
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
File: Pgw5tVhKz65BgIE4j08KlNbajgY.mft (raw, json)
Hash identifier: fHAg6gE9rWnwQyErpbrRPmTL2FDOZlcrw/U+0JSzemc=
Subject key identifier: E1:9D:5F:FD:F5:C8:C5:D4:54:15:BD:F8:75:17:4C:D6:69:D2:3C:77
Authority key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
Certificate issuer: /CN=A91BD7A3/serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
Manifest number: 5A
Signing time: Mon 11 May 2026 08:14:13 +0000
Manifest this update: Mon 11 May 2026 08:14:13 +0000
Manifest next update: Mon 18 May 2026 08:14:13 +0000
Files and hashes: 1: Pgw5tVhKz65BgIE4j08KlNbajgY.crl (hash: PUoadjkLcl157h2zrFMkxa+OXGeX59EFtCK3yaY6mrQ=)
2: 132F5C52C52511F0B4A6F21BC4F9AE02.roa (hash: +oT+l8AaeCiLhYsjOPIgCUOdYkL2JAeHR0qNvNkZXgc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Validity
Not Before: May 11 08:14:13 2026 GMT
Not After : May 18 08:14:13 2026 GMT
Subject: CN=6a018fd5-8451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:29:70:8d:76:1a:f4:de:80:23:9a:ff:87:
23:62:ba:35:2e:2f:7f:74:b1:58:c0:ed:0a:3c:59:
e5:a7:9c:09:4a:b8:8e:af:ab:b9:b6:60:2c:33:07:
3f:3a:f2:f4:4c:29:ba:e7:61:7b:5f:9e:bc:2e:c0:
95:25:ee:61:76:54:61:71:20:e4:48:52:7c:6b:ea:
db:f9:28:e8:da:4c:86:a2:5a:fc:fd:cd:fb:ca:5e:
04:7e:b0:4a:50:6d:c2:5f:67:c1:eb:46:5c:e2:cf:
e4:a5:40:46:2d:c4:50:a3:fc:3a:eb:b2:a5:2d:c3:
04:e6:41:31:d9:9d:e6:6a:7e:79:a5:02:b3:d4:c1:
d4:6a:ea:88:cc:12:36:09:60:0d:bb:5e:4b:82:63:
60:e6:fc:6a:79:52:30:be:62:3d:91:28:51:74:d8:
31:89:c4:0b:51:00:33:ee:bd:0d:25:58:73:28:fb:
cd:b2:36:70:0c:35:f8:68:a7:af:1c:9c:55:fa:b7:
16:ea:78:68:3d:8a:96:56:c5:23:18:a3:cf:cf:e9:
8f:85:99:7e:1b:fd:e7:57:dc:b4:03:72:ea:68:d4:
ed:77:12:04:d3:75:57:d4:01:8d:d5:0b:a0:fd:ff:
ff:dd:b8:a7:04:b1:76:d5:fc:ce:f0:ec:d9:04:83:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9D:5F:FD:F5:C8:C5:D4:54:15:BD:F8:75:17:4C:D6:69:D2:3C:77
X509v3 Authority Key Identifier:
keyid:3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:60:dd:0a:54:13:f4:3a:d1:60:bf:cf:9f:71:1b:71:5a:db:
d1:3d:3a:d7:aa:68:1c:78:ea:75:d3:25:d3:70:ff:69:9c:7b:
0f:4b:22:82:3b:62:59:a1:c1:6f:14:e9:04:df:f8:c5:5f:aa:
2a:4f:c2:e9:ee:24:69:ce:4c:82:10:6e:d9:32:78:4a:25:2e:
09:dd:d5:98:05:67:e1:d7:04:5a:fb:84:6c:32:ed:54:86:9b:
67:c8:43:9b:86:2d:0a:83:56:31:8e:58:34:4e:e7:58:61:d0:
2c:40:9b:fe:b3:fc:c7:b2:14:cc:c0:b2:d7:3f:33:66:7a:29:
b8:2f:9e:d6:6c:f8:c9:6b:5d:e6:a8:15:13:f3:19:d6:63:dc:
2a:40:a8:c9:10:03:9e:ca:5e:96:ee:db:0b:7e:f8:c1:2d:79:
18:86:73:e0:05:23:23:bf:60:f6:e0:d5:d5:b6:63:3e:87:11:
b7:85:0b:8c:d2:eb:79:aa:be:02:2e:ac:3a:4b:82:e9:48:b5:
cc:82:33:99:1e:c5:b1:82:62:63:f4:60:a9:65:b1:30:a6:3c:
b2:b9:9f:0f:d2:1e:62:06:37:28:d0:6b:67:08:61:2e:6d:92:
0c:b8:83:12:61:d0:e4:e9:86:95:cd:83:0a:37:1c:75:7b:4c:
5a:f1:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:22:44 2026 by rpki-client