
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
File: pGg4Xjj11YpziCOPLtMFVXig7V4.mft (raw, json)
Hash identifier: 5tWF2djMXq70X090JEPc7CL+KabrTwf/+LiwPJGPZWY=
Subject key identifier: C4:E6:D3:24:DA:05:C8:3E:8B:62:60:F3:D1:37:E7:F7:AC:52:F6:D0
Authority key identifier: A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
Certificate issuer: /CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Certificate serial: 0910
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
Manifest number: 2CB4
Signing time: Fri 02 Oct 2026 17:00:10 +0000
Manifest this update: Fri 02 Oct 2026 17:00:09 +0000
Manifest next update: Fri 09 Oct 2026 17:00:09 +0000
Files and hashes: 1: pGg4Xjj11YpziCOPLtMFVXig7V4.crl (hash: /86/WS298o7SBWhCd3C1PpaDVVOzphWWGDc1kTt+mb4=)
2: 54E2A752E17211ECA8128235C4F9AE02.roa (hash: FvhwMvR06aM4Tlm3TgPmCHPZIgvzx9nHmKWhqmd0G8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2320 (0x910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5ED0, serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Validity
Not Before: Oct 2 17:00:09 2026 GMT
Not After : Oct 9 17:00:09 2026 GMT
Subject: CN=6abfe31a-fdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:bd:5e:6f:2a:4a:30:61:7d:6f:9f:1c:44:
e7:4b:96:53:93:69:cc:90:6a:1c:e1:34:c7:96:de:
e5:60:3a:3f:67:ae:73:34:04:4d:81:f5:48:3a:df:
36:38:13:44:9d:05:0e:49:e3:57:ba:4a:b0:1d:51:
92:15:63:55:23:ae:a1:ad:16:ce:d1:6d:7d:87:81:
41:38:46:ef:b2:22:fd:42:69:5b:36:71:67:ce:41:
e7:1c:20:fb:2f:52:0c:89:3b:05:73:01:6d:54:26:
d0:c4:42:0b:38:97:f7:9a:9b:96:c0:3c:1d:b0:06:
26:9a:ad:b7:52:7c:a3:a1:67:05:ec:17:20:94:a7:
16:eb:c9:0c:dd:8e:8d:43:96:e2:1c:7a:38:c2:52:
59:bc:fc:d3:ab:ef:94:80:de:e3:7a:99:5b:5f:e2:
0e:2d:83:af:c3:f5:11:73:cf:53:b6:f2:02:2c:f9:
40:2c:71:61:43:ad:53:45:7a:6f:76:e8:d8:07:a4:
9d:44:e9:fc:e8:cc:1b:cf:c0:92:ad:14:75:68:0d:
b0:34:eb:20:b2:96:a8:33:f4:5a:71:d3:68:0d:e0:
78:af:66:34:64:84:00:78:61:d3:a0:0b:28:c4:45:
e7:8d:8a:bb:1b:5a:4e:3a:9e:33:ff:ba:4e:f2:46:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E6:D3:24:DA:05:C8:3E:8B:62:60:F3:D1:37:E7:F7:AC:52:F6:D0
X509v3 Authority Key Identifier:
keyid:A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d5:df:5f:98:91:79:2c:e0:e9:5f:e1:88:c7:d1:89:cb:43:
30:19:61:36:20:98:35:16:a9:06:9d:97:69:34:30:65:d9:cc:
e2:65:11:c9:64:43:e7:bf:88:32:73:5a:42:e5:dd:ee:c3:fc:
d7:64:af:28:6a:a9:9e:7f:97:17:72:a5:a4:7a:a1:0b:76:a6:
ef:04:fe:76:58:26:4e:52:66:62:77:c7:6f:87:6a:ab:b2:81:
14:05:0d:4d:ab:18:af:a9:27:45:8c:78:fa:44:10:c8:ab:33:
98:6c:41:92:6a:b6:cf:07:c1:8d:7a:08:1d:fc:f0:2c:49:37:
63:43:fc:87:20:11:4d:4b:66:fc:50:0e:9b:b5:c9:b0:f4:7f:
47:97:89:b9:b1:89:76:b3:c3:ca:7c:9f:37:06:4e:ce:b3:3f:
50:ff:a2:05:39:a2:52:da:c4:8a:cf:4c:e6:be:6e:aa:74:d7:
78:b2:ba:db:15:34:a2:c2:35:7a:c0:ad:3e:88:5a:94:d0:1e:
07:ae:8b:5b:47:39:57:9f:dc:4b:bd:96:42:8b:d6:03:d8:82:
64:4c:23:4e:8e:c3:50:e5:93:e8:ed:4b:14:a1:84:71:c2:95:
86:48:f6:86:01:d0:0c:78:7f:d5:3f:69:98:f5:12:13:2f:65:
31:2d:52:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVFRDAxMTAvBgNVBAUTKEE0NjgzODVFMzhGNUQ1OEE3Mzg4MjM4RjJFRDMwNTU1
NzhBMEVENUUwHhcNMjYxMDAyMTcwMDA5WhcNMjYxMDA5MTcwMDA5WjAYMRYwFAYD
VQQDEw02YWJmZTMxYS1mZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt769Xm8qSjBhfW+fHETnS5ZTk2nMkGoc4TTHlt7lYDo/Z65zNARNgfVIOt82
OBNEnQUOSeNXukqwHVGSFWNVI66hrRbO0W19h4FBOEbvsiL9QmlbNnFnzkHnHCD7
L1IMiTsFcwFtVCbQxEILOJf3mpuWwDwdsAYmmq23UnyjoWcF7BcglKcW68kM3Y6N
Q5biHHo4wlJZvPzTq++UgN7jeplbX+IOLYOvw/URc89TtvICLPlALHFhQ61TRXpv
dujYB6SdROn86Mwbz8CSrRR1aA2wNOsgspaoM/RacdNoDeB4r2Y0ZIQAeGHToAso
xEXnjYq7G1pOOp4z/7pO8ka2FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMTm0yTa
Bcg+i2Jg89E35/esUvbQMB8GA1UdIwQYMBaAFKRoOF449dWKc4gjjy7TBVV4oO1e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5
NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9wR2c0WGpqMTFZcHppQ09QTHRNRlZYaWc3
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BHZzRYamoxMVlwemlDT1BMdE1GVlhpZzdWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9wR2c0WGpqMTFZ
cHppQ09QTHRNRlZYaWc3VjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL9XfX5iReSzg6V/hiMfRictDMBlhNiCYNRapBp2XaTQwZdnM4mURyWRD57+I
MnNaQuXd7sP812SvKGqpnn+XF3KlpHqhC3am7wT+dlgmTlJmYnfHb4dqq7KBFAUN
TasYr6knRYx4+kQQyKszmGxBkmq2zwfBjXoIHfzwLEk3Y0P8hyARTUtm/FAOm7XJ
sPR/R5eJubGJdrPDynyfNwZOzrM/UP+iBTmiUtrEis9M5r5uqnTXeLK62xU0osI1
esCtPohalNAeB66LW0c5V5/cS72WQovWA9iCZEwjTo7DUOWT6O1LFKGEccKVhkj2
hgHQDHh/1T9pmPUSEy9lMS1S9Q==
-----END CERTIFICATE-----
Generated at Sun Oct 4 10:12:51 2026 by rpki-client