
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
File: pg-NpHi9dy9PKz5MedXBgd3laJM.mft (raw, json)
Hash identifier: 5Kytzmdhgo5dIvpJu6dErFw9pcDX7XBAhFY1A1ic8v4=
Subject key identifier: 94:4D:61:7B:93:D6:3C:BE:60:62:D0:C7:F8:2A:2F:7C:A6:2A:AC:0E
Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93
Certificate issuer: /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
Certificate serial: 0225
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
Manifest number: 0220
Signing time: Sun 01 Mar 2026 03:32:51 +0000
Manifest this update: Sun 01 Mar 2026 03:32:50 +0000
Manifest next update: Sun 08 Mar 2026 03:32:50 +0000
Files and hashes: 1: pg-NpHi9dy9PKz5MedXBgd3laJM.crl (hash: BL0Vi3CNPDZmLmkEjKjw7o/xFSxkVcHLgb9F/NgVVeY=)
2: 763018B4D29811ED8CDDB83AC4F9AE02.roa (hash: gY3dwR5+r1G24a+7Zdvb4cHyMdDeob3RTrrDa7nI1A4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl
rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDADE, serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
Validity
Not Before: Mar 1 03:32:50 2026 GMT
Not After : Mar 8 03:32:50 2026 GMT
Subject: CN=69a3b363-ae05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:d8:56:fa:e1:84:5c:c6:a8:0a:61:a5:58:
cf:c0:82:ea:53:39:cc:81:84:7e:bf:a5:44:5f:e6:
1a:6f:21:40:0d:0a:ed:9e:93:b3:a7:82:76:63:ba:
a5:19:c6:95:21:40:e6:6b:cc:41:0d:38:03:56:85:
c0:1f:60:a0:09:27:bc:b4:df:fe:80:b6:80:a6:b9:
04:3c:3a:63:08:08:b2:6b:2b:b5:0b:d9:54:3c:35:
0f:5c:a3:47:8d:60:d8:af:dd:03:45:91:8b:a0:41:
0c:ef:63:7a:83:0a:fe:1b:af:25:45:59:6d:48:48:
c1:9b:1d:4d:3b:b4:d1:06:5e:7c:3d:53:2c:12:cf:
9c:5b:80:2d:53:1b:f5:26:e3:08:a1:52:c0:05:1f:
c4:b9:a3:00:07:4c:41:64:76:05:47:c5:cf:b6:66:
6e:c3:77:b1:b6:80:77:8f:6a:5b:3d:b6:66:46:a6:
98:25:e2:e0:ee:f6:7a:c9:b7:61:5e:de:77:68:65:
85:5d:fa:f4:1b:55:9f:c9:7e:54:b8:55:3c:8c:f1:
90:87:17:d2:9b:c3:2e:ba:3a:16:3d:25:c4:3f:2f:
56:18:f4:46:ec:2e:a2:1e:1b:d3:23:4b:81:8d:33:
a2:fd:31:52:f4:96:0c:ef:2c:c8:07:7a:e3:24:48:
64:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4D:61:7B:93:D6:3C:BE:60:62:D0:C7:F8:2A:2F:7C:A6:2A:AC:0E
X509v3 Authority Key Identifier:
keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a8:ed:ed:9d:ba:03:51:8e:e8:97:4e:7a:e5:72:bb:59:15:
e3:19:83:82:b1:b3:25:e1:18:4e:61:97:ec:ab:50:70:54:70:
66:7f:db:1e:83:1c:80:c0:e8:9e:c6:37:cf:17:f1:1f:c3:12:
d1:36:f2:e6:49:17:3c:0a:86:e3:23:aa:d0:f3:2d:34:89:af:
1e:18:77:aa:ef:73:87:fd:c9:19:87:3c:7c:9a:1e:a7:91:7f:
0b:17:ae:82:2c:a2:c6:54:44:30:ed:89:68:5d:96:2d:08:48:
2f:4b:b1:24:04:62:a2:8d:ee:29:5a:82:2b:a9:c9:d9:db:4c:
1a:f3:2c:db:41:7c:b1:2a:24:a4:10:26:19:6f:4b:b4:8e:eb:
39:4d:fa:4e:05:e2:2a:d2:d2:e0:cc:0a:61:db:cc:e6:00:ee:
a0:4e:fb:d1:15:fd:9e:a4:d4:30:06:3e:9a:36:24:4f:08:50:
db:87:5d:fa:ee:c2:7a:49:c7:c4:9c:2c:a1:1e:e9:c3:d0:84:
5b:6c:64:c8:71:3a:76:80:9e:9b:12:fc:10:65:2a:ee:8d:9e:
44:86:49:e6:9f:91:21:70:e2:4b:17:1c:a7:41:7f:9d:77:03:
b8:78:49:89:eb:2b:43:17:b8:a0:ac:58:68:08:74:ab:74:11:
2e:01:33:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:30 2026 by rpki-client