
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
File: PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json)
Hash identifier: zkc805+RRcDvc+bT4ZLCnrFeBTt2bsY8CQGBdFo5dR4=
Subject key identifier: EA:9B:7A:0A:BC:EF:1D:6A:FD:C6:1C:E3:D3:60:8B:34:00:6B:A8:CF
Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
Certificate issuer: /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Certificate serial: 02BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
Manifest number: 02B2
Signing time: Wed 07 Oct 2026 01:59:13 +0000
Manifest this update: Wed 07 Oct 2026 01:59:13 +0000
Manifest next update: Wed 14 Oct 2026 01:59:13 +0000
Files and hashes: 1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: U8efWQ+yUXBa/eOWlrTZcmH3XCCXVn+M79KtuZq+tmc=)
2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: 4pifmUBWRDqIs1AxU08rq2Ecl41mBJPR1UbVv8BwJA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl
rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Validity
Not Before: Oct 7 01:59:13 2026 GMT
Not After : Oct 14 01:59:13 2026 GMT
Subject: CN=6ac5a771-f681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:32:d6:bf:c6:b2:f9:b4:df:48:8d:6a:d5:
f2:8a:58:21:3b:08:1d:cb:27:f2:8f:f3:1a:46:39:
1b:9b:14:b8:6a:d8:4a:2a:55:c8:a9:69:46:cc:2a:
22:f4:71:ed:e9:d1:c5:6c:fe:06:57:f9:bf:f6:ee:
ee:eb:47:5c:47:45:92:96:8d:79:4f:b4:b8:db:06:
ed:50:d2:4a:98:00:a1:b2:f3:0f:da:1f:c4:9b:6c:
e2:51:6c:30:20:dc:0b:8a:42:55:44:c3:13:28:53:
c4:d4:30:d8:ee:7c:a9:bb:6b:bb:50:61:61:52:03:
61:8c:a4:ac:26:ab:03:ef:ff:cf:c7:07:fb:3e:26:
9f:e6:6b:ea:eb:62:4c:f7:ae:58:8c:90:5d:74:54:
ca:57:43:2f:ce:68:bd:fe:6d:a5:ef:8a:1c:7e:ea:
90:58:bf:bb:06:7d:2f:72:ef:18:2c:e5:4d:00:19:
9a:a0:17:92:56:76:0a:ef:6a:11:00:52:98:21:fe:
93:72:1d:e5:20:2e:e0:bd:0f:54:9c:c6:14:fe:a6:
d4:fd:57:c9:df:fd:3a:cd:e8:db:04:a6:43:83:70:
24:82:00:cb:ce:21:83:97:76:37:28:53:c1:2f:23:
cc:a4:79:43:52:68:e1:74:0f:25:02:93:1b:fb:4e:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9B:7A:0A:BC:EF:1D:6A:FD:C6:1C:E3:D3:60:8B:34:00:6B:A8:CF
X509v3 Authority Key Identifier:
keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:c8:d4:df:51:e7:30:02:ed:30:dc:3a:2f:94:8d:c5:fa:ac:
86:c2:1d:cc:9f:f8:b6:70:e2:6a:10:58:ac:38:13:67:c1:ce:
42:81:af:9d:18:0c:af:f9:90:21:8d:ec:03:51:df:f0:8b:98:
1d:bf:f9:3d:2c:a4:80:ac:d5:48:bf:31:3c:4e:f6:7c:9d:6a:
d7:da:c2:cb:33:82:bb:39:ee:64:4d:ab:22:37:51:81:5f:60:
d2:11:c9:c2:7d:4b:68:c8:53:17:63:38:db:5f:da:77:71:13:
eb:41:30:b9:80:31:2d:bc:78:8e:31:c4:b5:56:0c:dd:01:74:
76:57:89:e9:95:e0:a6:1a:bb:a4:24:ad:d2:19:a6:e2:5d:8e:
4a:1d:91:75:96:51:54:e4:88:5d:07:41:08:c4:ed:df:31:05:
47:30:9f:5d:ce:57:8b:80:9b:1b:ce:af:12:3b:e4:79:86:c1:
7f:22:d0:df:2e:76:79:b0:9e:22:dc:33:78:d9:cd:8f:45:e7:
64:e0:63:a7:bc:e2:3b:95:a5:40:e4:c7:dd:a0:d1:49:22:57:
02:9b:5e:c9:1e:7f:88:ef:29:d3:f3:b1:25:3e:f5:c9:43:9a:
3b:59:46:c3:c5:1e:df:37:28:82:cb:bd:b3:97:44:8b:ed:08:
53:48:52:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:28:29 2026 by rpki-client