
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
File: pBG7PJekzTyP_HCtY6ny7JaSrbc.mft (raw, json)
Hash identifier: r3qb2hbkqew/tRrEElfdVL5idGzE5TYKbOBhj8Jrq7A=
Subject key identifier: 97:65:36:F8:D6:CC:20:88:68:34:9E:13:39:CD:E9:27:4D:5B:E3:91
Authority key identifier: A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7
Certificate issuer: /CN=A91EFD20/serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
Manifest number: 66
Signing time: Fri 17 Apr 2026 04:52:44 +0000
Manifest this update: Fri 17 Apr 2026 04:52:44 +0000
Manifest next update: Fri 24 Apr 2026 04:52:44 +0000
Files and hashes: 1: pBG7PJekzTyP_HCtY6ny7JaSrbc.crl (hash: 0vrTXqpvk8ubP1n+cnXwqwBMRxn9Trh4rmC1xmDChsg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl
rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFD20, serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7
Validity
Not Before: Apr 17 04:52:44 2026 GMT
Not After : Apr 24 04:52:44 2026 GMT
Subject: CN=69e1bc9c-dfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:5e:b0:cd:2f:9c:ef:ca:c5:c0:e8:6d:d7:
c6:cd:6f:f0:bb:84:d5:84:b4:1e:36:4c:9b:9f:87:
a7:5a:84:20:25:b4:b8:5d:e7:91:ca:54:51:da:3f:
33:a6:5b:74:59:e7:ba:fe:87:19:91:1c:43:03:cb:
40:d2:65:a9:e5:bf:81:3a:d8:ba:22:1b:29:d4:b6:
e5:4b:de:c4:54:cd:c6:a8:ca:3d:ea:db:c1:91:83:
0d:44:1c:b0:26:d3:af:fb:ef:8c:87:95:f8:63:ee:
dc:0c:ff:4e:61:fb:44:47:b8:e8:5b:60:e3:d1:fd:
d8:9a:73:dd:10:18:ed:52:74:c8:b5:29:25:27:98:
2a:e1:2a:2a:67:c0:45:6b:1c:08:c9:8d:65:34:ad:
df:8d:c5:c0:47:6c:7a:05:7e:dc:27:c1:d7:61:e8:
4d:42:7a:2f:67:32:85:bb:73:cb:33:98:75:7b:f2:
9a:2b:60:a8:a8:6c:a8:81:fa:70:f9:c6:62:6c:39:
27:9e:b7:5f:2e:61:f9:f8:89:43:45:af:99:59:98:
d3:99:20:da:9b:6f:1d:21:c0:01:55:a7:c1:47:a3:
17:31:d1:cd:1b:71:ad:d0:c9:27:fc:06:b0:81:d2:
7d:45:70:98:8b:fb:58:66:e9:08:3d:dc:33:49:09:
55:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:65:36:F8:D6:CC:20:88:68:34:9E:13:39:CD:E9:27:4D:5B:E3:91
X509v3 Authority Key Identifier:
keyid:A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:52:5d:6b:09:d5:e4:1e:74:c8:03:59:94:38:b4:2d:b5:b5:
4c:e0:7c:7f:05:46:07:82:85:2b:bb:b4:74:16:99:09:41:5c:
d9:dd:6a:d8:49:71:3f:fd:79:35:d8:12:22:94:27:67:bd:df:
70:79:cf:26:73:88:24:f2:ab:e6:ff:f3:3b:b8:a1:ad:32:13:
d7:15:61:d5:5f:1f:bf:0f:d9:47:b9:65:08:76:19:ef:9d:4f:
41:fe:19:69:23:85:8e:aa:27:98:60:40:d4:f1:e3:d1:ef:b7:
0c:78:5d:e9:ae:17:71:f7:57:0a:45:a8:05:89:84:d4:8e:1d:
9c:f5:d9:47:59:e3:85:56:ce:1e:cc:19:86:c0:ba:ca:ff:09:
4a:d9:86:2e:58:7c:b4:e2:3d:64:4c:d0:59:22:8c:13:c7:1b:
fa:c0:6c:e7:7c:c0:27:7d:1e:fb:43:b7:06:d9:ae:be:b3:2e:
7d:9a:43:e0:44:76:5a:f4:bc:50:c0:da:26:db:19:a0:f6:ae:
57:6a:fe:f2:32:a9:35:52:a4:52:1b:4d:8a:5f:68:78:8f:61:
5c:b4:01:7e:86:9e:7e:71:1f:59:af:0e:a0:bf:34:cc:da:cd:
08:1d:67:23:c1:8d:0d:92:65:d6:66:ea:bb:97:8e:a3:0c:44:
28:46:c9:79
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
RkQyMDExMC8GA1UEBRMoQTQxMUJCM0M5N0E0Q0QzQzhGRkM3MEFENjNBOUYyRUM5
NjkyQURCNzAeFw0yNjA0MTcwNDUyNDRaFw0yNjA0MjQwNDUyNDRaMBgxFjAUBgNV
BAMTDTY5ZTFiYzljLWRmYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsk16wzS+c78rFwOht18bNb/C7hNWEtB42TJufh6dahCAltLhd55HKVFHaPzOm
W3RZ57r+hxmRHEMDy0DSZanlv4E62LoiGynUtuVL3sRUzcaoyj3q28GRgw1EHLAm
06/774yHlfhj7twM/05h+0RHuOhbYOPR/diac90QGO1SdMi1KSUnmCrhKipnwEVr
HAjJjWU0rd+NxcBHbHoFftwnwddh6E1Cei9nMoW7c8szmHV78porYKiobKiB+nD5
xmJsOSeet18uYfn4iUNFr5lZmNOZINqbbx0hwAFVp8FHoxcx0c0bca3QySf8BrCB
0n1FcJiL+1hm6Qg93DNJCVW9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUl2U2+NbM
IIhoNJ4TOc3pJ01b45EwHwYDVR0jBBgwFoAUpBG7PJekzTyP/HCtY6ny7JaSrbcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGRDIwL0MyNkZBMjc2QTFE
QTExRjA4MEIyNjQ1M0M0RjlBRTAyL3BCRzdQSmVrelR5UF9IQ3RZNm55N0phU3Ji
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcEJHN1BKZWt6VHlQX0hDdFk2bnk3SmFTcmJjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG
RDIwL0MyNkZBMjc2QTFEQTExRjA4MEIyNjQ1M0M0RjlBRTAyL3BCRzdQSmVrelR5
UF9IQ3RZNm55N0phU3JiYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCpUl1rCdXkHnTIA1mUOLQttbVM4Hx/BUYHgoUru7R0FpkJQVzZ3WrYSXE//Xk1
2BIilCdnvd9wec8mc4gk8qvm//M7uKGtMhPXFWHVXx+/D9lHuWUIdhnvnU9B/hlp
I4WOqieYYEDU8ePR77cMeF3prhdx91cKRagFiYTUjh2c9dlHWeOFVs4ezBmGwLrK
/wlK2YYuWHy04j1kTNBZIowTxxv6wGznfMAnfR77Q7cG2a6+sy59mkPgRHZa9LxQ
wNom2xmg9q5Xav7yMqk1UqRSG02KX2h4j2FctAF+hp5+cR9Zrw6gvzTM2s0IHWcj
wY0NkmXWZuq7l46jDEQoRsl5
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:50:58 2026 by rpki-client