
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
File: PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json)
Hash identifier: /DRtAPvYdURYae/hF0Cij0v/hE786Gd1YJjtIYALUlI=
Subject key identifier: 2D:B1:F8:A0:B5:50:D6:E3:FE:1E:00:F7:7D:4D:70:2E:87:F7:BC:04
Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
Certificate issuer: /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
Manifest number: 027C
Signing time: Tue 23 Jun 2026 02:11:04 +0000
Manifest this update: Tue 23 Jun 2026 02:11:03 +0000
Manifest next update: Tue 30 Jun 2026 02:11:03 +0000
Files and hashes: 1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: /Z/6dq1IbHUOGBALOyiaaFbdCwFFqfmwlqz/sUMUk7Q=)
2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: 4pifmUBWRDqIs1AxU08rq2Ecl41mBJPR1UbVv8BwJA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl
rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 02:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Validity
Not Before: Jun 23 02:11:03 2026 GMT
Not After : Jun 30 02:11:03 2026 GMT
Subject: CN=6a39eb38-d4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:12:65:d3:d4:ff:e9:03:66:ea:13:f7:a5:
24:55:0a:bc:7e:43:dd:9a:1a:b5:ad:15:64:2e:c3:
9d:85:02:a5:7a:44:78:ef:1d:80:ac:bd:da:14:3c:
a7:f3:5b:7f:7a:ad:49:99:7b:9e:07:ed:99:fd:83:
c6:b4:1a:3a:32:bf:80:4e:3d:0a:0f:51:ce:c8:3a:
fb:4f:0b:04:63:5f:8c:14:aa:66:c5:3e:5d:d2:a9:
48:a6:c8:98:09:05:b9:ff:f5:05:7c:16:08:64:e7:
0d:bd:f4:27:a6:62:e1:d1:19:f7:e6:22:e2:91:36:
2c:00:a4:1a:7f:b5:a5:63:76:19:1c:bb:97:43:08:
08:e0:6c:df:e8:87:49:90:93:4d:7e:47:be:2a:22:
49:e7:ec:d7:ac:c6:90:ca:61:eb:54:29:cb:4e:4d:
31:4d:5c:19:a3:2e:a6:6f:28:33:48:c2:8d:d4:b6:
a4:93:d7:82:b8:ce:04:8d:6d:cd:2d:c2:01:25:02:
7b:28:57:2f:be:2e:6f:58:cf:1c:c0:e0:1c:28:35:
76:f2:80:48:a7:d8:79:18:75:d3:92:e2:ee:ef:08:
d5:35:64:cc:a1:f2:50:82:06:82:cd:8f:b4:e0:22:
db:d2:be:69:c9:9f:ad:c8:95:b4:2f:8e:8b:57:2e:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:F8:A0:B5:50:D6:E3:FE:1E:00:F7:7D:4D:70:2E:87:F7:BC:04
X509v3 Authority Key Identifier:
keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:5f:68:c9:9a:9d:c5:0a:05:8e:e8:9c:3f:dc:d6:7a:b9:3a:
74:04:82:7d:1f:92:05:44:9b:1d:36:ed:99:9d:f4:2d:a7:0a:
92:b5:4e:b3:b8:ad:9c:38:ab:39:b8:f4:79:31:76:91:3d:6b:
20:9a:01:b4:25:5e:58:7b:53:bf:4b:bb:87:bf:ae:eb:8d:e0:
31:c8:2d:e6:27:a2:d6:47:92:b8:50:a8:27:6a:74:8f:f9:11:
29:ef:ae:67:fa:06:40:e1:74:a5:92:95:53:4f:83:93:a6:6e:
48:99:94:d9:04:5c:77:de:f2:92:69:9f:4d:ae:67:54:e7:e6:
28:3d:ea:32:e6:72:c5:6f:4e:d9:24:40:d3:7b:cc:d9:42:e0:
29:04:ae:05:bc:29:ca:28:08:58:48:22:b1:8e:e9:eb:b1:90:
aa:40:6e:1a:7b:71:6e:2f:81:5b:ab:48:ff:83:ef:00:dc:82:
61:07:8e:25:b4:18:f4:3f:ce:d5:37:85:61:30:2d:d4:a5:ff:
1c:73:fc:91:af:7e:a5:c9:9d:85:d7:de:88:28:2f:67:77:f8:
e5:e2:98:f1:1b:79:90:25:33:3c:91:fc:f7:6a:d0:29:e9:ac:
9e:75:28:74:57:0f:33:f4:dd:92:bd:9c:b0:2e:e1:42:2e:d0:
3d:e2:1c:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQyRTExMTAvBgNVBAUTKDNDNjUxNTI0QjRGOTFBMzUwRDFFQ0ZCQkE2NkNBQkQx
QjQ4RkI3QzUwHhcNMjYwNjIzMDIxMTAzWhcNMjYwNjMwMDIxMTAzWjAYMRYwFAYD
VQQDEw02YTM5ZWIzOC1kNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjbUSZdPU/+kDZuoT96UkVQq8fkPdmhq1rRVkLsOdhQKlekR47x2ArL3aFDyn
81t/eq1JmXueB+2Z/YPGtBo6Mr+ATj0KD1HOyDr7TwsEY1+MFKpmxT5d0qlIpsiY
CQW5//UFfBYIZOcNvfQnpmLh0Rn35iLikTYsAKQaf7WlY3YZHLuXQwgI4Gzf6IdJ
kJNNfke+KiJJ5+zXrMaQymHrVCnLTk0xTVwZoy6mbygzSMKN1Lakk9eCuM4EjW3N
LcIBJQJ7KFcvvi5vWM8cwOAcKDV28oBIp9h5GHXTkuLu7wjVNWTMofJQggaCzY+0
4CLb0r5pyZ+tyJW0L46LVy55TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2x+KC1
UNbj/h4A931NcC6H97wEMB8GA1UdIwQYMBaAFDxlFSS0+Ro1DR7Pu6Zsq9G0j7fF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJFMS9EQTg2QjYxNkJB
NkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdqVU5Icy03cG15cjBiU1B0
OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BHVVZKTFQ1R2pVTkhzLTdwbXlyMGJTUHQ4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDJFMS9EQTg2QjYxNkJBNkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdq
VU5Icy03cG15cjBiU1B0OFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV19oyZqdxQoFjuicP9zWerk6dASCfR+SBUSbHTbtmZ30LacKkrVOs7itnDir
Obj0eTF2kT1rIJoBtCVeWHtTv0u7h7+u643gMcgt5iei1keSuFCoJ2p0j/kRKe+u
Z/oGQOF0pZKVU0+Dk6ZuSJmU2QRcd97ykmmfTa5nVOfmKD3qMuZyxW9O2SRA03vM
2ULgKQSuBbwpyigIWEgisY7p67GQqkBuGntxbi+BW6tI/4PvANyCYQeOJbQY9D/O
1TeFYTAt1KX/HHP8ka9+pcmdhdfeiCgvZ3f45eKY8Rt5kCUzPJH892rQKemsnnUo
dFcPM/Tdkr2csC7hQi7QPeIc1A==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:34 2026 by rpki-client