
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
File: pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json)
Hash identifier: /+lbIK3klz9kS76kHi2oP6lVX/gybcD+ChV87dIm1qE=
Subject key identifier: 1A:89:07:F1:16:F2:6A:72:23:6D:81:B0:B2:50:A3:E4:49:65:8C:36
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Certificate issuer: /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial: 01ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
Manifest number: 01E3
Signing time: Wed 23 Sep 2026 03:22:02 +0000
Manifest this update: Wed 23 Sep 2026 03:22:01 +0000
Manifest next update: Wed 30 Sep 2026 03:22:01 +0000
Files and hashes: 1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: YUwZJGMgJgtLKCgF9arMqKv1LnlBm6dkgLvIu8XWrYE=)
2: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: 33xsa1I7dTsH1mG4g4Z5bezPgV/Y0HHBZjYGiwsfW78=)
3: EF260118D54211EEA18A7234C4F9AE02.roa (hash: mtMrgn8E6rJ7Yx0iQX63xtbQeZIjjv/MdEQJpqPZR5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Validity
Not Before: Sep 23 03:22:01 2026 GMT
Not After : Sep 30 03:22:01 2026 GMT
Subject: CN=6ab345da-7dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:7b:56:0d:fc:39:9b:c7:a8:d0:5d:5a:85:
79:39:76:e6:d1:ad:80:b9:f8:68:a5:ea:64:ca:d3:
7f:2b:fd:09:ad:01:8e:4d:8a:53:91:02:74:a5:29:
58:4b:ee:3c:48:f5:fe:eb:34:3e:36:32:c7:7a:78:
97:32:5d:17:e7:e3:49:a1:20:e0:39:35:90:8f:6d:
a7:28:b0:e7:d1:0c:28:96:89:83:6d:86:6a:94:1b:
d1:05:68:d8:74:cb:dc:f4:f9:31:ce:63:c6:48:2d:
5e:42:59:08:73:88:9f:a2:e6:a7:9b:b2:cf:42:e2:
e9:0c:b9:f2:07:ff:21:fd:05:76:72:17:ef:8d:22:
11:9c:b2:5e:48:5f:ac:44:9c:3a:22:bf:cd:82:13:
19:51:3b:1f:0b:16:36:fa:c6:ec:16:bd:65:b5:ff:
db:de:21:f8:5c:13:78:29:a3:49:2c:b0:b0:bc:1c:
3f:60:68:34:02:b4:d5:5b:c4:4a:56:e2:7e:21:16:
82:ea:7d:01:70:27:7b:a2:e6:87:6b:4e:7d:7d:71:
8e:72:9f:aa:cb:30:9e:fa:e3:0e:57:58:8d:00:7b:
44:67:f0:d6:aa:3d:c3:d0:dc:d6:02:61:d2:22:50:
55:eb:ea:d6:65:6b:14:72:33:5a:33:5b:3a:8d:64:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:89:07:F1:16:F2:6A:72:23:6D:81:B0:B2:50:A3:E4:49:65:8C:36
X509v3 Authority Key Identifier:
keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e0:c9:f8:3c:c0:1b:5a:22:fa:45:35:0e:7a:b6:44:b6:4f:
cc:86:46:6f:af:8e:19:25:e8:14:6a:19:49:5d:2a:60:31:db:
5a:87:a6:39:aa:37:97:c6:f2:44:ab:29:fa:0d:9d:2a:f7:dc:
71:e8:e8:2b:93:9e:9f:98:a6:19:ad:4c:5c:ce:01:26:d5:e4:
87:11:41:13:2c:5a:fa:76:6a:59:fe:bd:4c:77:8a:3b:2d:36:
04:95:5d:13:7d:a4:00:10:97:f9:f3:ca:2e:59:6c:57:b9:95:
00:48:1d:84:08:d9:e7:4a:7b:9f:3d:c5:47:93:da:98:9e:04:
9c:1c:7c:11:52:5a:4e:66:3d:11:9a:1e:35:ef:f2:97:7c:00:
5c:35:51:06:8a:d5:3e:2c:06:11:5e:2e:1b:fe:87:a2:f8:00:
3c:28:eb:a3:1c:9c:e9:f4:59:14:aa:ab:00:31:76:4b:75:a6:
1c:b5:9a:12:aa:ba:45:3b:0a:6d:74:bf:0b:0b:4c:a8:a4:0a:
72:88:fb:51:7d:8f:ff:4e:05:b2:e9:b5:60:3b:c0:ed:ec:d9:
a9:1c:10:f3:f4:06:9d:51:d0:5a:88:81:7c:5d:21:76:7f:b3:
8a:9d:52:ca:84:9b:46:11:79:b9:85:44:69:08:58:30:dc:73:
d9:8c:e4:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIwMTAxMTAvBgNVBAUTKEE2MDlBOTRFNkEyMTAxQkFGOTVDOEMyRjU1Q0VDNDE3
OTI1QkVGQ0YwHhcNMjYwOTIzMDMyMjAxWhcNMjYwOTMwMDMyMjAxWjAYMRYwFAYD
VQQDEw02YWIzNDVkYS03ZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqUF7Vg38OZvHqNBdWoV5OXbm0a2AufhopepkytN/K/0JrQGOTYpTkQJ0pSlY
S+48SPX+6zQ+NjLHeniXMl0X5+NJoSDgOTWQj22nKLDn0QwolomDbYZqlBvRBWjY
dMvc9PkxzmPGSC1eQlkIc4ifouanm7LPQuLpDLnyB/8h/QV2chfvjSIRnLJeSF+s
RJw6Ir/NghMZUTsfCxY2+sbsFr1ltf/b3iH4XBN4KaNJLLCwvBw/YGg0ArTVW8RK
VuJ+IRaC6n0BcCd7ouaHa059fXGOcp+qyzCe+uMOV1iNAHtEZ/DWqj3D0NzWAmHS
IlBV6+rWZWsUcjNaM1s6jWSzZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBqJB/EW
8mpyI22BsLJQo+RJZYw2MB8GA1UdIwQYMBaAFKYJqU5qIQG6+VyML1XOxBeSW+/P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAxMC9FQTAyMUE5NEQ1
M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFicjVYSXd2VmM3RUY1SmI3
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BnbXBUbW9oQWJyNVhJd3ZWYzdFRjVKYjc4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjAxMC9FQTAyMUE5NEQ1M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFi
cjVYSXd2VmM3RUY1SmI3ODgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAneDJ+DzAG1oi+kU1Dnq2RLZPzIZGb6+OGSXoFGoZSV0qYDHbWoemOao3l8by
RKsp+g2dKvfccejoK5Oen5imGa1MXM4BJtXkhxFBEyxa+nZqWf69THeKOy02BJVd
E32kABCX+fPKLllsV7mVAEgdhAjZ50p7nz3FR5PamJ4EnBx8EVJaTmY9EZoeNe/y
l3wAXDVRBorVPiwGEV4uG/6HovgAPCjroxyc6fRZFKqrADF2S3WmHLWaEqq6RTsK
bXS/CwtMqKQKcoj7UX2P/04Fsum1YDvA7ezZqRwQ8/QGnVHQWoiBfF0hdn+zip1S
yoSbRhF5uYVEaQhYMNxz2YzkJg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:23:11 2026 by rpki-client