
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json)
Hash identifier: inVAURnc2mTpCh1CDuckJZiCDB5lxswOaAeX23oDfDA=
Subject key identifier: 6E:6E:25:B0:F5:CF:72:73:56:D6:51:A8:E7:B9:8C:D9:F1:AF:C0:DB
Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F
Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F
Certificate serial: 04FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
Manifest number: 04FF
Signing time: Sat 18 Apr 2026 23:35:59 +0000
Manifest this update: Sat 18 Apr 2026 23:35:59 +0000
Manifest next update: Sat 25 Apr 2026 23:35:59 +0000
Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: 8+uO2LQEaxNLH3jiL2JrrtGTOHeLWD0lbHfLcCIZ/KM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl
rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 23:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F
Validity
Not Before: Apr 18 23:35:59 2026 GMT
Not After : Apr 25 23:35:59 2026 GMT
Subject: CN=69e4155f-81a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:63:ee:da:cd:19:e4:4b:5c:c0:28:37:d8:7b:
de:d8:25:c2:f0:e6:96:98:46:2b:ad:1e:e7:c1:63:
13:e9:4a:1d:a3:ad:b2:02:22:83:95:6f:33:6c:bb:
66:8e:f2:17:14:f8:95:16:1c:4a:e7:f9:bb:0c:ea:
eb:32:bc:4d:1a:83:6e:67:a5:d5:a4:de:43:f7:b8:
e6:55:a0:a9:5e:06:36:c0:09:33:b8:45:b1:94:ed:
c8:97:81:e4:0e:56:0a:e0:21:39:a4:79:71:a0:4e:
e2:46:62:20:e7:1e:18:e7:e6:31:b5:a7:4c:7d:02:
ab:57:32:ad:85:b3:d5:6a:56:bf:46:91:11:c8:f2:
10:d8:69:42:43:dc:1d:6c:2b:39:22:94:7c:28:9e:
dd:fe:e6:35:56:08:bf:1a:6a:ac:41:f4:a1:0b:9b:
6a:d5:fa:53:6d:18:84:5a:06:15:76:49:6c:20:ec:
5d:91:36:6b:09:b3:2c:2e:7b:14:b4:18:32:6e:5a:
f2:40:34:2a:be:1c:fa:ab:48:ef:5a:36:ff:e0:64:
f6:d2:01:68:f9:45:fc:60:62:86:3d:13:fc:c1:47:
bc:a0:b5:ef:e7:4e:30:6a:1d:e9:5a:9c:f8:6c:c1:
ff:e5:4d:01:2e:b2:e9:62:79:2b:a0:24:5c:e9:7e:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6E:25:B0:F5:CF:72:73:56:D6:51:A8:E7:B9:8C:D9:F1:AF:C0:DB
X509v3 Authority Key Identifier:
keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ab:a9:c4:46:9a:7d:1d:3a:69:5a:06:20:6c:10:7b:b0:09:
52:ed:de:ac:26:dd:58:16:fd:c7:c0:9a:bf:ab:eb:8c:1c:6d:
c0:dd:ad:df:af:2f:e6:89:c0:cc:96:4e:c8:e6:a2:5e:66:a1:
19:c6:63:79:66:92:1c:8d:1c:49:c3:ac:db:c6:80:fe:30:81:
6c:a0:c2:f9:9c:30:92:fd:17:f3:85:bf:69:30:1c:a0:20:74:
11:e0:38:99:47:0e:ee:e0:55:05:52:b6:a3:d9:4e:6a:a4:72:
88:d4:81:7c:4b:fc:2b:5d:cc:32:00:fb:d5:5f:e0:cb:98:fe:
6e:b9:ed:88:14:94:c9:98:7d:54:2b:f1:25:72:73:f3:d9:ad:
c7:96:05:e9:25:b5:35:7a:e5:26:43:f7:ed:4c:95:94:37:d0:
63:b7:c9:be:50:c3:32:a8:01:6d:5a:2f:2a:a3:a9:c1:d4:da:
3f:27:f3:ec:b6:e9:72:cb:d5:ac:76:10:32:6a:22:08:74:e6:
f4:63:fe:0c:b7:98:cd:ec:7f:45:c7:85:bb:10:87:1a:f0:e3:
50:9f:30:97:cf:6b:cd:72:88:15:d4:58:26:d8:dc:41:6f:61:
1d:71:7e:f9:31:19:d3:cf:62:9e:58:44:c1:33:c9:c8:d9:d7:
ef:33:ae:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:47 2026 by rpki-client