
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json)
Hash identifier: ZpOphCRUHew9KbGx1/OipumPLCc+Bqis6FEn+551Yi0=
Subject key identifier: 58:24:31:BD:01:C7:0C:8D:B8:34:2F:7F:AF:CF:3C:F7:B0:EC:75:B0
Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F
Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F
Certificate serial: 0531
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
Manifest number: 0531
Signing time: Mon 27 Jul 2026 00:30:07 +0000
Manifest this update: Mon 27 Jul 2026 00:30:06 +0000
Manifest next update: Mon 03 Aug 2026 00:30:06 +0000
Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: 1MBZugyTwHw6PPua+lp8BWuA+NM5JdokStR5sm1gBdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl
rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1329 (0x531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F
Validity
Not Before: Jul 27 00:30:06 2026 GMT
Not After : Aug 3 00:30:06 2026 GMT
Subject: CN=6a66a68f-d0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:96:71:e1:d1:3d:93:96:0b:5d:9d:f7:ab:32:
99:02:be:4c:c5:69:90:7a:7d:3d:d9:73:4f:eb:dc:
2d:92:47:c3:e8:14:0c:70:28:a9:14:51:36:d4:fc:
5c:58:5e:f2:c7:ce:9b:92:a7:65:7c:7d:7d:b8:57:
ea:15:b5:1f:7f:5b:df:66:ee:c5:ce:51:12:5d:0f:
85:ed:e9:95:07:94:ea:a1:e4:58:90:4a:84:38:31:
1d:82:4b:b5:4a:3d:05:e0:da:b7:8b:9b:51:93:00:
d8:37:10:5d:11:23:0f:1a:d8:6d:62:60:90:d6:ab:
34:bd:59:7c:38:11:dc:f9:de:f6:17:91:11:7a:83:
c5:b3:96:0d:79:38:3f:f1:86:e0:13:ca:8f:28:42:
3c:8e:fb:50:25:09:7c:e3:5b:1d:ad:2c:15:ab:32:
20:68:ed:0e:0c:6d:e2:4c:d7:21:94:5f:61:68:dc:
b8:b1:42:63:80:b8:9a:86:82:6a:0f:f9:73:96:90:
0f:aa:7b:c0:68:cc:8b:b2:e2:14:96:4d:53:05:7f:
4d:d8:80:67:0c:8d:fd:73:26:2c:98:f5:85:e5:f8:
18:fb:d9:ec:c5:43:e5:14:d0:ae:eb:27:bb:01:28:
ed:62:bc:c5:b0:89:5e:98:eb:db:ad:e6:2c:6c:34:
3c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:24:31:BD:01:C7:0C:8D:B8:34:2F:7F:AF:CF:3C:F7:B0:EC:75:B0
X509v3 Authority Key Identifier:
keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:80:9e:ec:6e:72:b4:10:fd:91:f1:f9:54:8c:f0:48:e6:e9:
ae:62:08:ae:63:9c:a0:94:64:af:4f:74:09:ae:42:a8:60:72:
4c:67:dc:21:94:56:a9:71:59:98:b3:61:a1:6f:83:15:27:d9:
ad:aa:b5:7e:29:6d:03:91:67:d2:61:13:77:00:f2:ab:52:21:
c5:e6:83:82:47:2f:2c:fc:70:eb:59:3e:70:26:04:4f:b7:2e:
ad:cf:16:ae:7a:87:f9:47:82:34:b2:42:84:7b:e8:23:5c:1d:
e3:39:79:e2:33:5c:49:4d:a8:17:cf:0d:76:2f:43:ff:63:2f:
39:66:68:bb:dd:f4:65:9c:ba:0b:60:18:a0:54:81:27:8e:9a:
c1:d3:e0:b6:39:e6:d1:20:21:a1:be:5c:4b:25:ac:73:f8:67:
03:d1:c8:65:0c:b0:ce:8f:44:c8:5d:7a:20:cd:18:19:2f:d0:
61:83:9a:9b:57:e1:7f:e3:a8:70:c5:e2:7f:b5:25:ab:db:d7:
fb:74:4c:b9:27:06:13:6a:54:e8:cd:41:6b:06:5d:66:58:32:
d5:03:eb:f0:a3:aa:3a:20:5f:c6:41:55:b4:93:31:20:21:ec:
cb:fe:18:6f:6b:95:74:77:f4:89:34:b9:4d:b2:c3:14:74:65:
5a:bb:a7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:29 2026 by rpki-client