
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
File: PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json)
Hash identifier: 2PAwZW/JOMeXvdAQVNK6iAsoCTebmlMfBWAJuGDg80s=
Subject key identifier: 28:F2:51:C3:8C:F7:2E:5A:6D:1B:1A:74:0D:43:EF:EC:31:92:3B:E0
Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
Certificate issuer: /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
Manifest number: 0268
Signing time: Wed 13 May 2026 02:18:35 +0000
Manifest this update: Wed 13 May 2026 02:18:35 +0000
Manifest next update: Wed 20 May 2026 02:18:35 +0000
Files and hashes: 1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: 9okQTCXjxJ73S4rRduWtRpAXhpxMRZoZf2Nq+cqJFUw=)
2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: 4pifmUBWRDqIs1AxU08rq2Ecl41mBJPR1UbVv8BwJA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl
rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Validity
Not Before: May 13 02:18:35 2026 GMT
Not After : May 20 02:18:35 2026 GMT
Subject: CN=6a03df7b-0c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:03:86:f9:98:93:cc:63:91:59:57:6b:e5:
d6:71:86:73:70:03:45:4b:9c:19:67:44:4a:20:aa:
76:74:e3:7c:fb:44:d3:cb:ff:09:0f:03:cb:6f:63:
92:79:c7:6d:d4:83:a3:ea:f5:b5:0c:55:2d:82:34:
8f:c2:67:fa:dc:40:cc:43:f3:59:9c:7d:8c:4d:68:
dc:0b:73:88:2c:e7:44:fd:e1:5d:a2:59:00:88:df:
51:2a:83:1b:fa:cc:31:04:6a:55:bc:1c:9e:f5:84:
4a:55:6b:96:89:06:05:48:6e:40:45:31:72:03:56:
6b:d8:66:7d:31:75:c7:ce:56:d8:b3:79:6a:00:03:
07:a5:4a:57:d6:38:c1:23:b0:d9:c1:4a:67:11:4f:
4d:46:24:88:33:56:aa:a4:a6:43:2e:9c:11:41:61:
b8:e5:27:a2:a5:1d:62:49:63:06:95:89:6c:f1:55:
0e:9e:a4:92:93:63:84:24:37:03:eb:83:85:75:39:
1b:ac:27:28:b8:e6:cb:16:58:d8:01:fe:38:96:72:
24:fa:6b:92:e1:21:a0:f2:07:d0:f9:15:50:53:bc:
15:56:90:d5:57:0e:cd:3f:f6:5f:31:e9:32:c6:10:
15:2c:f1:59:34:3f:f7:8d:0c:82:63:bb:fd:50:31:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F2:51:C3:8C:F7:2E:5A:6D:1B:1A:74:0D:43:EF:EC:31:92:3B:E0
X509v3 Authority Key Identifier:
keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:99:e2:52:70:22:ba:aa:b0:32:0a:76:59:02:91:f2:46:c0:
4b:25:30:8c:e1:c9:73:d9:fb:63:39:8b:61:58:37:b4:20:c6:
6c:14:b6:a2:7f:33:82:71:2b:c8:9d:45:98:22:e5:1f:ab:b1:
86:78:5d:fd:c5:22:85:37:73:0c:09:de:2a:3c:f1:56:9a:a1:
3c:a7:e5:46:5f:d5:05:9e:53:9a:0b:31:cc:99:c6:4e:cd:56:
3d:ca:0c:31:b8:84:b1:74:c1:2c:b0:d2:52:be:db:13:56:88:
ee:83:cf:dc:7c:58:bc:b4:18:e3:dc:d8:76:f0:15:69:60:4e:
82:86:27:28:e5:bd:52:a6:ef:69:7d:da:c5:6b:e3:7c:92:85:
d4:6c:24:a5:f8:d7:61:e2:65:a0:01:00:65:34:23:d8:62:3f:
24:ca:b6:3e:f0:31:66:62:c2:f4:f5:70:a5:18:0b:1d:71:3c:
72:7a:ff:d7:a0:4c:e8:95:89:ff:9b:a9:09:ca:0d:c8:74:29:
5b:07:4f:a9:cf:2d:16:ed:f2:54:83:60:9a:7c:8e:b8:fb:6a:
ca:d1:f5:0c:3e:d7:76:cc:36:21:49:f0:0d:f5:b4:81:5b:69:
6a:a9:b6:23:f6:b2:0c:fa:b6:22:60:f6:20:45:5a:ce:6f:a6:
6e:7f:bc:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQyRTExMTAvBgNVBAUTKDNDNjUxNTI0QjRGOTFBMzUwRDFFQ0ZCQkE2NkNBQkQx
QjQ4RkI3QzUwHhcNMjYwNTEzMDIxODM1WhcNMjYwNTIwMDIxODM1WjAYMRYwFAYD
VQQDEw02YTAzZGY3Yi0wYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnioDhvmYk8xjkVlXa+XWcYZzcANFS5wZZ0RKIKp2dON8+0TTy/8JDwPLb2OS
ecdt1IOj6vW1DFUtgjSPwmf63EDMQ/NZnH2MTWjcC3OILOdE/eFdolkAiN9RKoMb
+swxBGpVvBye9YRKVWuWiQYFSG5ARTFyA1Zr2GZ9MXXHzlbYs3lqAAMHpUpX1jjB
I7DZwUpnEU9NRiSIM1aqpKZDLpwRQWG45SeipR1iSWMGlYls8VUOnqSSk2OEJDcD
64OFdTkbrCcouObLFljYAf44lnIk+muS4SGg8gfQ+RVQU7wVVpDVVw7NP/ZfMeky
xhAVLPFZND/3jQyCY7v9UDHgvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjyUcOM
9y5abRsadA1D7+wxkjvgMB8GA1UdIwQYMBaAFDxlFSS0+Ro1DR7Pu6Zsq9G0j7fF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJFMS9EQTg2QjYxNkJB
NkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdqVU5Icy03cG15cjBiU1B0
OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BHVVZKTFQ1R2pVTkhzLTdwbXlyMGJTUHQ4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDJFMS9EQTg2QjYxNkJBNkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdq
VU5Icy03cG15cjBiU1B0OFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb5niUnAiuqqwMgp2WQKR8kbASyUwjOHJc9n7YzmLYVg3tCDGbBS2on8zgnEr
yJ1FmCLlH6uxhnhd/cUihTdzDAneKjzxVpqhPKflRl/VBZ5TmgsxzJnGTs1WPcoM
MbiEsXTBLLDSUr7bE1aI7oPP3HxYvLQY49zYdvAVaWBOgoYnKOW9UqbvaX3axWvj
fJKF1GwkpfjXYeJloAEAZTQj2GI/JMq2PvAxZmLC9PVwpRgLHXE8cnr/16BM6JWJ
/5upCcoNyHQpWwdPqc8tFu3yVINgmnyOuPtqytH1DD7Xdsw2IUnwDfW0gVtpaqm2
I/ayDPq2ImD2IEVazm+mbn+82w==
-----END CERTIFICATE-----
Generated at Wed May 13 07:29:12 2026 by rpki-client