
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
File: PgzfiCrujHIh1YijxSYBjh1kyWg.mft (raw, json)
Hash identifier: CjraVjDlFTnyem48N1HhuJPaMY7PGvyXkUZ0YcxBqHA=
Subject key identifier: 83:FE:E9:0C:59:BA:30:8E:69:C1:9F:E9:23:57:4E:EE:65:D4:F7:E7
Authority key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68
Certificate issuer: /CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968
Certificate serial: 01E6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
Manifest number: 01E1
Signing time: Wed 29 Jul 2026 04:39:07 +0000
Manifest this update: Wed 29 Jul 2026 04:39:07 +0000
Manifest next update: Wed 05 Aug 2026 04:39:07 +0000
Files and hashes: 1: PgzfiCrujHIh1YijxSYBjh1kyWg.crl (hash: lpg5j6wT7mdRAZKN9gg+3rlydczpjuiB5i1QZYNz6yw=)
2: 41E0B402AE1F11EE96A5C977C4F9AE02.roa (hash: I3Aip9lEI/tB1p617YVnjX7fZuimKLHKae3IrKIw1Ds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl
rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CED30, serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968
Validity
Not Before: Jul 29 04:39:07 2026 GMT
Not After : Aug 5 04:39:07 2026 GMT
Subject: CN=6a6983eb-057e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:62:c9:b0:d2:e8:9b:15:f0:68:ce:66:78:
2a:a0:88:c1:5a:f5:ae:8f:60:a1:94:03:33:21:f6:
9a:f3:b3:43:52:0f:47:ef:30:18:f6:aa:09:7c:8b:
f7:f4:67:86:c0:07:54:47:00:5b:df:d1:c4:45:bf:
ee:60:66:58:da:20:b2:68:36:ab:31:69:74:9b:21:
c4:38:67:85:8b:1d:92:93:f9:61:2e:13:2e:d1:9b:
e1:fe:b4:fc:e1:14:5a:8d:a3:45:4c:2f:46:36:e8:
f9:bf:c4:35:c6:9a:3f:72:83:2e:14:b4:d2:82:d1:
57:40:81:a5:08:d0:1c:44:2c:61:7c:15:1c:8b:42:
db:2a:db:77:f3:70:0b:f3:4a:a9:39:65:95:8f:39:
22:45:81:28:77:42:df:36:e0:57:32:ef:d0:b6:14:
04:43:4c:63:1c:96:92:b2:93:19:f2:59:33:4e:c8:
e8:e6:b0:f9:04:fd:29:fc:b1:97:b8:98:d5:fa:41:
fd:39:c9:6b:8c:73:f3:ca:4b:a7:13:37:7a:04:e0:
eb:ae:ea:b5:42:cd:81:7c:8b:b9:ef:88:98:bb:eb:
ec:9d:95:7f:d6:22:52:e8:69:90:a7:cd:61:b1:bf:
58:7a:0d:64:e9:5b:30:8c:fc:b6:95:a9:e5:a9:29:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FE:E9:0C:59:BA:30:8E:69:C1:9F:E9:23:57:4E:EE:65:D4:F7:E7
X509v3 Authority Key Identifier:
keyid:3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bc:ac:2f:90:81:dd:16:f5:e8:d4:c1:ee:b7:55:85:b9:61:
a5:3d:1a:d3:8e:6c:88:89:aa:66:32:8c:d5:1b:73:6d:e6:37:
68:be:ae:ab:06:0c:1e:91:cf:97:2b:df:0c:7e:0c:ba:79:69:
4f:3e:01:f2:1e:d6:2d:05:46:e8:bc:7e:14:d8:1d:0b:5b:53:
8e:c7:19:21:d3:32:85:0c:76:fb:ac:10:1d:29:e3:ab:ee:70:
da:b7:9c:b5:87:6d:0c:0c:0b:21:c3:4b:68:ae:3e:45:d6:07:
ff:b6:fd:23:51:74:e7:ad:89:00:79:8d:44:14:b9:84:66:52:
bb:b7:f3:93:10:2b:5c:b9:ba:71:cb:7e:38:b6:0d:5e:8f:e7:
ca:28:90:71:b8:99:fe:e8:c2:0f:e7:9a:7c:0b:46:24:19:17:
65:3c:dc:f1:dd:f6:69:53:0a:a3:7e:04:a6:25:61:1b:23:82:
81:b1:47:a0:4e:33:5c:38:65:42:82:d7:12:a8:80:99:6c:ca:
f9:bb:3e:75:13:f9:49:8d:e4:44:69:be:10:02:de:57:bb:e1:
a9:4c:e5:14:99:06:7d:b4:d6:43:67:cc:09:8f:dd:7e:f8:71:
41:20:a8:0d:9f:6b:75:9b:2f:7f:24:f3:53:d6:c6:67:09:36:
12:17:53:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:44:11 2026 by rpki-client