
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
File: PgzfiCrujHIh1YijxSYBjh1kyWg.mft (raw, json)
Hash identifier: UkfiRFL+XLeYdWmoTZGKFStfGMZnLF3zu5CYS+YXR3w=
Subject key identifier: C6:AC:31:02:9C:BA:EC:CA:99:B1:5E:DF:6C:4E:62:A6:F0:23:B6:2D
Authority key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68
Certificate issuer: /CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968
Certificate serial: 01E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
Manifest number: 01DE
Signing time: Thu 23 Jul 2026 04:50:59 +0000
Manifest this update: Thu 23 Jul 2026 04:50:59 +0000
Manifest next update: Thu 30 Jul 2026 04:50:59 +0000
Files and hashes: 1: PgzfiCrujHIh1YijxSYBjh1kyWg.crl (hash: iPAulGBmZBeelPzCb+3UmWy1U2Dc7XzuqR7k/I53S6Y=)
2: 41E0B402AE1F11EE96A5C977C4F9AE02.roa (hash: I3Aip9lEI/tB1p617YVnjX7fZuimKLHKae3IrKIw1Ds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl
rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483 (0x1e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CED30, serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968
Validity
Not Before: Jul 23 04:50:59 2026 GMT
Not After : Jul 30 04:50:59 2026 GMT
Subject: CN=6a619db3-485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:cf:fd:25:4e:b1:a7:16:fd:74:7f:ea:44:
c9:46:60:b6:04:a3:5a:77:79:d9:86:8c:ef:10:2a:
cd:3b:04:ac:c3:25:cd:ed:9b:82:be:92:25:1b:54:
eb:bc:42:70:5a:ea:6a:f3:29:9d:61:dc:55:ad:0a:
0f:22:38:9e:17:bb:a2:f4:1f:1e:ee:a8:00:61:41:
d5:c1:da:5a:15:96:45:be:26:82:c1:8c:83:86:3f:
b4:65:72:26:6a:fb:ef:53:5e:b6:b3:d9:78:ff:9e:
01:d4:0b:fd:77:c7:c8:3b:dd:d0:78:bc:51:dd:89:
aa:86:46:a0:1e:40:5b:63:dc:b7:f2:d1:0c:f5:e5:
04:3a:7a:fc:37:9a:5b:3e:3a:1d:da:63:4c:81:82:
23:08:4a:90:d6:d9:ec:6f:75:8d:73:2d:68:b7:16:
1d:22:24:24:28:0c:06:12:02:fc:6a:67:5b:08:b4:
80:ad:87:5e:de:91:1c:e5:29:04:44:b9:71:1a:e7:
76:6d:fa:99:b0:2b:da:14:38:4c:d9:af:b9:d5:d8:
04:52:91:bc:11:a6:f7:29:d6:03:15:bf:33:e3:6d:
e7:50:9d:11:26:b4:8c:6f:ad:d9:b2:39:1a:2a:a4:
04:3e:d6:23:cc:59:15:9e:af:fc:53:a7:b2:3d:dd:
83:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AC:31:02:9C:BA:EC:CA:99:B1:5E:DF:6C:4E:62:A6:F0:23:B6:2D
X509v3 Authority Key Identifier:
keyid:3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:86:78:ee:50:75:c9:0e:61:8a:12:b9:e0:e1:61:fc:6b:e8:
b7:7c:2e:1f:7b:b5:11:f5:2f:de:aa:e0:26:c8:bb:90:8f:4f:
73:de:70:c4:f2:2a:50:d8:90:7c:3b:d7:a1:fe:6b:78:0e:4d:
6f:06:aa:95:27:a4:7d:ef:11:67:e4:51:17:36:34:f9:59:c6:
11:02:53:86:3c:14:a8:44:0c:c7:6b:fa:0e:32:88:49:0e:99:
8f:8f:9f:da:1e:f8:b0:db:39:bf:00:82:d6:74:da:e7:a3:cc:
74:02:eb:c5:dc:80:31:bf:59:12:fc:22:16:13:ea:c7:62:ec:
58:80:93:d1:7f:3f:02:c6:a1:0f:ba:a1:ba:27:4a:aa:31:cd:
3d:f2:f1:46:2d:5e:b0:c2:b3:29:a4:fc:a5:37:41:6c:29:44:
fc:02:cb:9d:79:2d:43:3d:68:b4:5f:25:fc:fd:59:9f:6c:6a:
d1:96:22:96:e6:ce:1b:a5:c9:15:11:e5:e8:62:6f:a1:7e:2e:
9e:44:96:27:46:31:4a:ff:62:89:b3:b7:b6:f6:2a:0b:90:f6:
13:ab:4e:b8:c9:8e:75:0a:f1:31:17:af:c6:7f:56:7a:c6:a7:
94:54:27:86:c4:bd:a0:cc:93:ac:da:ab:97:6d:6f:93:43:e0:
a3:d7:93:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:05:20 2026 by rpki-client