
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
File: PGIfAALQYHByq7Fal4r7xa9DpVw.mft (raw, json)
Hash identifier: 6wptcVz029dJUMkXxMMhTfgMrp4tO2LFn9s+PFtsew4=
Subject key identifier: AD:A8:5E:C5:70:FC:90:C0:33:8D:1F:5D:08:46:1D:A5:0A:97:A3:37
Authority key identifier: 3C:62:1F:00:02:D0:60:70:72:AB:B1:5A:97:8A:FB:C5:AF:43:A5:5C
Certificate issuer: /CN=A91F4130/serialNumber=3C621F0002D0607072ABB15A978AFBC5AF43A55C
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
Manifest number: 45
Signing time: Wed 25 Mar 2026 07:32:01 +0000
Manifest this update: Wed 25 Mar 2026 07:32:01 +0000
Manifest next update: Wed 01 Apr 2026 07:32:01 +0000
Files and hashes: 1: PGIfAALQYHByq7Fal4r7xa9DpVw.crl (hash: rJ1SkuVT//8oSsBNP9xux8cD6V3EqOW4oa5qPfayEqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.crl
rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4130, serialNumber=3C621F0002D0607072ABB15A978AFBC5AF43A55C
Validity
Not Before: Mar 25 07:32:01 2026 GMT
Not After : Apr 1 07:32:01 2026 GMT
Subject: CN=69c38f71-aece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:5e:66:7a:a7:74:c1:4b:1f:92:f6:5c:79:
04:63:37:a4:6b:18:a7:b9:1d:a5:51:8d:d6:d9:93:
34:02:2f:04:0d:c3:0d:46:c0:5b:b8:10:8a:ae:26:
0a:5b:80:2c:8c:0e:4b:12:70:ad:e5:0d:af:43:92:
0b:b6:24:83:a4:cf:9b:69:bb:ea:de:8a:3d:b2:db:
d2:63:de:b9:74:85:9b:b9:e4:63:fe:75:14:14:e5:
9f:f5:e8:ef:59:a4:d2:c7:30:74:0b:5f:ed:a1:b3:
96:b2:ed:5f:43:64:a5:69:6f:0e:af:59:95:a7:d1:
73:d1:03:1c:3d:d1:f9:ed:35:94:f6:7c:ee:6d:7c:
51:e0:34:c9:ef:c9:93:c7:5f:06:41:ae:ee:ab:2e:
24:8c:f6:fa:a3:71:6f:5a:4c:50:ea:77:26:3e:f5:
38:cb:93:aa:37:ee:25:d7:d5:ed:26:ae:91:ce:57:
13:4a:83:49:40:d6:83:ed:e4:67:b9:2e:df:61:5d:
64:9b:55:a6:e7:38:d3:61:ec:50:da:7b:3d:29:cc:
a5:de:b0:76:02:73:ca:6f:58:be:6a:ce:21:dc:06:
d0:e9:55:29:25:93:91:45:d6:51:61:2d:7c:0e:6c:
5a:73:fa:ff:48:f5:5a:67:50:86:d9:32:b0:fd:dc:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A8:5E:C5:70:FC:90:C0:33:8D:1F:5D:08:46:1D:A5:0A:97:A3:37
X509v3 Authority Key Identifier:
keyid:3C:62:1F:00:02:D0:60:70:72:AB:B1:5A:97:8A:FB:C5:AF:43:A5:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:a3:26:7f:18:14:b7:a5:15:c4:bf:7d:e3:fb:67:c6:22:47:
14:1a:43:ea:ff:1c:0c:06:68:ec:c2:b2:48:25:0a:5d:ca:64:
59:f2:94:6f:41:4f:a6:9f:5a:7e:86:e5:be:d5:72:2c:f3:a8:
5f:23:fb:c1:0b:42:b4:3d:f7:54:36:44:de:7a:e1:1a:e0:ed:
cd:d5:fa:b9:87:66:fa:24:cb:fc:36:a9:21:03:71:e7:a1:b1:
eb:82:a6:62:29:a2:72:a9:4f:4b:97:ca:7d:fc:1e:9e:5b:d6:
8d:4e:c8:6d:8f:b7:e1:4a:6c:2b:73:ef:a0:c5:f3:ee:f2:fc:
ec:96:28:99:5b:d7:a5:ff:55:08:32:f1:19:e5:71:34:c8:e1:
9b:c0:ae:7e:9b:0c:0b:2e:e2:55:98:a4:70:5b:c4:43:3b:b7:
05:97:72:ac:30:9f:ec:94:cf:17:a4:27:20:86:01:59:0e:12:
b8:9d:9f:50:81:d1:8e:08:ab:35:ef:43:26:76:9c:67:6d:bc:
96:52:56:42:0a:13:47:df:2c:af:07:62:2a:db:cc:3e:9d:20:
bc:72:d5:94:1c:8f:d3:8f:be:4a:30:bc:31:2a:4a:e2:5c:75:
e2:7a:5e:95:9f:b1:c6:cf:1f:35:98:6d:0d:cd:1d:a5:a6:85:
cb:80:49:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:11 2026 by rpki-client