
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
File: pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft (raw, json)
Hash identifier: r1mGxMoivTC9VrezASpGagYv5dZVzaa6abgPeSY3vg8=
Subject key identifier: 10:18:03:38:AD:90:43:CE:3D:3D:C3:82:F1:06:9A:AB:50:FB:6E:1D
Authority key identifier: A4:6C:E4:2B:13:FA:3F:6B:A3:CD:9A:31:A9:F3:D1:61:26:CA:F1:78
Certificate issuer: /CN=A91D4FA2/serialNumber=A46CE42B13FA3F6BA3CD9A31A9F3D16126CAF178
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
Manifest number: 2D
Signing time: Fri 17 Jul 2026 09:59:50 +0000
Manifest this update: Fri 17 Jul 2026 09:59:50 +0000
Manifest next update: Fri 24 Jul 2026 09:59:50 +0000
Files and hashes: 1: pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl (hash: dON2r/RLEYNoSgq/0MwunGrXnh4q4vfwGlBdp+LGaqE=)
2: 40719A6C3EF211F1A0C63BEFC0833773.roa (hash: trUCovE1yXz1mUR6+zodwcoApF1cfjXUeBQcGyK6Uxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl
rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4FA2, serialNumber=A46CE42B13FA3F6BA3CD9A31A9F3D16126CAF178
Validity
Not Before: Jul 17 09:59:50 2026 GMT
Not After : Jul 24 09:59:50 2026 GMT
Subject: CN=6a59fd16-2cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:3f:70:08:c0:6b:ff:d2:12:39:4f:e1:21:
29:58:41:fb:13:20:af:91:98:92:54:ed:3f:bc:83:
e1:bd:77:35:65:18:cc:30:2f:10:20:d2:a9:18:81:
36:35:e9:58:29:a0:7f:be:ff:76:e6:08:3d:6a:f6:
8a:aa:96:52:6a:56:16:98:7c:25:ed:89:42:ec:85:
df:77:6a:bb:c4:48:22:35:39:be:1f:e9:c0:37:78:
a1:17:b8:99:13:82:69:b1:db:3e:d4:74:97:36:2a:
46:ce:de:88:e8:61:7f:e2:14:9a:42:a8:40:f5:80:
d1:17:dd:a6:0a:1a:e1:ac:21:19:a3:07:2a:ef:b7:
df:9d:ca:14:66:9c:d3:d9:d2:23:5e:e9:18:bf:76:
2f:e1:38:d3:42:68:9b:c4:58:15:26:0f:a0:be:75:
a8:c7:43:20:ae:46:a3:6a:9c:ca:ef:78:f9:ab:2a:
ed:f7:b1:74:b8:0b:c0:a5:a3:97:bd:f5:d8:4c:50:
55:67:4f:b3:ca:49:72:41:a1:21:46:d3:b2:e6:f7:
c3:42:6d:9f:14:e5:02:13:fc:2c:72:91:3f:a4:cb:
c6:35:67:9b:6f:21:5e:71:78:87:63:63:e7:3a:ca:
32:0a:8c:8f:3b:95:ce:99:81:77:f9:d6:6b:d1:89:
3e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:18:03:38:AD:90:43:CE:3D:3D:C3:82:F1:06:9A:AB:50:FB:6E:1D
X509v3 Authority Key Identifier:
keyid:A4:6C:E4:2B:13:FA:3F:6B:A3:CD:9A:31:A9:F3:D1:61:26:CA:F1:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:6b:07:5d:bc:b0:3d:46:b4:61:4b:51:8c:47:79:09:0c:ea:
67:2b:ff:6b:38:59:92:b0:59:51:12:56:16:63:25:a6:ef:e1:
88:1e:18:48:01:34:85:01:9b:38:cb:27:ba:4d:68:b5:26:63:
d9:bd:38:47:b4:67:ce:7f:9f:fc:65:ae:cd:2d:63:c5:e9:31:
f9:78:b6:f4:13:fb:14:ac:a0:6f:0d:79:80:3e:05:7b:06:4e:
1f:4a:41:da:4d:fb:5c:3b:0c:42:e5:12:cc:0d:5a:3f:53:de:
8e:fd:69:82:f3:59:42:bf:de:32:e5:fc:f5:85:de:ad:39:3e:
e3:0b:fa:50:0d:ca:e1:1d:ee:87:ac:ab:99:81:9c:30:ca:25:
42:be:87:fb:f4:ed:e4:88:a1:61:6f:4c:b7:57:90:1f:77:2c:
96:36:0c:d3:b5:75:0a:a0:5a:5d:30:d5:06:d6:67:c0:d4:07:
e2:2c:af:46:28:fc:92:71:9a:66:05:f4:f7:7f:8d:80:02:60:
18:49:2d:7f:6d:2e:6d:c9:16:32:19:3c:5f:c0:cc:c9:2e:c4:
e6:8e:12:e8:58:6d:9c:25:41:05:9b:4c:48:85:54:88:50:78:
42:f6:e3:86:b5:bc:0b:dd:4d:97:c0:66:7e:d9:09:d9:1d:c5:
a1:4e:38:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:41 2026 by rpki-client