
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
File: PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft (raw, json)
Hash identifier: Uu/CJQZ7yfPdGnBAA9AKe4XMG1Cq6afnqrmif5QInrQ=
Subject key identifier: 85:5B:5E:3B:2A:9F:73:0D:7A:1A:A0:33:37:47:C1:6E:42:CB:85:72
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
Manifest number: 9F
Signing time: Tue 12 May 2026 20:50:23 +0000
Manifest this update: Tue 12 May 2026 20:50:23 +0000
Manifest next update: Tue 19 May 2026 20:50:23 +0000
Files and hashes: 1: PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl (hash: GXuQfAD1VUDgxiKCs+tCZXzAfc4+RCcq7S4BLZ1NJa8=)
2: 348BFBC64DD811F1B0291A7FB7833773.roa (hash: tqB4oRNRKGM7SWvWmB+7agHlshH1O+OaVRVbyKicdkc=)
3: 3531B32C4DD811F1B0291A7FB7833773.roa (hash: TzIyKuejbExZUuF7ErYOpk84B2ZijSc11lqgr9GM0LY=)
4: 12A52794DD1211F0B41550BC5F6F56BC.roa (hash: poFkQcNLaPe2AFd5eZOfOml2iDaf3YW9G1N1COGbd/Q=)
5: 0228453AC5F811F08FFA5F38C4F9AE02.roa (hash: wxhbuzbWu3rbI56tYOuHWo55ZaPV1JMd62naT16Ecvo=)
6: 844A140AC5F111F08382761DC4F9AE02.roa (hash: i9mhRJ5avRniNa/Or9GSMjn28Yf76/Ztdl3z8dFyYH0=)
7: A1FA022EC60C11F08F496250C4F9AE02.roa (hash: MDzGdNCdYO5kEPXtS7TyIQqy0+x2zenoCh7GnwVkOyk=)
8: 48635696486311F19B06CCBAA3833773.roa (hash: 9dcpjl3mIgTtee6acs7h64a861IKp/WgqQdIz081Aqo=)
9: 025F9668C60A11F0AB4AE483C4F9AE02.roa (hash: ck7EdxjimXDwSiGbbik85D8DmhKPqzjo4eBl7XbzG4k=)
10: 901A806E936311F0AFC2992BC4F9AE02.roa (hash: 4jEVz1hG1/Z1VyTQpmLsIhOnSHh6bzFw7W7dBzuJBMc=)
11: 4489B3E24A7211F1B530687DA4833773.roa (hash: z1GCTMSeoTtl53x96HnbdQo08ptkoWQBqW55fFm8zso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: May 12 20:50:23 2026 GMT
Not After : May 19 20:50:23 2026 GMT
Subject: CN=6a03928f-b551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:62:5a:02:26:a8:ec:bf:bd:c7:a0:38:b5:
9f:c4:f9:68:b9:7c:52:8f:a4:7e:a4:6c:b1:1e:fc:
c4:a1:53:1c:1a:56:71:5f:cd:8d:98:42:7d:5d:e6:
3e:f5:e6:bd:ee:8f:dc:de:bc:e5:20:d1:e4:3f:b7:
67:ec:cb:f2:80:b5:c4:d7:05:19:54:a3:c1:68:5d:
1a:2d:8f:d0:68:d8:32:e9:dc:6b:53:09:9b:42:e2:
5d:ac:8d:c8:3a:e0:4f:97:45:6a:ba:9b:cb:a8:ba:
88:ed:02:0c:b9:ff:ab:72:3c:c1:53:4e:bf:4d:05:
70:26:9e:55:ff:3d:bf:0c:41:7a:07:c5:6f:0e:01:
72:8d:17:2b:e4:7b:25:1d:9f:9d:54:b2:ad:aa:1b:
0a:37:98:24:8f:87:08:d3:01:67:ef:aa:eb:d7:83:
10:fe:fb:0a:ca:c9:d1:e8:93:54:60:b2:66:a3:06:
f7:bc:11:1d:f1:d0:6f:e7:f7:24:25:8f:f1:3a:f4:
20:73:bc:63:30:ac:8e:be:c4:7f:0f:97:b5:65:aa:
