
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
File: pGg4Xjj11YpziCOPLtMFVXig7V4.mft (raw, json)
Hash identifier: ATGBz8V7IH6bOnf+XGe8XLqQ6s9cABdFHG/VWzgYhE4=
Subject key identifier: F1:2D:12:51:25:6E:D8:85:4B:5F:35:E2:F2:5A:11:79:E1:78:9A:84
Authority key identifier: A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
Certificate issuer: /CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Certificate serial: 089C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
Manifest number: 2B62
Signing time: Mon 02 Mar 2026 02:46:10 +0000
Manifest this update: Mon 02 Mar 2026 02:46:08 +0000
Manifest next update: Mon 09 Mar 2026 02:46:08 +0000
Files and hashes: 1: pGg4Xjj11YpziCOPLtMFVXig7V4.crl (hash: oBiZABY8zG/m5PbX0LuD+HcOUIDJFxVGtPa8oZzEPH4=)
2: 54E2A752E17211ECA8128235C4F9AE02.roa (hash: mArjBsuPuC5Q3ZktuoIgTu/EDyCpSzqID2aSQCKZt6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2204 (0x89c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5ED0, serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Validity
Not Before: Mar 2 02:46:08 2026 GMT
Not After : Mar 9 02:46:08 2026 GMT
Subject: CN=69a4f9f2-4c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:b7:58:7c:b0:51:f8:c2:06:a4:bc:14:ba:
74:5b:a9:d5:bc:0f:5f:e6:54:ea:f3:ea:bf:4c:21:
3c:e0:1e:c4:be:22:b0:1b:f4:2d:19:91:39:59:dc:
53:70:4d:82:56:a7:11:71:44:a5:95:3e:1f:a1:ec:
75:1a:a6:be:bd:b7:4b:1a:67:5b:ac:55:bc:4d:6f:
3c:31:e5:4d:51:1a:6c:8f:05:fe:d7:5a:be:fb:34:
f9:26:54:e2:b1:b6:e9:f1:23:50:71:76:c3:05:54:
b3:61:50:46:33:a9:ad:9d:23:d5:cd:90:93:0d:67:
c4:07:29:4e:e2:44:d2:dc:1e:3e:fd:00:0f:1c:af:
f1:f0:85:b2:a3:09:5f:e7:13:bf:d0:08:c4:2d:97:
9b:a8:fc:13:63:7e:7c:2a:93:33:ed:29:79:9c:bd:
1c:5d:cc:a4:3f:e4:3f:de:22:6f:96:35:5a:e9:e1:
f8:64:12:1d:f9:53:ce:8f:69:a0:6f:b6:1e:6e:aa:
9f:e9:56:7a:05:44:55:97:3d:28:d3:65:cf:72:d1:
56:a0:fd:31:0b:95:f5:50:75:2d:b9:3b:14:b5:0b:
29:55:47:7e:1c:32:5c:4d:cb:2a:b3:2e:df:8e:c3:
9a:45:e4:b6:15:7f:00:32:cd:43:54:ad:4a:ec:c1:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2D:12:51:25:6E:D8:85:4B:5F:35:E2:F2:5A:11:79:E1:78:9A:84
X509v3 Authority Key Identifier:
keyid:A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f5:92:f3:cb:fc:3a:7b:7c:54:9c:f8:13:3d:fb:14:5f:ff:
6d:7b:df:e4:0d:66:2c:24:2d:a5:84:d4:d1:11:e8:ab:22:a8:
b0:88:5c:2a:f0:05:74:d7:6a:76:25:24:55:3b:e6:03:57:07:
67:fc:47:a1:b1:5b:a4:61:64:18:d6:a3:d1:eb:7e:d0:bd:f4:
5d:73:fc:8d:2e:e4:f4:d0:71:73:0a:6e:09:fb:fa:82:93:35:
5b:9c:9a:70:b1:f7:59:e6:de:e1:e6:ab:ea:57:65:b7:06:0c:
a5:97:ad:98:db:81:f9:d9:75:52:d1:10:0f:92:d9:01:d3:38:
ab:7d:40:8a:3a:07:56:1a:cb:52:62:94:e4:7f:ed:0a:1f:a7:
43:28:c8:1c:bf:70:45:9b:f8:dd:49:28:83:f1:dd:9a:eb:c2:
ab:01:ac:65:1b:87:e5:30:02:fa:c4:6d:eb:89:58:bc:33:7c:
36:cc:36:04:7a:9f:31:4a:ef:4d:f8:8c:35:c4:2f:8e:ea:f3:
7b:64:40:8e:59:2f:f9:c6:22:5d:2d:d3:2e:2b:f9:25:db:fb:
6e:6b:9e:d7:12:0f:ae:b6:bd:5f:7a:4c:62:fe:33:6d:ea:a5:
1a:b6:b2:c0:ba:d6:80:0a:97:16:f0:48:77:18:1d:59:15:03:
a8:ab:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:41 2026 by rpki-client