
$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
File: PwmXnYiKPadxYLPIBzfMNgDGuN4.mft (raw, json)
Hash identifier: QNP6uEqal7w+bL/xORxt8Sai5nuyFSv7V4+vDlAxPZc=
Subject key identifier: 83:D9:BA:5F:AB:60:23:AF:5E:6A:51:A6:A1:4B:EA:46:76:A3:DC:FF
Authority key identifier: 3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE
Certificate issuer: /CN=A91389E7/serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
Manifest number: A9
Signing time: Mon 11 May 2026 07:21:07 +0000
Manifest this update: Mon 11 May 2026 07:21:06 +0000
Manifest next update: Mon 18 May 2026 07:21:06 +0000
Files and hashes: 1: PwmXnYiKPadxYLPIBzfMNgDGuN4.crl (hash: LCDumfFV6xJdlCVvUjpwMSgaTiT624EPZQCCADSanoY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl
rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91389E7, serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
Validity
Not Before: May 11 07:21:06 2026 GMT
Not After : May 18 07:21:06 2026 GMT
Subject: CN=6a018363-a7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:ea:32:ae:a7:a6:81:be:16:1d:5c:71:a8:
1e:04:f6:a8:f3:71:59:6c:09:03:23:61:a5:49:28:
2d:5b:86:27:7e:1e:a6:b0:d9:a0:e9:8e:b8:76:ea:
56:c5:6c:a3:3d:9d:22:31:9c:8e:a3:16:4b:2c:e8:
ba:9c:e0:bf:e0:07:e7:69:6e:b8:58:77:03:cd:da:
82:a6:cf:bc:85:a2:19:f5:c3:90:d4:f7:47:1d:ab:
6b:44:0a:20:58:b6:99:2a:dd:51:1f:cf:4a:79:a9:
95:9e:92:a6:89:dc:5f:c9:85:f8:9f:55:71:77:af:
67:1c:c7:94:d9:b5:15:49:8d:f9:3a:79:63:9e:12:
f8:2e:29:02:2a:29:e7:7f:2b:99:ec:3c:12:b4:6d:
3d:7a:0a:db:9d:75:ac:c2:3c:f5:47:38:1f:e1:da:
00:50:5c:57:40:de:b6:4f:38:62:52:46:1f:a7:43:
e5:14:57:6d:ed:0d:0d:9f:37:1c:a7:eb:4b:90:15:
5b:dd:3d:40:be:e2:ad:d5:a0:5b:cd:8d:52:d7:57:
1f:2d:1d:5e:e7:8a:5d:db:21:78:f6:51:fa:c7:4c:
f5:0c:fe:6b:9f:2c:3c:1f:b4:ac:6a:b4:3b:22:1e:
8d:aa:ab:65:d3:ba:1c:5c:64:b1:68:2b:21:7c:fd:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D9:BA:5F:AB:60:23:AF:5E:6A:51:A6:A1:4B:EA:46:76:A3:DC:FF
X509v3 Authority Key Identifier:
keyid:3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b4:26:68:8a:f8:95:7b:27:66:b0:f3:32:99:ab:58:63:ad:
fa:14:34:c6:81:99:fb:51:30:21:c7:09:4a:43:d5:53:e1:9a:
68:79:ba:f6:64:36:6b:c3:0f:02:db:d2:52:53:7e:d7:bb:1d:
c5:53:e9:57:7d:fa:3a:cf:2f:64:e4:16:44:52:bd:7e:88:dc:
99:20:ae:1c:01:50:ec:8a:40:a8:8e:e7:57:1d:f1:31:d5:a7:
9c:27:50:e7:71:57:4f:16:72:9b:88:5d:39:29:68:1f:5d:01:
9a:d8:61:40:2c:69:c0:c9:0d:63:ad:d2:8f:31:fc:4e:10:00:
68:69:23:39:3d:13:ca:95:1e:9d:ba:16:ee:7a:07:7e:68:3a:
6e:30:82:bb:70:d6:6f:f8:f5:61:59:a6:d8:2a:62:93:c6:96:
ea:1d:f7:44:9a:24:1c:30:02:39:b3:f7:4e:86:b7:c6:09:9d:
1e:6a:9b:e0:f2:d2:12:6f:c5:83:82:f5:09:17:89:ba:fd:ea:
77:1a:e2:44:20:5f:e2:61:31:48:3d:4a:42:91:36:ef:0b:32:
ac:a1:6e:08:a3:61:e7:02:cd:c4:33:61:6c:8f:59:3d:44:c3:
b3:c5:b1:88:69:e3:b6:04:f6:52:31:47:a4:c4:6c:61:1c:a9:
9c:09:99:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:06 2026 by rpki-client