
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
File: Pgw5tVhKz65BgIE4j08KlNbajgY.mft (raw, json)
Hash identifier: vto/tOshaktV+ZBAMmt/6o3Ukarxd4fKEC6C0/iXnyo=
Subject key identifier: 8C:F5:51:0C:9C:1E:12:E1:A1:26:DF:B8:E5:0E:FB:B7:96:D1:F9:72
Authority key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
Certificate issuer: /CN=A91BD7A3/serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
Manifest number: 8C
Signing time: Wed 19 Aug 2026 08:10:28 +0000
Manifest this update: Wed 19 Aug 2026 08:10:27 +0000
Manifest next update: Wed 26 Aug 2026 08:10:27 +0000
Files and hashes: 1: Pgw5tVhKz65BgIE4j08KlNbajgY.crl (hash: 0BkAA5IIj0o1x8ADzcOSJi/xM6K/eQW19DZ+PjVqIDY=)
2: 132F5C52C52511F0B4A6F21BC4F9AE02.roa (hash: +oT+l8AaeCiLhYsjOPIgCUOdYkL2JAeHR0qNvNkZXgc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Validity
Not Before: Aug 19 08:10:27 2026 GMT
Not After : Aug 26 08:10:27 2026 GMT
Subject: CN=6a8564f4-7dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:d6:83:67:aa:03:3a:46:ac:68:ce:44:2e:
b3:51:b7:84:41:36:9d:b3:93:ec:51:59:14:77:8f:
8e:01:4d:0d:c5:b3:06:d2:6b:43:05:67:a8:05:bc:
db:2c:51:eb:ef:3b:e0:37:15:70:37:00:e3:dc:1b:
7c:fa:4c:3d:f9:ea:9b:c9:27:b7:66:74:89:8e:84:
2c:fd:19:d3:9f:d3:c1:6b:eb:83:05:00:58:b8:d0:
2b:55:f4:e8:80:2f:9d:a1:60:ee:70:88:04:fd:01:
e7:d5:8f:6d:cb:96:0e:98:27:9c:dd:52:91:34:ac:
01:65:7b:ee:c6:0e:c9:a8:d2:7b:06:33:81:6c:ca:
2a:b9:83:e1:ad:a1:48:ab:67:ca:f3:90:a2:00:3f:
80:19:6e:1d:93:1b:e1:d3:58:01:11:94:b8:53:c6:
0c:b9:e2:ec:fd:2b:82:a1:d1:2e:ed:5a:18:3f:07:
cc:26:ba:84:c4:81:cb:21:5d:fb:8d:af:e3:5b:37:
f3:db:10:fd:a6:35:43:0b:c6:c3:15:d8:8c:ed:46:
82:39:b1:20:05:34:75:fd:9a:16:81:71:71:14:80:
09:6e:d4:ee:ba:40:ff:59:5e:a0:21:ba:cf:25:a3:
6b:3a:a2:51:fd:74:78:a5:48:cf:2c:5c:6e:eb:79:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:51:0C:9C:1E:12:E1:A1:26:DF:B8:E5:0E:FB:B7:96:D1:F9:72
X509v3 Authority Key Identifier:
keyid:3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:be:0b:60:3e:0e:aa:13:2e:31:b5:60:ca:e3:d0:d2:8b:a9:
47:4e:10:fc:2e:15:41:53:ba:12:b7:cb:5e:cf:e4:2f:16:38:
1f:bc:56:09:66:3f:e4:04:26:62:d8:1c:f7:c3:36:14:b5:6a:
1c:24:ac:9d:dd:18:f7:37:b3:15:9d:4c:c7:92:a9:4b:e8:b5:
18:47:0f:85:88:0f:ed:3b:62:ba:b1:6e:e7:e0:17:9b:80:30:
76:64:81:9e:5b:c5:eb:24:c7:c5:5b:0d:ee:b3:00:5a:bf:32:
bc:bf:34:82:54:70:9e:cf:b3:4c:3e:dc:06:04:33:20:3e:77:
64:4a:44:bc:ea:00:60:18:5f:c2:19:8a:25:2a:fa:00:c2:2b:
3d:56:34:44:d9:5b:6c:82:51:b1:ca:b1:2d:a3:41:d3:77:29:
36:ea:d1:e2:32:45:f6:70:77:05:b0:df:9c:42:ce:d9:ad:09:
0f:ac:d1:4b:29:78:c2:7d:01:b8:c3:93:1c:0e:89:c8:09:8f:
d6:9f:54:a6:c6:6f:2d:7c:73:71:88:af:e1:62:7d:b0:e5:45:
7f:c1:fe:1a:08:65:fe:ad:d4:3d:e7:1b:bb:7c:6f:e0:52:ba:
c1:45:72:97:bb:ca:08:21:ad:1f:b6:be:75:50:71:1b:82:e2:
88:ec:3e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:38 2026 by rpki-client