
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
File: pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json)
Hash identifier: 8qcXx7vvsXYUOux95MUZoNesGi6jsAyp59LxlD+ZVyA=
Subject key identifier: E0:F5:C5:A9:BB:94:E8:6C:EF:59:4B:E9:F0:63:F8:90:1A:FC:B6:A5
Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66
Certificate issuer: /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66
Certificate serial: 17BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
Manifest number: 21BC
Signing time: Sun 20 Sep 2026 16:31:50 +0000
Manifest this update: Sun 20 Sep 2026 16:31:49 +0000
Manifest next update: Sun 27 Sep 2026 16:31:49 +0000
Files and hashes: 1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: t5gc4rAM9rKu+kuX/VX1r3Sa8Pn6N4F0inZq3vBdUGA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl
rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6075 (0x17bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3B25, serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66
Validity
Not Before: Sep 20 16:31:49 2026 GMT
Not After : Sep 27 16:31:49 2026 GMT
Subject: CN=6ab00a76-db80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b0:7d:57:37:7f:ab:32:b6:0a:db:23:96:f8:
a6:3d:e9:f8:0c:3a:9c:fd:42:86:03:9d:7c:88:71:
0a:5f:93:7f:c3:f0:16:9b:63:bb:a2:ee:c8:6e:ad:
11:d0:23:89:5a:a1:55:4c:3e:1d:39:42:fc:7b:c0:
82:31:3a:f6:46:1b:d0:43:9a:6b:2a:1b:9e:38:c5:
fe:34:4c:74:1a:4e:f1:27:ba:3f:15:bd:c9:60:99:
01:36:9e:94:8c:c9:b3:40:12:18:97:06:1f:74:80:
38:ed:23:94:20:d7:7d:82:db:5b:42:4a:f3:6e:af:
e9:d8:e4:09:20:7b:4e:80:fb:ce:1c:d0:6f:9e:f0:
d9:3c:26:4d:ee:23:95:e1:de:45:36:8e:32:c8:5e:
74:5b:3b:38:02:24:b8:88:fc:3c:78:81:46:32:93:
cc:85:98:eb:ab:e7:be:6f:26:2d:ed:b3:6f:15:b9:
62:91:4c:91:67:14:b1:27:9b:37:68:86:c1:50:15:
d9:a8:28:14:12:6f:32:ee:93:d3:8b:2c:43:26:96:
da:9e:d9:52:8a:2a:6d:f6:ea:cd:1e:d6:74:cb:4f:
5e:63:cd:f9:71:4c:b7:f3:11:aa:a1:5a:55:83:49:
9d:3f:60:ac:3e:fb:b1:e2:b5:c9:bc:73:50:e4:8c:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F5:C5:A9:BB:94:E8:6C:EF:59:4B:E9:F0:63:F8:90:1A:FC:B6:A5
X509v3 Authority Key Identifier:
keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:e2:db:4a:74:a2:a6:c2:9a:94:e2:62:9d:df:8d:23:0c:6f:
84:6e:9a:81:00:c2:28:a8:35:1a:a6:2e:9a:ba:1f:33:e4:1e:
59:7b:79:17:73:57:a3:46:b2:cc:e0:fc:8e:9e:e3:00:68:7e:
da:2e:0e:af:78:85:3b:65:44:a6:d6:01:55:f4:22:01:77:5d:
be:e3:77:c2:71:05:b6:9c:46:1a:2d:2a:a3:18:a5:4f:0d:4c:
85:d9:c4:69:fc:09:91:b8:4f:23:18:6a:5b:25:0c:d3:bd:fb:
4f:79:8b:11:e9:2d:80:c5:97:a1:f9:2d:87:e0:b1:35:48:13:
68:5d:42:fa:f3:56:69:ea:7f:b7:ec:2b:e9:3b:c2:1c:03:5a:
10:b1:2a:f7:47:a5:76:42:be:a3:72:1d:25:d1:8b:e5:66:3a:
c5:de:4f:31:79:be:f4:64:3a:c5:63:65:90:1c:e4:89:01:eb:
19:be:f0:e7:96:3f:f5:cf:94:f2:0f:d6:df:7e:5f:f0:dc:4e:
3c:ee:86:c8:ce:d6:44:c8:71:7c:a8:e9:4b:96:c6:85:34:95:
63:73:5a:21:62:93:54:51:4a:70:c4:e0:a0:ca:66:e9:4d:6e:
66:06:e9:ba:bb:5e:f7:1a:72:8c:8e:6f:49:ef:33:7d:fd:b0:
ad:e0:27:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:44:15 2026 by rpki-client