
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
File: pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json)
Hash identifier: Hfv/o0YHaZR42rke+pnxUN9ULszqruc9EY+W4Rz8gMA=
Subject key identifier: B3:01:59:8B:72:6B:22:F0:01:62:0A:DE:C2:41:F6:81:A6:51:20:10
Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66
Certificate issuer: /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66
Certificate serial: 17BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
Manifest number: 21BE
Signing time: Tue 22 Sep 2026 16:30:04 +0000
Manifest this update: Tue 22 Sep 2026 16:30:04 +0000
Manifest next update: Tue 29 Sep 2026 16:30:04 +0000
Files and hashes: 1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: /exiO9nkoo6042FvJMaT0gJuXDWY+fxrwebKQmuPjpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl
rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6076 (0x17bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3B25, serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66
Validity
Not Before: Sep 22 16:30:04 2026 GMT
Not After : Sep 29 16:30:04 2026 GMT
Subject: CN=6ab2ad0c-a499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:61:ec:53:66:73:eb:1c:16:4c:b5:f4:bd:
05:28:6e:ee:60:99:3b:47:85:cf:bf:ac:6f:ce:36:
42:49:6d:60:6e:9d:e5:aa:bc:a5:87:75:91:41:5f:
7b:a4:d6:10:91:cd:d2:7f:13:6a:40:b3:5d:d9:f0:
b7:4e:5c:17:a8:d8:61:75:78:a1:8d:cf:9d:f7:d5:
a0:82:42:a6:ee:d1:be:f4:25:c1:64:a0:e5:41:10:
10:61:45:d5:7d:14:e6:cc:11:17:8a:7a:04:d3:9f:
89:2b:eb:58:1a:e9:86:9b:e7:cd:d0:c3:be:85:22:
43:63:e6:7b:f9:cd:e0:fc:38:55:5b:01:a9:b8:a4:
25:9b:19:4c:bf:99:f6:1f:48:d2:fb:d4:1d:81:df:
5b:96:8a:80:8e:6b:f4:ef:83:f1:b0:7c:88:6f:56:
5f:6f:f6:da:ed:22:e0:0a:75:28:4b:ae:98:cd:b7:
ca:98:4b:1b:9c:f4:94:2e:c2:d6:ff:e9:61:c0:60:
54:51:78:a3:c9:8a:52:f6:18:7d:80:87:21:cc:e7:
b5:c8:b2:24:cb:89:63:8c:cb:db:f0:20:d4:74:6c:
0a:7e:56:43:e6:5b:c4:03:0b:6b:ae:62:6a:5b:5d:
4e:32:9d:3c:a3:9b:25:dc:4c:39:6d:d5:0b:00:1f:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:01:59:8B:72:6B:22:F0:01:62:0A:DE:C2:41:F6:81:A6:51:20:10
X509v3 Authority Key Identifier:
keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:84:99:df:82:55:77:94:d8:58:fe:93:bf:d5:b1:22:2b:61:
2d:de:2c:9f:31:e8:15:e2:22:44:33:fe:50:25:95:0c:4c:03:
b1:d7:b2:20:ce:6e:30:47:6c:17:9e:a0:14:fb:76:9d:09:11:
11:da:4f:d9:1a:b6:88:7a:12:ca:a5:fe:e9:5a:69:02:aa:ed:
e4:98:db:92:6e:ea:79:ef:f3:84:62:84:3f:ba:da:15:04:1f:
ed:77:04:7b:8f:1d:56:c1:e2:85:9a:2e:6a:aa:3c:9c:01:3c:
63:1e:c1:6a:c8:8a:14:41:26:99:bd:39:12:d6:a9:8d:7e:47:
61:02:e7:ff:78:0b:3d:e1:fd:74:e2:7f:cc:75:ee:82:6d:bf:
a9:48:c5:eb:0d:35:b2:a5:5a:6a:e8:ae:88:67:0c:dd:f2:a1:
f1:69:5c:7d:ca:24:0c:29:81:b7:0f:54:31:22:a3:0d:95:c4:
a1:2b:a8:b5:e2:7f:bf:87:fb:6f:ea:a2:b3:ab:62:ba:fd:43:
68:e3:9a:57:64:b5:73:37:61:f3:d5:bd:48:3f:a4:60:ed:e4:
ac:bd:bc:dc:48:f7:87:3b:af:bc:f8:3b:a0:c5:74:02:b3:bc:
d2:50:53:c3:23:65:b5:1c:f2:37:61:ca:17:30:42:92:8d:63:
28:cf:f8:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNCMjUxMTAvBgNVBAUTKEE2MEM5ODIxRjUzMEIwRDUzQTY3QTk4Qjc2NzE5NkM0
MEEyRDVBNjYwHhcNMjYwOTIyMTYzMDA0WhcNMjYwOTI5MTYzMDA0WjAYMRYwFAYD
VQQDEw02YWIyYWQwYy1hNDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtKFh7FNmc+scFky19L0FKG7uYJk7R4XPv6xvzjZCSW1gbp3lqrylh3WRQV97
pNYQkc3SfxNqQLNd2fC3TlwXqNhhdXihjc+d99WggkKm7tG+9CXBZKDlQRAQYUXV
fRTmzBEXinoE05+JK+tYGumGm+fN0MO+hSJDY+Z7+c3g/DhVWwGpuKQlmxlMv5n2
H0jS+9Qdgd9bloqAjmv074PxsHyIb1Zfb/ba7SLgCnUoS66YzbfKmEsbnPSULsLW
/+lhwGBUUXijyYpS9hh9gIchzOe1yLIky4ljjMvb8CDUdGwKflZD5lvEAwtrrmJq
W11OMp08o5sl3Ew5bdULAB/nfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMBWYty
ayLwAWIK3sJB9oGmUSAQMB8GA1UdIwQYMBaAFKYMmCH1MLDVOmepi3ZxlsQKLVpm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2
MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NOVTZaNm1MZG5HV3hBb3RX
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BneVlJZlV3c05VNlo2bUxkbkdXeEFvdFdtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NO
VTZaNm1MZG5HV3hBb3RXbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMYSZ34JVd5TYWP6Tv9WxIithLd4snzHoFeIiRDP+UCWVDEwDsdeyIM5uMEds
F56gFPt2nQkREdpP2Rq2iHoSyqX+6VppAqrt5Jjbkm7qee/zhGKEP7raFQQf7XcE
e48dVsHihZouaqo8nAE8Yx7BasiKFEEmmb05EtapjX5HYQLn/3gLPeH9dOJ/zHXu
gm2/qUjF6w01sqVaauiuiGcM3fKh8WlcfcokDCmBtw9UMSKjDZXEoSuoteJ/v4f7
b+qis6tiuv1DaOOaV2S1czdh89W9SD+kYO3krL283Ej3hzuvvPg7oMV0ArO80lBT
wyNltRzyN2HKFzBCko1jKM/4MQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:02:29 2026 by rpki-client