
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft
File: PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft (raw, json)
Hash identifier: zUA7ost2kFPHMMsgB6ORFs62mcWGzESp5G4GxZ0cBBs=
Subject key identifier: 26:4F:F8:DA:B9:86:54:5A:56:59:18:65:C2:2B:C8:B7:8E:9D:6E:CB
Authority key identifier: 3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C
Certificate issuer: /CN=A91538E7/serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft
Manifest number: 0900
Signing time: Tue 12 May 2026 20:50:21 +0000
Manifest this update: Tue 12 May 2026 20:50:20 +0000
Manifest next update: Tue 19 May 2026 20:50:20 +0000
Files and hashes: 1: PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl (hash: KG+O1wcr/iQ4aGVCSY4/qLnf0eRnzcUqHmCLIDymPFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl
rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C
Validity
Not Before: May 12 20:50:20 2026 GMT
Not After : May 19 20:50:20 2026 GMT
Subject: CN=6a03928c-1d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:ba:b9:2b:03:5c:57:ba:7e:6d:93:a7:de:
55:5e:70:43:55:25:f8:c0:89:2d:25:30:cb:cd:e1:
95:f0:e0:04:e3:08:44:85:73:be:0b:e1:3b:46:a2:
ef:91:2a:d1:5f:08:d3:68:e1:a9:4c:4f:78:53:62:
b3:0c:35:e6:45:9e:c3:8e:51:c4:64:44:8e:76:38:
70:4a:94:ed:de:c8:1a:32:9c:44:bb:7a:d5:a1:a5:
51:33:04:89:15:af:84:fd:d6:9a:78:74:a2:44:d2:
49:62:6c:85:f2:a5:85:43:8d:27:72:51:7c:c1:28:
f1:78:97:1f:2a:4f:ea:73:49:7f:94:6e:41:0d:90:
ae:c8:25:06:b0:85:da:36:a8:3f:eb:ed:64:84:c9:
d0:ef:3e:d8:ea:f3:ef:0e:c8:0b:91:52:c1:1c:cc:
31:e0:15:99:b0:d3:9d:d5:8d:49:8a:72:af:a0:87:
90:ab:be:ef:35:a1:2e:0b:51:96:8c:51:ec:20:02:
5a:0d:22:f2:58:3c:2f:b2:f9:0d:b2:b9:3b:3f:dc:
3d:c1:8e:04:d1:ba:3c:36:80:66:d0:4a:ad:37:be:
a2:05:79:1f:a4:79:f2:78:eb:57:52:56:fa:93:18:
d9:13:10:11:b0:02:05:7f:f9:4e:a8:ff:a8:74:45:
79:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4F:F8:DA:B9:86:54:5A:56:59:18:65:C2:2B:C8:B7:8E:9D:6E:CB
X509v3 Authority Key Identifier:
keyid:3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:14:59:14:d5:09:9f:5b:c0:e4:65:a9:6c:db:db:dd:d3:16:
d2:2f:16:a8:96:ed:ca:b0:e7:48:f0:76:52:71:d6:7a:f7:35:
69:0b:eb:a9:bc:d6:d5:47:24:b6:27:2e:a0:00:1a:ab:e7:4f:
66:dd:73:9d:87:d3:e2:ab:db:63:e7:43:32:e6:b9:2b:98:6f:
09:dc:39:41:f0:93:72:df:9d:ed:0c:b1:11:66:3c:25:6f:45:
c8:3e:cf:77:79:16:57:ed:91:7a:c9:d7:99:44:99:16:c8:11:
1c:4c:8d:8a:57:f7:28:95:21:51:84:bd:ba:0b:ef:16:bd:de:
36:07:c4:25:5d:76:91:88:6d:a7:27:a2:e3:82:f4:5c:c2:83:
70:76:ff:3b:89:11:09:c4:0c:1d:38:fe:06:16:7f:41:ad:2a:
f4:7f:a2:e6:f2:dc:b5:b1:8e:f3:27:47:47:d2:4f:25:3b:5b:
f8:8f:bf:26:3a:81:1f:5a:25:90:bc:87:31:8d:97:1f:32:af:
b7:c1:87:59:65:d2:30:dc:a9:0f:a5:27:bc:cb:37:96:9d:88:
72:ec:35:dd:ed:93:a9:81:5b:45:cf:65:d2:a6:c0:c4:e2:55:
c9:bb:75:ce:86:86:ad:3d:57:35:9a:cc:44:8b:63:6d:f1:bf:
b8:97:19:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:39 2026 by rpki-client