
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
File: Pgw5tVhKz65BgIE4j08KlNbajgY.mft (raw, json)
Hash identifier: euPnpvX979mPPRtX4J4+pfylbICWwy9IvoX2ZRW+7H0=
Subject key identifier: 9C:AC:85:AA:F1:9F:59:73:C6:7C:90:CC:B2:E0:3F:32:F3:D7:25:2D
Authority key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
Certificate issuer: /CN=A91BD7A3/serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
Manifest number: 37
Signing time: Tue 03 Mar 2026 08:10:45 +0000
Manifest this update: Tue 03 Mar 2026 08:10:45 +0000
Manifest next update: Tue 10 Mar 2026 08:10:45 +0000
Files and hashes: 1: Pgw5tVhKz65BgIE4j08KlNbajgY.crl (hash: Nc+As/GTnrnuisk3ZISnZfOhBbmgzC1bqDrCk2gcO9Y=)
2: 132F5C52C52511F0B4A6F21BC4F9AE02.roa (hash: +oT+l8AaeCiLhYsjOPIgCUOdYkL2JAeHR0qNvNkZXgc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Validity
Not Before: Mar 3 08:10:45 2026 GMT
Not After : Mar 10 08:10:45 2026 GMT
Subject: CN=69a69785-bf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e8:bd:b4:fd:32:0c:9d:01:0c:06:1e:83:04:
e8:47:4a:72:1c:45:d5:6a:dc:82:bc:a1:d7:08:6a:
01:7b:0f:f5:a5:b1:98:17:a8:41:9e:6b:56:e4:1b:
19:06:05:56:4e:c3:68:3a:54:3e:38:61:f2:42:9d:
20:0c:0b:4d:3f:f0:cd:ca:b3:07:1b:c4:64:9c:3d:
89:96:af:37:b9:30:92:c1:8d:05:8b:61:e7:f3:17:
7b:5a:12:76:b2:17:ca:2d:02:f6:0b:3d:a3:70:ee:
58:21:d1:46:c6:0d:40:e2:79:ee:e2:51:41:58:64:
57:4d:4e:99:5e:c2:ef:cc:76:cc:8d:f5:f7:de:14:
dc:ba:71:ad:0b:2a:f8:bf:13:bf:51:59:16:61:34:
15:14:05:5a:d1:2d:ef:4b:35:3b:f5:30:4b:22:c2:
08:90:d5:cf:44:a3:95:5c:9b:35:42:88:8e:f2:c8:
29:98:60:8e:16:07:bc:57:fd:9a:42:85:1f:1a:40:
1c:28:39:be:45:04:4d:d9:22:4b:28:04:6f:13:2d:
f5:ab:f6:8d:18:f8:af:93:43:2c:7d:f9:7c:7d:cc:
f4:c2:d2:19:65:90:7c:94:12:81:7f:b6:95:8c:02:
d1:ad:b6:3f:ae:36:ac:dd:52:51:4e:6a:7f:3e:3f:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AC:85:AA:F1:9F:59:73:C6:7C:90:CC:B2:E0:3F:32:F3:D7:25:2D
X509v3 Authority Key Identifier:
keyid:3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:f0:19:f5:fc:36:d7:e5:45:42:d9:10:0a:95:4f:fd:6f:c1:
6f:c2:00:3b:09:7e:93:7e:c7:1b:53:a2:94:61:9f:77:74:1c:
c3:e8:4d:6d:ca:e8:32:a8:bc:6c:da:46:c7:b4:7f:41:2d:00:
f8:ae:29:40:52:dd:5b:69:02:ad:eb:1b:dc:9f:6a:da:b1:f8:
db:fd:7d:6c:9b:0f:49:80:06:04:a5:28:d2:62:63:ab:d5:b2:
70:23:09:b5:0d:40:09:2e:71:e0:c6:68:2c:5e:d0:25:33:75:
76:79:b7:8d:04:84:99:cc:86:cf:0c:06:8b:5a:af:53:78:73:
b3:45:2a:c5:f6:98:b0:1f:f4:df:b4:62:97:46:27:e1:7c:74:
9b:55:32:c3:c5:dc:8a:34:c9:92:0c:bb:3b:2f:4d:eb:76:a1:
bd:ee:28:c4:87:51:41:88:e2:8e:8e:c8:96:21:86:0f:e6:1e:
f4:2c:e3:22:29:a3:7f:1a:d3:2f:2a:b2:08:29:b3:ab:20:ad:
18:a8:0c:fb:5f:5a:db:95:8d:d8:5b:9e:2a:f9:a6:13:28:54:
da:ee:a0:da:b2:22:29:c6:60:c0:13:4c:00:1e:9b:28:15:4a:
75:cf:73:68:da:e9:c2:10:87:a2:de:6d:e8:84:cb:38:12:63:
41:79:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:36:16 2026 by rpki-client