
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
File: PGIfAALQYHByq7Fal4r7xa9DpVw.mft (raw, json)
Hash identifier: ippvjjjplRxYdhja7bey/QwVf8WlWIWmljNZsjB4a9s=
Subject key identifier: E3:6C:A4:F2:7E:9D:1A:03:C6:9D:7A:AE:DF:4B:7A:00:2F:9C:71:BE
Authority key identifier: 3C:62:1F:00:02:D0:60:70:72:AB:B1:5A:97:8A:FB:C5:AF:43:A5:5C
Certificate issuer: /CN=A91F4130/serialNumber=3C621F0002D0607072ABB15A978AFBC5AF43A55C
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
Manifest number: 33
Signing time: Thu 19 Feb 2026 06:49:02 +0000
Manifest this update: Thu 19 Feb 2026 06:49:01 +0000
Manifest next update: Thu 26 Feb 2026 06:49:01 +0000
Files and hashes: 1: PGIfAALQYHByq7Fal4r7xa9DpVw.crl (hash: NZpbviVi6WSS4b3cefMbQ8ft8VmwipJxguhYMP8E6bY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.crl
rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4130, serialNumber=3C621F0002D0607072ABB15A978AFBC5AF43A55C
Validity
Not Before: Feb 19 06:49:01 2026 GMT
Not After : Feb 26 06:49:01 2026 GMT
Subject: CN=6996b25d-07f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:c4:1e:86:9d:86:14:27:71:f0:97:9c:89:
e2:0e:05:ba:08:5f:73:12:b2:19:21:dd:ab:75:f2:
8b:17:68:73:74:b6:8d:2e:0f:1d:14:04:1b:77:8f:
75:a2:91:e8:22:6e:82:df:ff:74:07:c8:b9:e6:fb:
88:84:0c:3b:99:de:f0:ca:5d:db:db:68:28:45:6c:
5f:56:e6:f8:b4:1c:ec:e5:b8:4b:3e:b2:fa:f7:8e:
22:26:4a:cc:99:d6:98:02:e0:56:ea:21:74:58:41:
7d:bc:d7:df:90:fc:53:e9:61:bb:d3:3c:35:ea:c3:
4d:a2:79:8e:ee:d6:29:4a:66:99:fa:47:13:b3:7e:
01:b3:f4:8a:cd:70:13:e5:b7:c9:ae:bd:b9:dd:dc:
6c:77:ce:4a:28:5a:64:83:bd:79:ae:9e:03:60:c1:
d1:42:8c:9e:bb:3c:08:cc:d4:af:9c:aa:35:91:2e:
f2:29:68:4a:9c:ee:f5:5f:ca:71:99:4b:f0:00:1d:
e2:78:76:b6:91:34:99:ce:6e:fc:8b:8a:c0:e5:f1:
a9:db:bf:23:e6:13:71:86:e1:8a:c6:2a:a4:ba:3f:
3b:86:ac:23:5d:30:e9:13:30:67:b5:85:0a:25:9b:
8f:69:d3:be:40:e5:91:b9:76:d5:3f:0f:c3:0c:92:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6C:A4:F2:7E:9D:1A:03:C6:9D:7A:AE:DF:4B:7A:00:2F:9C:71:BE
X509v3 Authority Key Identifier:
keyid:3C:62:1F:00:02:D0:60:70:72:AB:B1:5A:97:8A:FB:C5:AF:43:A5:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6f:80:fc:6a:53:c7:b0:b0:4c:c6:d1:3c:3f:68:aa:bf:ba:
be:45:af:f7:95:25:6e:33:6f:53:e3:a3:2d:2d:cb:a5:96:5a:
7c:a7:f6:b6:8e:d4:49:1f:ee:ba:15:31:c8:d2:63:26:7d:1f:
75:2b:0c:3e:2b:bf:7f:cd:d5:c8:fd:a1:aa:d2:2d:50:b1:c3:
a9:5a:ba:68:8a:78:4d:29:f5:1a:f0:23:eb:5e:b0:52:db:92:
bc:91:24:f3:b0:43:87:bf:19:4f:02:34:c3:a4:f1:39:80:b3:
a6:29:ba:0f:72:98:dc:5f:5f:b4:45:1b:6f:4d:73:78:64:4b:
2e:ab:30:e8:3a:ca:ce:22:22:ff:34:a9:54:0b:11:f5:e4:0e:
21:2c:63:00:de:70:e1:5a:82:f0:3a:d6:a1:75:ea:99:48:5e:
b2:55:3b:8c:1d:2f:77:2f:f7:41:01:dc:a4:0e:09:2b:24:7b:
56:20:73:ca:8f:54:47:a4:53:16:6e:75:80:99:4b:cc:25:a6:
8b:dd:cc:22:0c:c3:e2:a5:38:5e:7c:64:a2:77:b9:9d:b4:23:
f6:c1:52:d4:af:d9:8d:2f:61:f5:be:26:d4:2b:13:8f:bc:3e:
e6:b6:4f:37:43:6f:c9:f5:4f:38:34:28:b5:5a:ac:11:37:0c:
66:fa:44:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:20 2026 by rpki-client