
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
File: PGIfAALQYHByq7Fal4r7xa9DpVw.mft (raw, json)
Hash identifier: hXsO5QT0TtMN9cTk3zBMegIBzo8tjvvoOTZIi9fXB5M=
Subject key identifier: EF:F7:2A:45:20:22:D9:FD:97:03:24:7A:CC:9B:E2:09:AB:04:90:E4
Authority key identifier: 3C:62:1F:00:02:D0:60:70:72:AB:B1:5A:97:8A:FB:C5:AF:43:A5:5C
Certificate issuer: /CN=A91F4130/serialNumber=3C621F0002D0607072ABB15A978AFBC5AF43A55C
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
Manifest number: 72
Signing time: Tue 23 Jun 2026 08:01:59 +0000
Manifest this update: Tue 23 Jun 2026 08:01:58 +0000
Manifest next update: Tue 30 Jun 2026 08:01:58 +0000
Files and hashes: 1: PGIfAALQYHByq7Fal4r7xa9DpVw.crl (hash: uqmwoomhUo4tSFMx0QOW+58dF7ahifpqDLdoj8nfXZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.crl
rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4130, serialNumber=3C621F0002D0607072ABB15A978AFBC5AF43A55C
Validity
Not Before: Jun 23 08:01:58 2026 GMT
Not After : Jun 30 08:01:58 2026 GMT
Subject: CN=6a3a3d77-b7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:57:00:32:db:ab:0f:ea:e6:db:a8:31:25:
0c:0f:0c:92:91:fb:55:92:00:3a:ac:f0:91:a2:26:
1c:46:23:3b:b7:89:fe:b7:90:54:9d:22:5e:10:9b:
1c:37:f5:27:c7:9b:1d:bc:ba:83:7d:5b:cf:c5:7b:
16:4a:cd:9a:0a:0e:03:18:2b:43:0b:c8:53:c0:cd:
91:c1:22:85:ed:3d:96:12:90:37:2f:19:4d:b4:bd:
57:e9:da:28:58:90:8f:ca:31:ea:50:31:44:68:47:
63:55:09:ad:48:78:fe:02:fa:69:17:88:7b:8c:76:
da:ca:76:c1:a1:c1:e2:a0:22:96:99:31:50:31:bd:
20:61:61:5a:cc:c0:ba:7f:80:a8:9b:51:d5:b1:8e:
8d:f2:7b:1a:d8:c5:9e:af:fe:61:b0:4d:2a:f8:93:
6b:89:3f:b9:f9:6b:ec:2e:37:22:95:61:f3:22:9c:
12:93:15:2b:7c:ea:f0:5f:d1:c9:5b:b7:52:b2:ea:
1b:fa:32:0c:8d:c0:14:9f:be:c4:33:5b:63:88:cd:
9c:88:99:78:1f:34:52:8c:ac:67:ed:41:70:d2:f6:
be:ef:6e:6b:03:65:0e:8f:c3:23:4c:69:13:42:86:
7f:22:e7:31:99:2d:10:32:03:d7:d4:73:dd:b0:d3:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F7:2A:45:20:22:D9:FD:97:03:24:7A:CC:9B:E2:09:AB:04:90:E4
X509v3 Authority Key Identifier:
keyid:3C:62:1F:00:02:D0:60:70:72:AB:B1:5A:97:8A:FB:C5:AF:43:A5:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:c3:1c:77:04:96:99:d7:4d:e8:c1:ff:30:e0:99:ad:1e:e2:
06:03:f0:9f:f7:d3:74:76:6d:90:a0:c6:76:ed:60:fe:22:ec:
61:dd:5b:3e:b4:4c:15:13:84:e5:5f:d4:1a:fe:85:cf:99:33:
cc:ef:62:0c:0d:08:93:90:ac:6a:8b:ba:4a:85:92:c9:9f:67:
93:2a:25:de:f3:aa:4e:81:a8:08:a5:53:b3:0a:a4:e2:0d:a8:
17:b4:b8:31:6c:b4:ce:03:5c:f6:72:15:32:06:12:72:da:35:
e2:dd:ce:7f:59:59:f3:46:1c:fa:8b:02:20:6e:39:80:eb:df:
c7:95:df:ec:99:5b:13:05:23:4d:ca:c1:68:29:12:30:ab:a4:
cf:f6:73:b2:c3:e1:01:bd:d8:5a:57:7b:ba:1a:3b:3d:66:c1:
76:38:c2:95:63:06:35:90:f7:64:20:37:60:c4:97:bb:5a:36:
f2:35:42:ca:7b:bb:9e:f0:73:97:fc:55:9b:3d:0a:73:08:05:
9d:20:8e:e1:53:6d:58:1b:eb:ca:95:03:6c:d0:90:0d:b9:e7:
59:44:06:db:e4:7b:c7:63:2e:f1:1c:43:cf:c0:22:41:51:1e:
62:3b:24:88:ea:60:9d:12:20:b4:33:ba:dc:7f:1e:29:fd:e2:
3f:78:bd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:31 2026 by rpki-client