
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
File: pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft (raw, json)
Hash identifier: Jab9rDv+6fGkUDJkh2L25KXvXMKv3GwA0bc7XDi1Nrs=
Subject key identifier: 32:9D:99:13:D0:17:8D:D7:D6:63:0C:00:1B:DA:88:82:70:E3:D2:59
Authority key identifier: A4:6C:E4:2B:13:FA:3F:6B:A3:CD:9A:31:A9:F3:D1:61:26:CA:F1:78
Certificate issuer: /CN=A91D4FA2/serialNumber=A46CE42B13FA3F6BA3CD9A31A9F3D16126CAF178
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
Manifest number: 1D
Signing time: Sat 13 Jun 2026 08:56:47 +0000
Manifest this update: Sat 13 Jun 2026 08:56:47 +0000
Manifest next update: Sat 20 Jun 2026 08:56:47 +0000
Files and hashes: 1: pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl (hash: avlRbMzJG9Cn+bWqPtzgJv6GKPAML4G0nTo7t0dvzGE=)
2: 40719A6C3EF211F1A0C63BEFC0833773.roa (hash: trUCovE1yXz1mUR6+zodwcoApF1cfjXUeBQcGyK6Uxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl
rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4FA2, serialNumber=A46CE42B13FA3F6BA3CD9A31A9F3D16126CAF178
Validity
Not Before: Jun 13 08:56:47 2026 GMT
Not After : Jun 20 08:56:47 2026 GMT
Subject: CN=6a2d1b4f-5c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:3d:f9:fa:ac:df:aa:c9:df:d0:79:a3:ef:
f4:bd:29:9f:14:ef:08:b0:61:71:8a:ee:4e:d9:42:
c0:2f:bc:5d:71:bc:8f:fc:bc:22:28:e2:4c:f5:2a:
14:cd:4f:8e:92:8c:1b:b7:c8:67:b2:c4:8b:60:b3:
7a:aa:f9:ee:b4:7c:ff:fe:58:d3:ba:69:7e:84:89:
9f:bb:34:e4:5d:f9:b2:4f:a2:c9:84:86:1a:44:c4:
08:5d:6f:2d:fb:25:40:44:14:28:cd:d1:f2:ee:da:
8f:16:ae:51:86:6f:be:08:0b:99:48:b9:4f:b1:4c:
3f:17:f4:d5:f1:cf:a1:3b:c5:3d:8c:d4:b0:ca:62:
b0:bf:83:14:88:af:49:c6:bb:7b:06:d3:8b:f4:f1:
9b:68:64:e7:a9:c3:b1:5a:71:c9:28:95:39:93:62:
e7:ad:a7:4d:9d:19:a1:7d:bb:02:39:54:fb:d7:fd:
00:e9:f3:e4:47:cb:5c:e2:ec:d7:f6:5d:a8:d7:5b:
36:74:4d:1d:d0:0a:94:32:53:95:aa:67:2a:d2:08:
03:75:fe:8a:69:b8:94:86:71:65:6b:e9:94:6e:9f:
04:22:7e:36:42:73:59:f8:44:6e:84:44:76:ef:32:
3c:44:99:c3:2c:c4:b7:98:45:c1:e3:1e:e9:d7:98:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9D:99:13:D0:17:8D:D7:D6:63:0C:00:1B:DA:88:82:70:E3:D2:59
X509v3 Authority Key Identifier:
keyid:A4:6C:E4:2B:13:FA:3F:6B:A3:CD:9A:31:A9:F3:D1:61:26:CA:F1:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:76:0e:23:ea:4c:42:f6:bc:6d:35:64:33:48:8b:1e:20:15:
63:55:75:23:24:10:e8:9a:24:97:31:29:54:6f:cf:6a:2a:22:
a1:88:b0:5b:03:31:5b:66:a9:98:a3:2d:85:ea:27:ee:bf:92:
7d:95:4d:90:8c:ee:19:5f:ca:9f:3b:4e:31:70:16:15:10:6d:
83:cb:dd:49:29:1e:29:7a:e5:58:91:bb:22:a5:95:3a:e5:a4:
41:0e:be:cf:0c:5a:7a:06:e6:ef:9e:37:11:ee:55:d9:3a:d1:
13:bd:9e:91:1a:c1:4a:d4:84:68:e4:60:c8:1e:12:cd:23:91:
3e:d2:6e:d1:7c:86:c8:19:ff:10:d4:1b:74:21:17:a3:be:a6:
45:6c:bb:94:c9:b1:62:25:8a:f5:43:4d:46:6e:86:03:da:5c:
0c:69:ac:9f:d1:0e:43:1c:94:da:1e:b3:6a:15:45:b1:6b:d5:
88:0d:b7:1f:83:78:45:48:78:13:0e:e1:33:c2:30:08:9e:71:
40:72:cc:b3:01:73:7a:9d:8d:16:ae:00:21:86:78:08:26:77:
0b:35:14:ba:3c:1b:bf:3c:90:99:d1:7a:f9:86:2d:e3:dc:10:
b4:47:2a:29:a8:34:87:eb:b7:11:d6:03:f2:44:6a:d0:f0:a0:
d0:4b:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:30:21 2026 by rpki-client