
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
File: PgzfiCrujHIh1YijxSYBjh1kyWg.mft (raw, json)
Hash identifier: Z9nuYZzWVxM9YhkOFseh0UmldvRWj4YSr4asoBbvNfU=
Subject key identifier: 39:02:C5:75:E6:2E:F5:E0:8B:2A:32:3C:A8:D8:93:44:CE:B8:E8:D6
Authority key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68
Certificate issuer: /CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
Manifest number: 01CA
Signing time: Sat 13 Jun 2026 03:44:11 +0000
Manifest this update: Sat 13 Jun 2026 03:44:10 +0000
Manifest next update: Sat 20 Jun 2026 03:44:10 +0000
Files and hashes: 1: PgzfiCrujHIh1YijxSYBjh1kyWg.crl (hash: VfvXdR3OlX7ft9j0p8XJIrIGYHzALR2DfYmGdlcGy98=)
2: 41E0B402AE1F11EE96A5C977C4F9AE02.roa (hash: I3Aip9lEI/tB1p617YVnjX7fZuimKLHKae3IrKIw1Ds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl
rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CED30, serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968
Validity
Not Before: Jun 13 03:44:10 2026 GMT
Not After : Jun 20 03:44:10 2026 GMT
Subject: CN=6a2cd20a-54b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:83:a7:4e:ef:28:c6:d6:04:3a:15:02:05:
89:eb:a6:a0:f2:35:cd:38:c0:fc:9f:d5:14:77:bc:
f6:76:16:b2:b9:38:6e:0b:fb:d7:2a:5a:60:71:fb:
5a:7e:0b:d7:8c:e9:83:40:b2:0f:76:77:e2:34:55:
57:7f:52:cc:e5:32:fc:01:01:d8:01:bc:76:02:ce:
56:9c:14:e5:03:0f:fd:96:8a:f7:54:64:34:18:20:
d4:ce:5c:f5:b9:5c:9c:44:87:db:c0:42:2f:3e:d9:
5b:95:08:45:22:48:c0:56:a1:8c:c0:d0:3f:81:02:
f4:66:e3:1c:4f:20:e8:d6:2f:96:db:35:26:42:7b:
1b:7a:dc:5a:4d:85:b8:ac:76:19:27:ad:77:8d:b3:
ea:a7:ea:6d:84:4e:10:7b:ac:db:39:1b:4e:79:e3:
05:a5:51:d2:3a:73:a5:6d:a6:df:75:f4:8b:85:2f:
f7:f7:be:d1:09:9c:48:52:34:32:51:0e:df:38:8b:
96:e7:5f:bc:72:1a:93:d4:f9:29:d7:02:ca:d8:63:
f6:15:18:2c:ce:d4:8c:12:1c:48:a7:4d:71:18:87:
0c:a0:5c:23:a4:a2:fb:42:b5:a5:f1:68:54:14:a9:
17:f5:cc:db:c9:67:a9:17:87:3a:31:72:ad:28:f9:
ef:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:02:C5:75:E6:2E:F5:E0:8B:2A:32:3C:A8:D8:93:44:CE:B8:E8:D6
X509v3 Authority Key Identifier:
keyid:3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:48:8f:d3:a3:e9:7b:cd:6f:83:b2:7b:4a:74:d4:da:5a:43:
50:da:7b:55:38:1b:34:06:db:23:da:b8:e4:60:3d:71:c7:94:
6a:c6:09:c3:5c:e3:8b:5c:0b:13:bb:5e:4d:f2:ba:e0:ce:ac:
e2:2c:9a:83:63:12:08:ca:48:2a:45:70:27:b0:b8:c2:27:e4:
eb:78:a4:dc:52:83:55:51:93:95:78:81:43:32:e9:d2:84:07:
ed:b1:b2:bf:68:8a:ee:d9:9b:d2:84:7c:49:f4:a4:97:04:d7:
3d:8d:3e:ec:ad:e3:17:5b:59:a6:71:bc:28:cb:f2:61:d6:f7:
52:44:94:0a:88:f0:57:02:9e:3f:19:79:53:cb:48:dd:8e:19:
8c:20:51:8f:56:dc:ba:59:21:33:d1:ea:1f:bf:36:14:6c:de:
f2:e9:04:4f:85:fe:b4:ef:14:02:df:90:68:f5:59:b5:ba:d4:
d7:d6:9a:ae:b7:c2:12:8a:72:0f:e6:f7:33:ab:b7:62:df:2a:
04:cc:9a:a3:2a:2f:0c:ce:d1:04:c3:7f:96:d5:d3:f6:68:d5:
b4:f1:8d:79:c9:b5:df:ab:5c:89:51:aa:87:f9:2e:ec:e7:d2:
7e:31:98:43:93:7f:3c:6b:29:44:90:3a:fc:2f:3e:78:14:ed:
4a:3a:82:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:25:26 2026 by rpki-client