
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
File: pGg4Xjj11YpziCOPLtMFVXig7V4.mft (raw, json)
Hash identifier: +4GF9hApPchCcL9z9UBi47DlcOKNngeNaVo366Ea/W4=
Subject key identifier: A6:82:4F:4E:00:F8:CD:E9:9E:39:7F:21:BA:2E:7F:B5:23:97:68:F8
Authority key identifier: A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
Certificate issuer: /CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Certificate serial: 08C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
Manifest number: 2BD1
Signing time: Tue 12 May 2026 16:54:25 +0000
Manifest this update: Tue 12 May 2026 16:54:24 +0000
Manifest next update: Tue 19 May 2026 16:54:24 +0000
Files and hashes: 1: pGg4Xjj11YpziCOPLtMFVXig7V4.crl (hash: mfSG5/oIteBABkmmtOxE6G+7gRraFu5d64TcsphJtT4=)
2: 54E2A752E17211ECA8128235C4F9AE02.roa (hash: mArjBsuPuC5Q3ZktuoIgTu/EDyCpSzqID2aSQCKZt6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2241 (0x8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5ED0, serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Validity
Not Before: May 12 16:54:24 2026 GMT
Not After : May 19 16:54:24 2026 GMT
Subject: CN=6a035b41-9efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:7f:74:62:79:d1:80:52:10:5b:d3:84:32:
a6:86:95:3b:75:2e:2e:75:ad:00:a1:68:86:7c:9f:
14:f4:4e:aa:19:e6:1a:b8:49:63:2f:b2:2e:e0:c0:
48:91:ba:ce:c6:19:12:de:0c:70:c1:d6:8f:3a:73:
5d:80:f3:75:85:07:21:49:6b:7f:3e:f7:af:e4:2f:
1a:ac:a2:8d:5c:2f:ba:a9:01:d5:3a:72:8d:5a:f4:
72:3d:4f:90:29:8a:36:37:e3:0e:94:49:0a:5f:9e:
b7:41:9d:5c:59:c1:25:f7:5a:1a:af:ac:2a:61:d4:
d5:61:d9:12:f7:da:29:05:51:12:18:40:20:fb:c5:
d3:b7:95:13:f1:b9:05:18:3c:c1:5a:f1:67:1e:9a:
74:62:1f:af:88:bd:c5:c2:92:cb:fd:83:15:b5:0a:
1f:f5:b3:c2:48:00:34:74:98:4f:25:53:12:ca:3b:
bf:5e:be:83:ec:94:b9:2c:81:12:d1:3f:5b:be:e0:
f4:84:e8:6d:23:a5:a5:4a:ef:a4:be:24:49:3c:28:
c2:84:9f:9b:89:c6:9d:5d:ef:8d:42:4f:f5:65:3a:
70:8d:52:4b:d3:ca:c2:34:0c:84:8e:15:d7:50:0b:
e8:6e:3f:6d:2a:78:ff:60:94:cc:97:7a:82:f7:45:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:82:4F:4E:00:F8:CD:E9:9E:39:7F:21:BA:2E:7F:B5:23:97:68:F8
X509v3 Authority Key Identifier:
keyid:A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:76:54:0c:4d:3a:88:5f:41:2d:57:fb:6b:4b:99:fe:28:e4:
d4:16:42:fa:46:f3:67:ad:ea:14:85:de:a5:aa:03:47:25:12:
07:5b:ec:db:05:d7:34:1a:38:28:4a:c3:cb:f7:69:b3:7e:0e:
90:af:eb:fb:5e:d0:cb:12:e1:50:04:41:13:07:64:cb:3c:c5:
d6:99:2b:9e:98:77:3e:06:49:b9:0c:7e:df:81:ed:6c:7c:bd:
74:06:d6:a6:64:04:cc:0b:4b:e7:72:1f:a3:63:c8:56:f6:ca:
b7:0f:bc:0f:bd:78:91:3c:ec:8d:3c:2e:72:69:1c:69:c7:5b:
83:9d:89:a5:7b:de:bf:15:cc:34:4f:5e:b0:de:28:30:9a:dd:
a8:5c:47:4c:b5:02:62:f6:da:40:1f:e9:4f:ef:ae:46:bd:1b:
eb:44:46:87:42:10:01:b7:a7:48:bd:db:91:8b:35:b6:dd:96:
ef:f7:bd:8f:eb:70:e8:a1:31:a5:de:6f:cc:fd:83:88:1b:ae:
2b:c9:15:4c:40:fc:c0:d0:1a:b8:0e:f7:e4:aa:60:84:c8:2c:
c4:fa:86:29:cf:12:c1:2d:84:35:5b:4e:94:5d:49:ec:5f:f0:
d4:d7:39:22:6c:33:b9:07:ee:28:0f:ff:d7:07:32:6c:6a:6a:
36:99:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:55:13 2026 by rpki-client