
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
File: pih1evOkgoa9_fg6tOZOJNguDGs.mft (raw, json)
Hash identifier: ilJ72TR+6KAWWJsFjnVuGzgFj81FNS+cWJft7Cgp9fw=
Subject key identifier: 28:0E:FD:64:B9:F3:A4:A5:A6:5E:3D:CA:D4:41:CC:FF:F8:8A:A3:B7
Authority key identifier: A6:28:75:7A:F3:A4:82:86:BD:FD:F8:3A:B4:E6:4E:24:D8:2E:0C:6B
Certificate issuer: /CN=A91C4FBE/serialNumber=A628757AF3A48286BDFDF83AB4E64E24D82E0C6B
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pih1evOkgoa9_fg6tOZOJNguDGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
Manifest number: 59
Signing time: Sun 01 Mar 2026 09:36:45 +0000
Manifest this update: Sun 01 Mar 2026 09:36:44 +0000
Manifest next update: Sun 08 Mar 2026 09:36:44 +0000
Files and hashes: 1: pih1evOkgoa9_fg6tOZOJNguDGs.crl (hash: 8IqQfwLnh0Qo9akt4NjeByNutC3WhaCIwC2L8WYPtLY=)
2: 0B4BDC0E993311F08534326BC4F9AE02.roa (hash: O+71+qKIlOFF91ThgD2M6TfIMpzWxUeWVNEtSknMhWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.crl
rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pih1evOkgoa9_fg6tOZOJNguDGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4FBE, serialNumber=A628757AF3A48286BDFDF83AB4E64E24D82E0C6B
Validity
Not Before: Mar 1 09:36:44 2026 GMT
Not After : Mar 8 09:36:44 2026 GMT
Subject: CN=69a408ac-6e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:3d:d8:45:54:21:46:f6:a6:b0:82:ac:e3:
e1:e4:80:ed:3e:10:4d:e1:1c:14:bc:35:f9:6f:d8:
43:36:a4:8b:a8:f8:e3:37:d1:d4:0e:4b:f0:cb:70:
e9:4e:49:64:cb:bd:78:ae:00:cb:4e:e2:9a:f1:41:
82:6f:01:2b:e5:eb:2e:ff:a7:bd:0c:a5:3d:fd:52:
cf:88:95:9f:65:d9:65:c4:66:d0:0b:df:7c:a6:24:
23:12:ba:4b:ac:a0:d1:9a:67:c0:9f:73:df:0b:6b:
6e:60:b8:b2:e3:9d:94:ab:ac:47:ae:23:d8:75:db:
f0:6d:cd:18:59:40:8b:71:66:7c:50:59:75:71:55:
82:76:88:e1:4e:e6:65:b3:b2:3d:31:a3:09:74:d2:
63:7f:d1:01:30:ff:40:63:39:b3:6e:c1:c3:ca:24:
9b:56:6b:aa:cf:66:2d:9a:5d:6f:cf:47:9f:57:64:
eb:7e:7d:cd:97:82:bc:f7:04:26:7e:84:96:69:43:
a8:69:9f:92:94:93:9e:e1:79:59:d3:61:95:e3:ca:
82:d3:f8:cb:31:9b:a4:65:23:2a:b4:60:30:d0:ec:
4b:ec:50:9e:35:41:40:13:bf:39:83:52:79:67:1b:
87:5d:66:12:f7:65:a2:a5:4e:27:62:9d:38:e6:54:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0E:FD:64:B9:F3:A4:A5:A6:5E:3D:CA:D4:41:CC:FF:F8:8A:A3:B7
X509v3 Authority Key Identifier:
keyid:A6:28:75:7A:F3:A4:82:86:BD:FD:F8:3A:B4:E6:4E:24:D8:2E:0C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pih1evOkgoa9_fg6tOZOJNguDGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:7e:69:e4:cb:95:e6:e5:91:02:5a:98:9f:99:d4:c9:af:69:
d9:85:3e:80:38:73:55:cd:bc:2a:54:9a:7d:7a:b6:6c:50:3e:
d0:a4:10:ab:42:74:96:80:09:b3:7d:6f:33:ae:cf:1f:28:cd:
89:b3:90:8e:56:e2:78:18:46:16:81:5b:4e:44:98:9d:4e:eb:
4c:7a:35:f8:bd:35:5c:9a:f0:91:b7:33:f9:82:6e:c1:cb:9b:
73:49:46:5e:4f:46:f3:fd:d8:08:77:98:f5:13:2d:69:1a:9d:
6e:7a:5b:4e:9e:35:d6:03:93:4a:2d:86:31:fd:9c:19:e6:7d:
80:16:fc:c9:6e:13:c1:9e:26:53:e0:09:37:d6:85:fc:b7:b5:
75:80:17:c3:06:f5:14:74:b9:6f:a9:de:dd:42:26:48:ca:ab:
de:bb:80:32:af:6b:f9:6b:de:9f:62:f8:63:71:7f:6a:c1:3b:
65:b6:1e:80:5c:6e:8e:f5:08:c3:05:ab:3b:d4:ae:37:f6:87:
57:a5:ab:2e:f6:f1:d4:7a:fb:85:aa:7f:24:12:16:69:27:69:
10:0e:b0:a7:4b:04:e3:ae:df:5a:10:5c:8d:5a:5c:f8:8b:5e:
e0:54:16:a2:42:4d:7a:50:52:19:a9:5b:a7:34:e7:94:09:d7:
40:e8:00:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:46 2026 by rpki-client