
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
File: pWEUadKee9PIXTGAtycy6qt6-5Y.mft (raw, json)
Hash identifier: zktQZNoID07CRUvoObhF/mNtufP+TE7cVMQ3bXUrGME=
Subject key identifier: BF:C4:6C:6D:5F:7D:54:38:AC:9C:21:F2:71:B0:20:F2:D0:10:35:CE
Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96
Certificate issuer: /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
Certificate serial: 049A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
Manifest number: 0492
Signing time: Thu 23 Jul 2026 00:51:23 +0000
Manifest this update: Thu 23 Jul 2026 00:51:22 +0000
Manifest next update: Thu 30 Jul 2026 00:51:22 +0000
Files and hashes: 1: pWEUadKee9PIXTGAtycy6qt6-5Y.crl (hash: O6XbmI1/yXCRXatyasXqnygbh8msURlVlf/SRoO+76Q=)
2: F67BB6E890AB11ECAB81252FC4F9AE02.roa (hash: 8pQQGYfUUBzCIciN0c19QppTw2ZQOUtkh3E6ZoV8hjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl
rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1178 (0x49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146BA1, serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
Validity
Not Before: Jul 23 00:51:22 2026 GMT
Not After : Jul 30 00:51:22 2026 GMT
Subject: CN=6a61658b-9308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:47:3a:e5:1a:f4:f2:e7:6c:aa:f0:87:ac:
b7:04:df:12:b4:7a:c4:0b:1b:d1:9d:48:fa:9f:65:
0f:ea:97:d8:a3:94:e3:2d:d6:01:a7:bf:23:77:38:
52:a8:32:0d:c8:3b:f2:51:3c:7b:c9:37:1f:fd:ab:
f0:08:d5:4c:dd:76:ef:b1:4b:2b:9c:05:17:9e:17:
aa:48:be:92:5a:83:ef:37:1f:b4:6b:b5:64:38:60:
4f:d7:90:ee:e0:b9:48:25:f2:1c:ec:db:2d:59:2c:
e6:a7:b7:d7:3e:33:28:7f:2a:99:bb:ff:30:8d:2a:
78:3a:c4:b1:65:4a:fe:49:31:f1:08:d2:c0:f1:84:
a8:81:9c:df:38:7b:f2:3d:c5:0e:36:97:10:e6:67:
33:93:28:f4:23:72:51:8f:40:43:41:3c:26:73:ba:
cc:93:df:5a:74:35:cf:80:49:4d:a4:41:4d:2f:13:
8f:11:4b:e0:15:a5:ef:58:09:b9:db:32:fa:cf:0a:
ba:2e:18:a0:9e:06:c4:ae:4c:21:ad:ca:d7:be:df:
58:0b:f6:cd:01:c0:86:84:20:e8:f4:f0:ce:af:30:
59:11:70:07:ed:d2:e9:dc:cc:1e:bd:f5:d9:2d:54:
d9:95:9b:a8:86:4d:7a:91:db:9a:5f:03:05:0f:90:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C4:6C:6D:5F:7D:54:38:AC:9C:21:F2:71:B0:20:F2:D0:10:35:CE
X509v3 Authority Key Identifier:
keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:55:b8:32:25:b9:ee:7c:f6:70:82:da:4b:be:27:5d:aa:fb:
ee:4d:20:08:2b:aa:93:e4:fe:7b:11:bb:c7:6b:23:66:e4:4c:
7c:dc:67:27:10:f9:b8:6c:19:5a:5e:31:17:f6:99:74:ff:43:
15:6a:da:5e:b0:ce:33:e1:ee:70:4f:ee:eb:eb:e5:3c:f2:40:
3a:35:93:03:20:58:87:2e:ed:7a:c2:be:74:eb:bf:f0:ab:0d:
62:82:dc:1f:47:eb:7c:ea:8d:57:d5:61:99:5b:59:37:95:4d:
d0:f6:a1:3c:31:a5:d5:3e:f1:1d:06:95:8c:53:1f:75:5e:e8:
34:2a:4e:b2:ab:e3:72:2b:26:f0:1a:4a:8d:2a:ab:42:65:a7:
b8:d2:54:cf:57:92:41:c7:13:0d:ce:cb:9c:f5:cf:b9:e3:df:
b7:7b:a7:aa:7c:ae:8a:59:00:df:ce:97:02:db:40:6b:c2:89:
df:ab:82:ed:ff:69:da:93:c2:aa:9a:09:1c:98:03:28:02:8e:
53:78:ae:e3:1c:b6:af:23:50:7e:6b:54:23:ec:b1:10:56:bf:
9e:9b:de:d2:79:05:6b:44:8c:a4:48:8e:a8:85:df:7d:ea:ec:
26:02:13:ab:18:ad:31:b2:21:90:8a:66:f2:be:fe:4d:16:ad:
ec:8f:e0:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCQTExMTAvBgNVBAUTKEE1NjExNDY5RDI5RTdCRDNDODVEMzE4MEI3MjczMkVB
QUI3QUZCOTYwHhcNMjYwNzIzMDA1MTIyWhcNMjYwNzMwMDA1MTIyWjAYMRYwFAYD
VQQDEw02YTYxNjU4Yi05MzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyW1HOuUa9PLnbKrwh6y3BN8StHrECxvRnUj6n2UP6pfYo5TjLdYBp78jdzhS
qDINyDvyUTx7yTcf/avwCNVM3XbvsUsrnAUXnheqSL6SWoPvNx+0a7VkOGBP15Du
4LlIJfIc7NstWSzmp7fXPjMofyqZu/8wjSp4OsSxZUr+STHxCNLA8YSogZzfOHvy
PcUONpcQ5mczkyj0I3JRj0BDQTwmc7rMk99adDXPgElNpEFNLxOPEUvgFaXvWAm5
2zL6zwq6LhigngbErkwhrcrXvt9YC/bNAcCGhCDo9PDOrzBZEXAH7dLp3MwevfXZ
LVTZlZuohk16kduaXwMFD5DKuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/EbG1f
fVQ4rJwh8nGwIPLQEDXOMB8GA1UdIwQYMBaAFKVhFGnSnnvTyF0xgLcnMuqrevuW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkJBMS82M0I0RUE5ODkw
QTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5UElYVEdBdHljeTZxdDYt
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BXRVVhZEtlZTlQSVhUR0F0eWN5NnF0Ni01WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkJBMS82M0I0RUE5ODkwQTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5
UElYVEdBdHljeTZxdDYtNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMVW4MiW57nz2cILaS74nXar77k0gCCuqk+T+exG7x2sjZuRMfNxnJxD5uGwZ
Wl4xF/aZdP9DFWraXrDOM+HucE/u6+vlPPJAOjWTAyBYhy7tesK+dOu/8KsNYoLc
H0frfOqNV9VhmVtZN5VN0PahPDGl1T7xHQaVjFMfdV7oNCpOsqvjcism8BpKjSqr
QmWnuNJUz1eSQccTDc7LnPXPuePft3unqnyuilkA386XAttAa8KJ36uC7f9p2pPC
qpoJHJgDKAKOU3iu4xy2ryNQfmtUI+yxEFa/npve0nkFa0SMpEiOqIXffersJgIT
qxitMbIhkIpm8r7+TRat7I/gGw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:09 2026 by rpki-client