
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
File: Pgw5tVhKz65BgIE4j08KlNbajgY.mft (raw, json)
Hash identifier: DZIwWFXfxZr/SePWgU+aPIFLENOtqyIOb76l3xpjL1g=
Subject key identifier: C0:8C:47:95:AA:A5:05:0F:B6:9C:C3:43:AF:02:0C:D6:0E:5A:34:9B
Authority key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
Certificate issuer: /CN=A91BD7A3/serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
Manifest number: A4
Signing time: Mon 05 Oct 2026 07:36:09 +0000
Manifest this update: Mon 05 Oct 2026 07:36:08 +0000
Manifest next update: Mon 12 Oct 2026 07:36:08 +0000
Files and hashes: 1: Pgw5tVhKz65BgIE4j08KlNbajgY.crl (hash: 3qKaYe9Ic33e2DW+a9jhsl1dqrsYXIvZdSm1j/mkmB8=)
2: 132F5C52C52511F0B4A6F21BC4F9AE02.roa (hash: +oT+l8AaeCiLhYsjOPIgCUOdYkL2JAeHR0qNvNkZXgc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Validity
Not Before: Oct 5 07:36:08 2026 GMT
Not After : Oct 12 07:36:08 2026 GMT
Subject: CN=6ac35368-6d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:af:57:be:00:4b:95:de:fc:b4:0a:97:4c:
4d:05:1a:af:95:06:27:6c:af:86:6c:75:a1:81:99:
9b:69:22:09:63:93:c9:da:1f:f6:07:59:ea:63:ae:
a6:20:9f:d6:55:87:5a:35:5c:95:39:6e:bc:c0:5b:
ba:13:df:eb:dc:f3:5d:fb:d3:03:97:56:74:ce:ec:
e3:5e:7c:b9:ac:55:bf:a3:43:4f:32:02:f2:7a:66:
d9:39:58:42:09:ff:92:6e:ec:73:63:39:68:e2:41:
32:41:de:7c:26:41:a4:33:f5:74:b7:8f:36:a7:27:
4c:46:d5:7c:57:0d:cb:0d:50:06:17:eb:d6:8b:ba:
dc:ce:85:b1:63:62:7d:cf:41:e0:fd:b6:c3:b5:58:
60:39:5a:35:35:bb:2a:c2:8e:02:43:44:cb:f9:f2:
31:03:b6:a4:cd:8a:d4:60:5a:fa:0a:88:4d:20:a8:
ce:48:a6:d1:8a:97:e5:11:e5:f9:72:28:57:58:4e:
b2:47:ae:2b:b6:d9:ec:b5:8a:45:bb:42:b2:8e:31:
8a:f8:cb:cb:79:65:76:35:7d:bf:95:11:67:b1:5f:
4e:0c:b2:e7:c3:37:e4:da:21:5a:da:86:35:7e:1e:
ef:34:87:34:e2:a4:60:dc:ac:d6:4c:0b:eb:39:48:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8C:47:95:AA:A5:05:0F:B6:9C:C3:43:AF:02:0C:D6:0E:5A:34:9B
X509v3 Authority Key Identifier:
keyid:3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f9:87:62:41:97:06:e6:d7:ff:b4:06:ad:51:87:4e:ed:39:
c2:4c:d4:ee:03:6a:a9:87:fb:e5:d4:62:36:1f:e8:8a:05:51:
bc:f9:25:b9:9a:94:99:2e:e6:e9:44:8d:71:48:09:b5:69:e1:
ad:47:ea:3f:f8:0b:11:f8:d5:60:77:2a:12:24:6a:48:57:6d:
04:c0:eb:24:9e:a2:ce:10:29:58:3d:77:3f:33:50:c9:a9:fa:
91:d1:71:cb:91:17:64:cf:f9:7c:4b:9b:51:26:c3:b4:1e:2f:
cd:8a:4a:ef:65:ff:ce:63:a3:ed:3b:8b:93:e5:f4:d8:59:de:
c5:22:c3:65:cd:d0:60:9b:5e:ac:b3:5a:fd:08:3d:2a:99:91:
f9:37:c3:7d:bf:ce:5e:8f:c0:9f:a8:ee:75:3d:c6:c8:db:7d:
a7:70:c7:21:c4:74:e8:9b:3f:da:6c:a0:da:58:77:ca:06:62:
bc:df:27:67:bb:ec:62:9b:35:1a:31:8a:0f:86:30:ff:31:d4:
ec:6f:34:32:03:b7:64:7a:01:70:fe:11:1e:8e:6d:f8:92:0d:
d8:9f:4e:f6:de:b8:43:1f:b0:60:b5:f4:de:4b:b3:2d:93:6e:
9f:2c:0e:6a:f1:4a:15:5d:76:88:1d:02:cd:ed:38:e8:70:f6:
ff:7d:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:21:03 2026 by rpki-client