
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json)
Hash identifier: g6fqjJJcf8Y/S3ovZWPGkQJS9l9p4zPFTo7J+miv0Vk=
Subject key identifier: 48:16:76:90:32:77:FD:0C:DF:54:0A:CD:03:81:87:C9:4F:87:9A:53
Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
Manifest number: 0206
Signing time: Thu 11 Jun 2026 05:42:29 +0000
Manifest this update: Thu 11 Jun 2026 05:42:29 +0000
Manifest next update: Thu 18 Jun 2026 05:42:29 +0000
Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: +ccTyqsZKqzCtBofGdp71c9HbUVmu9tpwycUroTTg7A=)
2: 1D98617687B311EFB4972044C4F9AE02.roa (hash: xYBSN0t6jgjQfq0Vs3mLR1yw03FEouHpBcT56A28m1A=)
3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: yjfhbglGwJSFqMN6zxG/h3PTnwzIZZTxeRkuErtplaI=)
4: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: 2slykkHCwPvbeGF4Zx3D9JQfzEnRWOMcVvw7gilVFqk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl
rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 05:42:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Validity
Not Before: Jun 11 05:42:29 2026 GMT
Not After : Jun 18 05:42:29 2026 GMT
Subject: CN=6a2a4ac5-27c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:97:9c:87:bb:f3:81:bf:58:5f:e0:e4:e4:6d:
fa:c4:23:8d:fb:35:8b:31:0c:f5:41:a3:93:61:1a:
16:f8:01:c1:0b:a0:72:15:c5:39:f0:27:d4:a9:d5:
ba:98:72:96:27:0e:2e:e2:9e:c8:20:37:5d:43:2e:
83:67:9d:5f:7b:e1:f0:b2:89:18:37:fb:71:07:cd:
58:e0:1c:21:a9:62:8d:d0:21:d6:7b:e9:73:c8:20:
eb:81:48:2f:d0:1c:c4:7f:e4:68:31:df:76:cb:a1:
38:bd:b9:f8:f8:cd:3d:02:33:65:50:43:6f:5d:5f:
5c:04:8f:1e:c2:ea:61:36:1a:fe:26:80:7f:e8:48:
a5:95:1e:84:1c:33:42:a9:1d:e4:35:4c:ae:ad:75:
e6:b6:48:d6:09:c9:1a:65:12:c6:88:b5:93:15:55:
3e:53:3c:5c:c9:aa:a5:ee:89:58:a3:d1:07:a0:cb:
a3:f4:df:e3:38:09:db:69:08:ca:30:a2:4b:29:46:
c0:24:1d:e1:5c:14:6e:1d:59:04:7e:cc:df:fd:cf:
40:b7:96:5f:f1:5e:e1:6d:8a:5d:09:ed:ac:6d:0b:
0f:6e:05:1f:db:7f:cc:62:0d:33:64:e8:86:81:04:
21:24:35:aa:d5:0d:01:cd:c3:6b:96:98:6e:e7:50:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:16:76:90:32:77:FD:0C:DF:54:0A:CD:03:81:87:C9:4F:87:9A:53
X509v3 Authority Key Identifier:
keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:e8:df:b0:de:9a:a8:80:41:19:f9:3a:f6:0b:e5:4b:ea:67:
5f:80:4a:48:9c:9e:b9:fb:3f:0a:90:33:f1:9c:a4:87:1f:42:
02:af:da:19:74:17:13:61:7f:32:52:46:63:b9:7b:43:9c:52:
5e:8f:9b:e0:e2:71:0a:3c:c2:98:b0:c5:d9:c4:44:ac:b1:ca:
42:ef:51:a0:5b:66:88:49:e2:8b:a2:84:c6:e4:dc:84:81:bd:
52:f2:a9:cd:95:d9:a2:e6:79:af:a2:43:03:49:ec:83:d8:71:
0d:17:75:6f:41:97:1c:58:23:50:10:5b:e2:56:d6:ab:24:d2:
1f:28:10:24:7b:aa:c3:d0:dc:a9:8a:a9:28:ee:79:d4:0d:aa:
bd:c2:b6:ca:c1:a3:9a:f0:0c:6c:93:c4:0c:20:41:03:36:53:
27:bf:59:7d:50:6d:0b:59:2a:41:39:c3:df:09:90:90:5e:03:
e7:a9:da:5d:12:4f:db:cf:8b:71:aa:4e:a7:ea:80:34:e5:db:
a7:69:52:38:5c:26:19:32:e7:58:50:bd:08:99:b0:4c:5e:f9:
ae:63:42:ea:90:ee:ef:da:d2:f0:56:15:57:a4:cd:c3:6b:7f:
56:a1:6c:29:99:29:d4:79:da:7e:0e:83:55:ae:4b:41:31:0e:
41:09:e8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 18:15:54 2026 by rpki-client