J8fy2nDYi3HmpbC6gtyOQ1JUZA2xjQjCIPJ7ok3rHD/oLy47M
8dfSHwkrTWTa+h4qW8H3i2fRMgNCHO9F85tBv0E1q+tfPG4MQAWGXkHWHggHW1FE
n4XWUHa52NyIyxQNG1TCad1xzFa7H8v46n4KTHCvbmMoz8yY+/FzVKeS+tG5J+T0
uUTQgr7k1rsgJ3YLfZAFbq17PytfMEh89LK4xMqyn1i/+MVvq0+6jIl7RPVvnj48
DyAoh4jYFCksdxXVa5juku+/Yw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:32 2026 by rpki-client