
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json)
Hash identifier: HDWBEofYA6Fws5dwRcKU95HIg6ooLt6Gu3iTLQrCx2M=
Subject key identifier: 3F:9C:CA:98:5E:52:B1:5A:14:5E:AF:6A:F4:A8:D2:2F:2C:57:8E:8B
Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
Manifest number: 01F8
Signing time: Wed 13 May 2026 03:46:14 +0000
Manifest this update: Wed 13 May 2026 03:46:13 +0000
Manifest next update: Wed 20 May 2026 03:46:13 +0000
Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: v59mPah9xeaq/FaKtFQ2+hv9xby8k+3wF4uS7lHie1E=)
2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: 2slykkHCwPvbeGF4Zx3D9JQfzEnRWOMcVvw7gilVFqk=)
3: 1D98617687B311EFB4972044C4F9AE02.roa (hash: xYBSN0t6jgjQfq0Vs3mLR1yw03FEouHpBcT56A28m1A=)
4: 23D4183024D711EF932FC941C4F9AE02.roa (hash: yjfhbglGwJSFqMN6zxG/h3PTnwzIZZTxeRkuErtplaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl
rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:46:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Validity
Not Before: May 13 03:46:13 2026 GMT
Not After : May 20 03:46:13 2026 GMT
Subject: CN=6a03f406-029a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:60:c9:ea:12:51:75:fb:ce:b4:bb:77:41:ff:
96:4f:07:69:2a:b5:7b:c3:50:5c:17:e8:5d:63:20:
22:6d:08:f0:fa:41:58:35:35:f4:55:68:13:40:ac:
95:fc:1e:2b:b3:9c:43:d7:77:c8:e3:15:f2:7a:58:
51:1b:9c:8b:01:41:c7:1e:4d:ee:9a:c5:e2:9c:3f:
c9:58:09:ef:0c:5f:7a:44:81:30:68:51:ef:68:9d:
ee:0e:e8:33:70:73:c5:e2:d0:bd:ee:0e:84:47:4a:
90:3d:23:69:8f:78:4d:ea:d5:b6:09:49:38:09:1a:
94:94:1a:a5:e2:4a:01:b3:2d:21:e5:90:5b:46:11:
88:31:ce:99:4e:e3:92:4a:c3:ec:8c:b9:6e:ef:1d:
b4:69:d3:ee:66:81:50:d0:13:95:2a:4a:84:55:6a:
50:07:7f:3b:5a:78:a7:10:52:bc:64:7d:e5:62:7d:
03:fa:97:23:54:1d:ee:0e:1c:07:e3:34:d0:a7:40:
2e:21:a1:7f:5d:e2:f9:d6:b9:35:99:f7:af:25:9d:
bb:6f:54:0e:ae:5f:29:44:82:96:5e:e7:64:23:34:
ee:28:23:19:d7:2a:61:5c:9f:2a:68:f6:37:a8:ff:
06:6a:59:fc:09:7d:e3:e9:77:03:68:f4:8e:35:f1:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9C:CA:98:5E:52:B1:5A:14:5E:AF:6A:F4:A8:D2:2F:2C:57:8E:8B
X509v3 Authority Key Identifier:
keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8f:0d:e7:b6:ac:d7:8b:75:55:b9:55:bc:4e:9c:d4:6b:53:
81:d4:79:67:45:c8:ed:1b:f3:a0:72:da:47:e7:fc:4d:1a:15:
d2:87:60:97:69:43:66:6f:24:62:db:9f:dc:4a:e5:5c:d9:c3:
44:a9:75:81:14:78:23:b1:45:5e:d6:ab:88:f3:b6:e5:06:93:
87:0d:b6:6c:d2:b6:50:77:b7:b7:29:b9:af:ea:ab:03:bd:14:
d5:f8:0a:35:6e:84:90:04:a5:2f:78:be:47:10:e1:c4:55:19:
06:ee:fb:a6:60:83:fb:8f:c1:00:2c:3c:3b:9c:a1:8c:7d:43:
de:26:37:a2:b6:d8:f2:3d:62:47:81:9c:62:f7:66:8e:27:2c:
ac:7e:b6:f0:77:97:99:1b:09:5c:6b:06:74:0f:02:06:87:75:
d7:37:0d:84:99:a5:9b:41:95:b8:ac:f4:10:4b:f6:0a:53:4e:
2a:7c:0e:ed:79:45:66:5e:01:74:c3:a5:89:83:82:12:7e:aa:
80:cc:a7:00:e9:32:42:e0:67:66:d6:0f:50:74:bd:01:98:b9:
94:a1:ae:df:ce:31:4d:e3:5e:75:83:f1:3a:0d:01:39:d1:97:
88:a4:4f:35:0a:6f:d5:6b:5b:f0:d1:51:de:25:ed:0a:f5:f6:
48:27:9e:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE
NjJFOTkyNDUwHhcNMjYwNTEzMDM0NjEzWhcNMjYwNTIwMDM0NjEzWjAYMRYwFAYD
VQQDEw02YTAzZjQwNi0wMjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjmDJ6hJRdfvOtLt3Qf+WTwdpKrV7w1BcF+hdYyAibQjw+kFYNTX0VWgTQKyV
/B4rs5xD13fI4xXyelhRG5yLAUHHHk3umsXinD/JWAnvDF96RIEwaFHvaJ3uDugz
cHPF4tC97g6ER0qQPSNpj3hN6tW2CUk4CRqUlBql4koBsy0h5ZBbRhGIMc6ZTuOS
SsPsjLlu7x20adPuZoFQ0BOVKkqEVWpQB387WninEFK8ZH3lYn0D+pcjVB3uDhwH
4zTQp0AuIaF/XeL51rk1mfevJZ27b1QOrl8pRIKWXudkIzTuKCMZ1yphXJ8qaPY3
qP8Galn8CX3j6XcDaPSONfFGOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD+cyphe
UrFaFF6vavSo0i8sV46LMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw
NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr
a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm
S2prVnB2LThvOXJXTHBra1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfo8N57as14t1VblVvE6c1GtTgdR5Z0XI7RvzoHLaR+f8TRoV0odgl2lDZm8k
Ytuf3ErlXNnDRKl1gRR4I7FFXtariPO25QaThw22bNK2UHe3tym5r+qrA70U1fgK
NW6EkASlL3i+RxDhxFUZBu77pmCD+4/BACw8O5yhjH1D3iY3orbY8j1iR4GcYvdm
jicsrH628HeXmRsJXGsGdA8CBod11zcNhJmlm0GVuKz0EEv2ClNOKnwO7XlFZl4B
dMOliYOCEn6qgMynAOkyQuBnZtYPUHS9AZi5lKGu384xTeNedYPxOg0BOdGXiKRP
NQpv1Wtb8NFR3iXtCvX2SCeeaw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:07:44 2026 by rpki-client