
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
File: PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json)
Hash identifier: XXEHf9o0bArjlKz1+2UnTC0iHL01KNJvMXkMx4IiwuQ=
Subject key identifier: 11:61:8C:97:D1:0C:8C:A1:BA:B8:09:33:4E:7D:41:6F:1D:1E:F4:C7
Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
Certificate issuer: /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Certificate serial: 0294
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
Manifest number: 028B
Signing time: Thu 23 Jul 2026 03:03:08 +0000
Manifest this update: Thu 23 Jul 2026 03:03:08 +0000
Manifest next update: Thu 30 Jul 2026 03:03:08 +0000
Files and hashes: 1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: 6qXFmWHLCIkka2nFVUz9m7NkVdNhRzJzFt2CLByOmLw=)
2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: 4pifmUBWRDqIs1AxU08rq2Ecl41mBJPR1UbVv8BwJA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl
rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Validity
Not Before: Jul 23 03:03:08 2026 GMT
Not After : Jul 30 03:03:08 2026 GMT
Subject: CN=6a61846c-81f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:92:c2:db:53:80:8b:3b:06:91:19:ab:49:
80:17:ed:7d:7e:9d:c7:9e:b3:b7:8c:79:ee:e2:f7:
d7:d0:0d:26:3d:21:b1:0f:59:da:d8:17:1d:47:95:
70:f4:40:bf:2d:0f:7e:58:3c:fd:11:7c:0e:1d:1e:
91:2c:d0:b7:39:97:06:1c:be:e9:89:b0:ff:b1:89:
89:3d:b7:fa:7f:83:f8:5e:b7:97:14:87:15:68:45:
cf:65:9a:cf:b3:43:f3:f4:01:a6:fd:9f:b7:99:b6:
69:5d:85:47:b9:78:14:f6:6f:84:a3:bd:22:0c:6d:
3f:18:5b:8b:17:20:07:4e:21:3a:69:64:c4:93:bf:
1b:8b:74:6f:dc:6b:1b:cc:61:ad:3a:10:b8:6b:63:
7c:86:1e:5a:52:49:7f:80:08:be:4c:a4:07:13:47:
f3:82:47:8d:c4:b1:4a:c1:2a:ca:44:b1:5b:4f:d5:
1b:5a:0c:1a:eb:de:04:05:a7:78:e2:83:71:50:32:
06:7b:fa:c7:6f:43:5d:5b:77:4a:b9:50:06:19:c0:
fd:42:cd:f4:b4:6c:9f:cb:da:38:32:9b:fa:89:5b:
9e:98:85:b3:d3:3f:94:b3:59:6a:89:bc:6d:7d:a3:
5c:98:79:12:5e:96:d4:fc:a0:3d:80:9d:4a:ce:c5:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:61:8C:97:D1:0C:8C:A1:BA:B8:09:33:4E:7D:41:6F:1D:1E:F4:C7
X509v3 Authority Key Identifier:
keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:73:f3:5e:c2:7f:97:a5:79:26:91:6b:c3:96:c7:6f:ae:22:
eb:f6:2d:b7:81:cd:7d:f5:0f:82:24:64:ba:bf:03:c1:5d:a8:
a2:10:3f:50:9e:9e:98:fc:54:ea:1c:bf:62:4e:ae:f6:03:0b:
7b:f1:46:13:ef:99:e4:e9:42:ca:69:43:c6:1c:10:ec:b5:3d:
08:56:d8:aa:db:a8:26:34:a7:43:47:a3:a9:50:20:3a:26:13:
27:b2:96:97:20:e1:e8:4b:0a:6f:a6:9b:4c:bc:9c:f1:96:14:
bd:b3:c2:35:c6:96:10:8e:16:76:fc:40:24:6c:75:1d:05:fc:
d6:a0:22:db:3c:90:32:81:66:f5:50:23:4c:dc:dd:e2:dc:6d:
0e:a6:24:52:7d:6e:5f:4f:b2:ac:99:bc:75:9e:2a:d1:b4:ca:
02:98:c9:3b:4a:b4:a7:aa:1c:fc:f6:ae:74:ce:02:82:1a:18:
d1:ae:78:3d:14:1a:34:3d:18:3b:d0:f5:77:fe:ca:d8:ad:37:
9f:c1:41:fd:cb:2e:10:e6:7b:92:e5:14:1f:3e:00:1b:58:d7:
78:e6:0f:db:b0:d3:94:f2:eb:d6:7e:37:90:54:e8:88:ec:9b:
56:6f:e7:74:87:ca:4f:96:0b:f2:81:24:8d:c4:e3:6d:60:c2:
db:e2:8a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:20 2026 by rpki-client