
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
File: pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft (raw, json)
Hash identifier: rjolUnkNzTWvvfd9TEmOLAfVoWTI1L4UYBRdEgeEC/Y=
Subject key identifier: 5D:02:4E:D8:01:9D:A1:8A:B3:6B:0B:66:94:AB:52:93:4D:56:84:E3
Authority key identifier: A4:6C:E4:2B:13:FA:3F:6B:A3:CD:9A:31:A9:F3:D1:61:26:CA:F1:78
Certificate issuer: /CN=A91D4FA2/serialNumber=A46CE42B13FA3F6BA3CD9A31A9F3D16126CAF178
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
Manifest number: 57
Signing time: Wed 07 Oct 2026 08:43:51 +0000
Manifest this update: Wed 07 Oct 2026 08:43:50 +0000
Manifest next update: Wed 14 Oct 2026 08:43:50 +0000
Files and hashes: 1: pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl (hash: ICQ+Hakp5Mg77tMP2rkv/KAa9tcmxdLhDiOrDtvMBlQ=)
2: 40719A6C3EF211F1A0C63BEFC0833773.roa (hash: trUCovE1yXz1mUR6+zodwcoApF1cfjXUeBQcGyK6Uxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl
rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4FA2, serialNumber=A46CE42B13FA3F6BA3CD9A31A9F3D16126CAF178
Validity
Not Before: Oct 7 08:43:50 2026 GMT
Not After : Oct 14 08:43:50 2026 GMT
Subject: CN=6ac60647-6c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:24:a5:92:cb:37:c6:ff:c3:0e:0c:32:d3:
38:f9:c8:91:2c:c4:22:ca:9d:3b:e4:65:3a:93:b1:
e6:5f:3f:69:99:89:68:8e:16:b3:a0:9c:38:01:8e:
ab:ca:41:48:ed:14:21:fd:06:a5:41:74:27:a3:46:
1b:e6:ed:af:1f:4c:8e:e2:8a:58:36:9e:0a:f7:82:
f7:6f:f8:5c:02:d3:7c:93:34:d1:94:24:b7:f6:7b:
b6:15:5c:cb:74:a2:83:06:ad:19:0f:1d:18:53:b2:
ea:5f:f4:30:5d:18:d9:60:80:b8:cd:69:40:f0:00:
71:4a:e1:f4:d4:6f:b1:f7:1b:15:b9:f8:ae:4d:80:
9f:2a:ad:e0:9b:36:bc:c3:4f:18:85:67:2b:9e:e8:
8b:57:b3:b8:62:37:df:49:fa:6d:06:5e:d5:de:c5:
e1:4c:9b:20:9a:35:8b:1e:ce:24:5c:57:74:70:3b:
1b:56:6b:3b:5f:ea:19:07:40:40:b3:bd:f1:72:49:
fa:42:68:90:98:ad:8f:33:99:f0:8f:f7:b0:7b:ac:
a1:76:1e:d1:80:7d:c4:34:db:93:a0:26:32:41:9d:
e3:c7:56:4b:fb:78:97:79:e7:c1:07:fd:69:0b:03:
2e:46:fe:29:bc:95:0e:13:a3:89:19:62:ee:3d:8a:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:02:4E:D8:01:9D:A1:8A:B3:6B:0B:66:94:AB:52:93:4D:56:84:E3
X509v3 Authority Key Identifier:
keyid:A4:6C:E4:2B:13:FA:3F:6B:A3:CD:9A:31:A9:F3:D1:61:26:CA:F1:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:0d:fb:5b:16:3b:2c:86:5b:e3:4d:b3:a9:f3:e4:c9:95:b2:
95:12:30:27:9e:ec:bc:e1:63:b0:bc:48:71:24:7e:23:7e:c1:
d4:e6:58:fa:26:d4:9b:3f:3d:c2:82:4a:7e:80:47:6d:bf:0f:
0b:ca:26:3f:14:5f:50:f1:9e:16:6e:b5:21:7a:0b:6b:d4:ed:
0d:4f:01:e5:b6:1e:64:62:5e:85:a9:16:d7:51:26:ef:cd:97:
44:7c:73:14:6b:04:52:a7:24:83:aa:41:4f:35:12:aa:d7:22:
a0:b8:83:1c:c0:e6:e0:87:0c:c3:2d:a9:94:f7:72:59:44:46:
d5:15:fa:d8:a7:2e:26:e9:06:ce:48:66:51:8e:03:ce:ec:18:
02:7f:8f:a6:4d:f7:54:ff:f2:c2:2c:2c:45:e7:36:7d:8f:cb:
dd:7b:2f:87:6a:71:92:a6:ab:d0:16:98:5a:66:df:e2:fb:ed:
04:63:13:36:9e:f3:64:3d:15:a6:be:85:ca:25:18:ed:b6:e6:
77:67:43:43:fe:83:e6:0a:d5:8a:3d:8d:a0:0c:bf:8a:64:9e:
1c:03:b8:64:c1:64:e2:62:02:43:1b:a8:04:be:6a:34:f8:9d:
10:6c:a8:5b:b0:c6:40:7c:1e:b7:af:b5:79:88:58:50:6c:4c:
29:1c:9c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:36:04 2026 by rpki-client