
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
File: pBG7PJekzTyP_HCtY6ny7JaSrbc.mft (raw, json)
Hash identifier: HH26ZEKVLalz9IPa+aMcGlWq7kL/Y3bY5hXDYI7uYZ8=
Subject key identifier: EF:52:42:93:05:CD:B2:26:FE:79:72:0A:A5:DF:87:4D:9F:51:44:BF
Authority key identifier: A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7
Certificate issuer: /CN=A91EFD20/serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
Manifest number: BE
Signing time: Wed 07 Oct 2026 04:40:05 +0000
Manifest this update: Wed 07 Oct 2026 04:40:05 +0000
Manifest next update: Wed 14 Oct 2026 04:40:05 +0000
Files and hashes: 1: pBG7PJekzTyP_HCtY6ny7JaSrbc.crl (hash: 62DbVZQALxnTkajgeFsYevU8I+NtcMGoURLX7loQPHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl
rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFD20, serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7
Validity
Not Before: Oct 7 04:40:05 2026 GMT
Not After : Oct 14 04:40:05 2026 GMT
Subject: CN=6ac5cd25-6d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:6c:77:19:cf:84:72:23:63:87:2f:c2:6a:
01:dc:e6:b5:6b:2a:f1:f5:0b:dc:76:a3:dc:1d:5c:
a5:4d:58:13:f7:49:c5:6c:69:42:8c:c0:be:f2:b1:
5e:5e:30:14:63:22:fe:6e:d2:1b:92:00:06:92:ce:
e0:ab:ae:33:43:df:6f:c6:b3:9b:b4:4f:4e:55:07:
ae:04:cd:12:77:97:7f:10:04:15:ae:41:99:40:bd:
ec:b4:15:5b:6b:56:33:36:7d:2b:68:44:22:76:14:
2f:1d:ca:fe:ff:08:3a:c9:0f:de:2c:d7:68:91:7c:
ab:ce:82:64:7e:7e:48:50:ca:87:39:80:95:56:bf:
9f:47:99:e2:56:3f:61:0b:bd:4f:2d:b6:62:b0:94:
ea:be:39:db:60:ca:00:ce:95:2c:45:3f:4f:84:3e:
9c:d7:2f:0f:65:c0:5d:c6:7b:af:a8:96:fe:db:99:
59:a2:1f:db:0d:7b:3b:99:6c:0f:5a:2a:fc:b4:5e:
ee:83:3c:fa:a5:48:91:69:c9:9b:52:ac:c2:90:25:
ad:f7:87:d6:bc:c3:ed:eb:d1:bd:db:74:48:e7:84:
e9:3d:8e:ef:8c:1b:71:08:ce:d8:d5:ab:ee:aa:12:
e4:1c:a1:d1:b1:97:dd:d7:90:f6:6d:e2:7e:7c:a4:
c5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:52:42:93:05:CD:B2:26:FE:79:72:0A:A5:DF:87:4D:9F:51:44:BF
X509v3 Authority Key Identifier:
keyid:A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:86:e0:b0:cb:92:57:fd:88:e6:bf:f6:3b:5e:db:14:e3:36:
14:97:49:38:69:9e:fb:38:52:1f:98:72:b4:02:77:f9:d3:2d:
01:61:a3:7f:15:8f:14:c6:fe:42:b4:8c:8e:a0:86:b2:e3:5f:
19:91:56:9b:79:2f:67:b0:0b:f4:82:16:b1:94:c7:59:7f:96:
19:f3:5c:53:a4:c2:7c:fb:24:8a:98:2a:8f:45:ae:30:d2:08:
7b:2e:12:72:fb:4d:71:74:db:a6:d1:9e:9b:02:e0:6e:e3:95:
06:ed:06:c6:2e:eb:03:8a:35:b9:cc:21:7c:de:8c:f9:9d:71:
6e:e6:34:2d:e8:a5:d5:31:68:69:40:49:94:6b:6b:b9:f0:d5:
82:c8:96:a7:56:77:8e:5e:c5:36:3d:e8:8c:2d:8f:2d:70:2b:
02:99:ff:09:48:a6:2d:63:12:e0:2b:ce:44:c2:16:b5:f4:75:
56:4d:ec:7b:75:ad:95:52:23:a8:9b:4a:52:47:2d:98:50:de:
be:3f:c5:b2:db:8e:98:df:0e:4a:25:79:f8:0e:86:bb:be:e7:
fe:a4:45:28:fc:1c:dc:18:c2:98:73:05:1d:2d:b0:10:44:dd:
e0:c5:b2:ac:cd:e6:37:c1:f1:f6:ee:03:e5:e1:ae:54:94:d8:
84:6b:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:52:05 2026 by rpki-client