66:79:28:0f:a0:b2:7f:64:27:98:20:cb:4e:a7:a8:
d4:74:1f:01:1e:82:e0:44:44:e7:b3:af:17:a0:a3:
fc:07:57:5f:dd:96:32:50:46:ba:be:f9:51:61:18:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5B:5E:3B:2A:9F:73:0D:7A:1A:A0:33:37:47:C1:6E:42:CB:85:72
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:fc:8b:91:08:2b:bd:71:0b:0e:b0:03:2b:21:b6:da:27:b8:
0f:9b:a1:cb:50:f1:ff:ba:7c:51:b8:97:22:e7:ca:4c:06:db:
2c:07:9b:4f:38:6e:d1:c7:5e:03:f0:98:8c:5f:ee:55:4b:06:
e0:34:03:5a:3c:28:de:08:4c:4d:fc:13:b4:3a:6c:40:48:a0:
ea:b4:68:82:92:40:ba:fd:79:d9:98:79:96:ef:34:27:23:16:
6f:61:37:8d:6f:52:31:d7:03:16:f8:ba:92:13:93:56:db:53:
c1:52:d8:f6:00:dd:c6:b9:81:b2:0d:11:53:ef:bd:55:8d:ad:
48:dd:85:0b:10:9f:67:22:56:32:d0:b8:5a:c7:7c:61:48:59:
93:bf:61:0d:8c:95:32:e6:ae:4a:05:23:82:9f:93:58:9f:b8:
3c:d0:a6:73:eb:e5:1f:5f:e0:b4:09:af:52:7c:72:49:b5:c8:
54:33:3a:82:76:46:0f:53:ab:26:5f:a2:44:13:ef:4b:16:d6:
f9:3e:f6:b8:0b:25:5a:76:65:d4:62:b1:c3:07:f4:ac:df:f6:
0e:b7:b1:97:6a:75:8b:4e:69:d1:73:78:13:e0:63:ea:e7:bf:
be:b1:f8:e6:b3:b2:28:fc:54:2e:96:1d:f5:71:5a:1c:00:df:
d7:45:42:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG
Mzc2OUI0REUwHhcNMjYwNTEyMjA1MDIzWhcNMjYwNTE5MjA1MDIzWjAYMRYwFAYD
VQQDEw02YTAzOTI4Zi1iNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsk5iWgImqOy/vcegOLWfxPlouXxSj6R+pGyxHvzEoVMcGlZxX82NmEJ9XeY+
9ea97o/c3rzlINHkP7dn7MvygLXE1wUZVKPBaF0aLY/QaNgy6dxrUwmbQuJdrI3I
OuBPl0VqupvLqLqI7QIMuf+rcjzBU06/TQVwJp5V/z2/DEF6B8VvDgFyjRcr5Hsl
HZ+dVLKtqhsKN5gkj4cI0wFn76rr14MQ/vsKysnR6JNUYLJmowb3vBEd8dBv5/ck
JY/xOvQgc7xjMKyOvsR/D5e1ZapmeSgPoLJ/ZCeYIMtOp6jUdB8BHoLgRETns68X
oKP8B1df3ZYyUEa6vvlRYRgdFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVbXjsq
n3MNehqgMzdHwW5Cy4VyMB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz
NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzhFNy9DNjJCMjk4NjkzNDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4
bTFjUG55WDVyZER6ZHB0TjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOfyLkQgrvXELDrADKyG22ie4D5uhy1Dx/7p8UbiXIufKTAbbLAebTzhu0cde
A/CYjF/uVUsG4DQDWjwo3ghMTfwTtDpsQEig6rRogpJAuv152Zh5lu80JyMWb2E3
jW9SMdcDFvi6khOTVttTwVLY9gDdxrmBsg0RU++9VY2tSN2FCxCfZyJWMtC4Wsd8
YUhZk79hDYyVMuauSgUjgp+TWJ+4PNCmc+vlH1/gtAmvUnxySbXIVDM6gnZGD1Or
Jl+iRBPvSxbW+T72uAslWnZl1GKxwwf0rN/2Drexl2p1i05p0XN4E+Bj6ue/vrH4
5rOyKPxULpYd9XFaHADf10VCgQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:18:04 2026 by rpki-client