
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
File: PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json)
Hash identifier: /HiPe+fAF/7ORn1s47oZHBSfxpeD3CLlTgonwsvagPE=
Subject key identifier: B7:9C:4D:4E:14:05:23:A3:1D:B4:D4:4A:59:19:31:80:BC:F2:F0:0F
Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
Certificate issuer: /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Certificate serial: 0264
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
Manifest number: 025B
Signing time: Fri 17 Apr 2026 02:07:32 +0000
Manifest this update: Fri 17 Apr 2026 02:07:31 +0000
Manifest next update: Fri 24 Apr 2026 02:07:31 +0000
Files and hashes: 1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: xJ0kgSOzQrsn0nZCi+sdHajIXUqwPd2jQUrR+ymxT0o=)
2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: 4pifmUBWRDqIs1AxU08rq2Ecl41mBJPR1UbVv8BwJA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl
rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 612 (0x264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Validity
Not Before: Apr 17 02:07:31 2026 GMT
Not After : Apr 24 02:07:31 2026 GMT
Subject: CN=69e195e4-8e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:cf:e6:58:a3:56:fc:ac:ec:bb:bb:63:cf:
1b:f5:0c:ac:8b:31:65:a9:62:0b:f3:cd:24:1f:82:
c2:a2:a4:58:10:e6:5b:5f:f4:7d:68:c8:88:02:18:
60:0a:6d:24:db:8d:83:57:e3:51:89:6c:94:cb:6f:
89:f8:8b:50:68:cf:25:ef:e2:4a:37:54:46:34:f6:
86:c4:b9:29:13:2c:62:5b:4e:11:d8:dd:f5:7f:68:
ac:c1:ef:bf:b4:9f:99:a8:6b:dc:8d:4a:b1:91:6b:
44:fc:32:b5:12:89:60:73:57:be:cf:18:fd:89:ad:
45:91:a3:c8:2d:8f:57:a6:de:b9:44:56:d7:8a:26:
b0:cd:21:0d:b0:9d:bf:32:fb:b3:d1:a8:5d:c1:04:
78:94:7f:c4:ab:88:82:32:cb:8d:44:4b:46:a4:03:
92:1e:6d:ea:bd:ce:21:79:92:40:e0:0c:1c:cc:ae:
6e:71:52:ad:4f:cf:11:da:bd:f5:7d:e3:66:c6:db:
8c:87:28:3a:9b:4f:fc:c9:0e:9e:a5:ae:e9:c3:d7:
01:ea:85:49:df:f1:40:01:a2:9c:4b:48:60:5a:0e:
35:30:86:04:81:f5:2a:1a:6c:de:cb:2a:f8:b6:7b:
c8:a8:26:bf:15:3a:c6:6f:53:48:22:d4:7f:86:66:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9C:4D:4E:14:05:23:A3:1D:B4:D4:4A:59:19:31:80:BC:F2:F0:0F
X509v3 Authority Key Identifier:
keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:19:60:90:02:fd:7a:3f:f5:11:c3:e8:89:83:57:27:5c:95:
a7:82:1e:d6:ff:97:f2:c8:88:c9:3d:bf:83:62:fb:a6:a6:f8:
85:60:6e:5c:45:6f:64:96:75:c2:51:4b:db:54:50:e2:87:81:
47:cc:41:08:b2:6d:44:bb:cd:a4:ec:1a:dd:f3:d6:ab:35:77:
7f:86:da:39:bc:fd:fb:1c:ac:d2:7b:4b:52:7d:ea:69:95:07:
46:40:66:96:df:0a:22:52:42:ef:26:92:8d:59:2c:18:ca:e0:
5a:20:69:93:a9:68:77:b7:b9:2a:d5:5e:db:0c:74:08:0a:58:
35:3f:53:c0:04:8a:17:a2:b6:e7:e7:cb:58:d6:a7:2a:ba:c6:
e3:77:07:c2:60:dd:bf:01:68:59:68:d5:c4:10:f8:96:8c:a9:
bc:a0:a4:2a:c7:6a:02:ac:1a:87:ef:3d:70:e4:15:5f:eb:25:
af:60:73:cd:37:54:9a:25:b6:0c:7c:ed:2c:fa:1b:8a:17:65:
2c:20:a9:8e:07:38:68:86:9c:d1:dc:1e:a8:43:9a:4d:8a:b0:
f9:89:39:cc:f3:05:17:0a:22:a1:80:89:2f:83:64:86:b6:1a:
aa:19:4a:f8:ef:a2:a9:44:08:65:78:66:82:26:4f:03:9b:9a:
9e:bb:15:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:06:31 2026 by rpki-client