
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
File: Pgw5tVhKz65BgIE4j08KlNbajgY.mft (raw, json)
Hash identifier: TxOFCtCJy37gn5jxmXD7c9wbaWtiNrWW5TJzua6ZiQo=
Subject key identifier: 1F:F3:00:59:DB:AA:6E:0D:7D:44:44:5D:88:7A:E0:DE:A1:97:17:BD
Authority key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
Certificate issuer: /CN=A91BD7A3/serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
Manifest number: 36
Signing time: Sun 01 Mar 2026 09:57:51 +0000
Manifest this update: Sun 01 Mar 2026 09:57:50 +0000
Manifest next update: Sun 08 Mar 2026 09:57:50 +0000
Files and hashes: 1: Pgw5tVhKz65BgIE4j08KlNbajgY.crl (hash: YYmOrxIItEOPw2oSU83NwP2/By6Wu+hIV0Hr7ls43f8=)
2: 132F5C52C52511F0B4A6F21BC4F9AE02.roa (hash: +oT+l8AaeCiLhYsjOPIgCUOdYkL2JAeHR0qNvNkZXgc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Validity
Not Before: Mar 1 09:57:50 2026 GMT
Not After : Mar 8 09:57:50 2026 GMT
Subject: CN=69a40d9f-882d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:79:3c:63:73:0a:84:81:2b:5e:87:bb:95:7d:
53:84:ad:46:8b:d1:d3:84:9c:66:4b:6a:af:cc:5a:
9c:3b:5a:fa:31:c8:42:c5:60:99:aa:54:f4:32:3c:
f7:46:02:f2:7e:1a:b9:7b:0d:5b:aa:b0:74:ce:2e:
07:45:d1:b1:28:dc:85:c1:1b:7c:e5:fb:89:82:f6:
4d:09:4c:2e:22:50:52:26:da:c4:1b:d2:49:fc:3a:
fa:ef:3f:07:c5:0d:cf:ed:08:04:6d:b9:01:94:45:
c5:bc:bf:ee:c9:b7:bf:d7:4c:89:dc:4d:d3:00:55:
98:de:5d:05:a4:ee:30:2d:a7:6e:7a:52:fc:62:d1:
ea:cf:1c:96:a4:6e:21:02:13:27:3e:65:93:11:50:
73:ab:5a:d0:8f:ab:37:9f:2d:97:bc:f4:2b:6c:ca:
8f:e6:b9:bf:b5:ac:e8:e6:b5:ee:ea:c9:9b:a6:6c:
5b:e1:aa:36:cf:0e:1b:33:14:05:2c:d1:7f:c1:84:
62:e6:77:ba:c7:d8:a6:1d:7d:f3:77:74:aa:20:cc:
08:25:96:63:8b:30:63:68:23:52:ba:09:6f:71:a7:
ab:56:22:97:35:76:e9:98:3b:92:f0:04:22:da:2f:
9a:b9:ab:31:28:64:51:14:ba:00:50:65:6d:ab:64:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F3:00:59:DB:AA:6E:0D:7D:44:44:5D:88:7A:E0:DE:A1:97:17:BD
X509v3 Authority Key Identifier:
keyid:3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:de:07:06:be:87:46:40:9f:30:13:c6:71:fe:a0:a3:43:9c:
30:15:93:8d:48:7f:96:d1:c8:be:19:c1:c0:d1:5e:5f:2d:94:
c0:05:e9:61:08:33:49:48:64:bf:11:f6:1b:b8:39:88:21:08:
2d:d2:3c:d9:49:57:9c:62:ac:8a:05:54:7c:20:6b:99:1a:f1:
5b:32:11:43:c1:2a:a4:53:28:90:b8:79:e8:e7:01:f6:16:0f:
9e:2f:91:c4:dd:d8:32:48:82:51:0c:0a:42:83:ac:52:54:0d:
88:0b:58:74:96:94:93:b0:5d:3c:ad:69:b4:37:77:fd:21:1f:
91:1a:8f:bc:54:3b:c0:51:ae:de:a0:1e:38:01:99:f4:ca:59:
85:88:74:e4:60:c8:39:6f:68:ed:0f:98:46:17:dd:24:51:b7:
59:9b:8e:e9:ef:24:c3:63:a9:4a:da:1a:03:2d:67:dd:1c:1c:
00:19:ee:75:f2:48:c2:8e:05:d7:de:c0:14:cd:65:08:13:7c:
8d:fe:7e:4f:6b:a1:05:60:3a:80:ba:8f:b0:9b:0a:ab:43:b8:
0d:76:e5:93:77:10:47:4c:17:9f:3a:d7:c2:ec:79:22:76:ec:
7c:0c:a2:11:f1:7e:a6:e9:54:7f:3d:5a:42:76:e0:8a:f6:f9:
a9:7b:44:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:25 2026 by rpki-client