
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
File: pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json)
Hash identifier: 6MgKADokQcgzSFPN3W7NhTCfo46zRC5otQ+7LIiy34c=
Subject key identifier: C7:0D:76:DA:9E:54:E7:0C:A5:E5:07:63:B0:F0:B7:80:1A:91:EA:44
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Certificate issuer: /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
Manifest number: 0136
Signing time: Mon 27 Oct 2025 06:32:19 +0000
Manifest this update: Mon 27 Oct 2025 06:32:18 +0000
Manifest next update: Mon 03 Nov 2025 06:32:18 +0000
Files and hashes: 1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: Ifdw2p7hdFANUhdVbLkfN+/DrCCSrt3y/U1rXMCn2H0=)
2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: xjhn9qUtE7xRbdf4fFZHDUa2ZArgvxrc59opJoY9If0=)
3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: Y2k2zpzO5L2UX1/syfcTHwfwkADI2HQTu1qn6JdDuuE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Validity
Not Before: Oct 27 06:32:18 2025 GMT
Not After : Nov 3 06:32:18 2025 GMT
Subject: CN=68ff11f3-611a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:89:47:2a:28:16:8c:c7:03:14:2e:64:a0:
85:a2:28:d9:9d:c6:8f:f0:b8:3b:94:c6:57:56:03:
24:30:31:33:81:8b:fc:bf:55:3d:9a:d7:3c:86:f9:
e6:32:a9:a6:66:5f:53:4f:92:13:8b:42:17:b3:cd:
b2:a5:8d:b4:50:d6:7b:35:66:a2:f4:18:dd:38:a5:
1b:47:f3:fd:e9:a6:12:1d:2b:25:4e:45:a0:3a:42:
e1:60:50:71:e6:97:18:6e:86:50:90:e1:28:c3:96:
e8:d9:b3:03:f4:3a:a4:b2:51:36:96:65:ce:51:b0:
22:24:d5:53:68:c6:66:bc:ad:06:eb:d5:cf:46:cf:
f1:34:a0:e8:99:17:94:82:19:88:b1:a7:aa:1f:bb:
be:9f:36:1c:e3:14:f8:be:64:55:c6:c6:35:ea:91:
53:c0:3d:47:e5:76:7f:95:16:94:5a:f4:b0:3a:77:
3f:0d:e0:6a:65:04:02:a6:f3:84:a5:f1:69:b4:8d:
08:12:6b:75:69:96:e2:4a:e2:32:b7:ff:62:f0:57:
fe:7f:b0:d4:cc:5f:c4:ae:61:4d:0e:56:44:0f:9c:
3f:c4:56:62:4c:96:b3:ab:ac:e7:fd:3a:9c:b5:48:
7f:14:26:47:f8:2e:2c:75:01:70:5b:04:fb:10:7c:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0D:76:DA:9E:54:E7:0C:A5:E5:07:63:B0:F0:B7:80:1A:91:EA:44
X509v3 Authority Key Identifier:
keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8e:fa:e3:09:bb:79:d3:c5:cf:8e:f9:c3:a6:9b:ab:4f:2a:
f4:b6:09:36:e2:81:5d:53:06:22:54:b7:5f:b3:19:a8:c6:98:
22:6b:89:a8:ed:1a:b3:72:88:ef:09:78:d3:95:ef:28:94:2a:
5d:fe:cd:58:60:12:d9:f8:98:c2:04:79:32:ab:0c:f7:3d:62:
a6:79:6b:b2:cc:6a:cc:1c:91:67:0a:84:1b:0d:7b:f3:1a:8b:
57:b2:64:63:4c:9b:92:b4:a3:eb:1b:4d:ff:5e:64:37:9a:51:
9b:ea:8c:8d:a4:cb:15:b7:6c:0b:31:27:f0:2e:cb:b4:80:95:
c3:61:28:41:0a:e5:fd:0a:6d:31:d7:ad:58:95:b8:c5:cf:ae:
63:eb:94:83:ef:54:3e:17:3b:a5:2f:63:9b:37:78:45:d1:aa:
df:e6:f9:ce:2b:8a:fd:25:da:b5:89:a1:e4:4d:fd:49:8b:d0:
72:fa:03:b4:3d:27:3a:46:9e:fe:7c:94:91:fc:e7:ad:7d:c0:
bb:0d:4b:22:40:fc:8c:b0:fc:d8:21:f8:e4:74:36:1e:c7:1d:
4d:76:db:e5:6d:b0:00:f1:75:b8:d2:7d:92:90:23:60:7d:fa:
3b:df:3a:24:7e:07:a9:f4:b7:c1:a2:df:48:a5:d0:69:de:6f:
41:4f:99:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:15:33 2025 by rpki-client