
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
File: pwfo7Wx0uvNh3UByccajTUQCIqw.mft (raw, json)
Hash identifier: GvUd6bXulvSP8BIemQ5BrjS0dA7eyJ4w6ridmifvspQ=
Subject key identifier: 97:28:18:A1:E5:0C:10:05:72:2A:10:10:F1:9C:CE:46:91:EC:5B:88
Authority key identifier: A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC
Certificate issuer: /CN=A91D0C14/serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
Certificate serial: 02D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
Manifest number: 02CD
Signing time: Thu 23 Jul 2026 02:20:54 +0000
Manifest this update: Thu 23 Jul 2026 02:20:53 +0000
Manifest next update: Thu 30 Jul 2026 02:20:53 +0000
Files and hashes: 1: pwfo7Wx0uvNh3UByccajTUQCIqw.crl (hash: uTS76kbxDMGG0VHYsdPbXeXHgX7m8vOVUnrCJGVSIDg=)
2: 111C77744E1811EDADB36913C4F9AE02.roa (hash: 6hfUw9nQOdjVrwwSNnhQ1CXEFLWSCYmyZedcFdNSRgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl
rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 725 (0x2d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C14, serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
Validity
Not Before: Jul 23 02:20:53 2026 GMT
Not After : Jul 30 02:20:53 2026 GMT
Subject: CN=6a617a86-733c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:79:64:ad:37:65:e6:9b:b3:2c:e7:a3:b0:
b5:b3:90:0c:a8:19:f9:95:98:1f:f1:77:f4:e4:44:
ec:b2:81:66:0a:d7:cc:3a:64:6d:4b:3a:52:f2:f7:
9e:e4:53:60:33:e3:97:bb:ff:96:1b:0c:44:d7:d5:
23:e2:6d:38:be:9a:d2:1c:59:20:21:c7:6c:c4:d8:
75:bf:e4:db:48:c2:ae:70:37:0c:1c:38:fa:30:62:
96:b8:33:a2:70:a7:32:a0:50:eb:5d:bf:a2:6b:1c:
9f:73:23:e1:27:ae:76:38:a8:d3:dd:0f:02:d9:1a:
7f:f3:63:c1:ed:c0:10:62:52:c5:a2:db:eb:1a:60:
6c:7d:ac:00:77:72:70:3d:19:16:5c:79:2e:18:92:
b3:cb:ac:03:e3:95:75:89:2b:83:ab:40:06:ad:35:
6f:fe:aa:fc:68:37:6b:53:7e:2c:a9:ee:8c:9e:6e:
41:65:2e:3d:33:15:58:08:5d:35:63:14:25:a1:f7:
2f:2a:25:65:61:3f:64:02:fe:7d:fb:af:70:cf:44:
2a:b7:57:77:55:58:93:88:39:b9:ff:df:1f:95:12:
e1:36:a7:2a:3e:e2:fe:9a:93:e7:f5:4a:18:2b:86:
9f:33:73:e8:bd:fd:7e:ad:da:cb:04:eb:2b:1f:77:
6b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:28:18:A1:E5:0C:10:05:72:2A:10:10:F1:9C:CE:46:91:EC:5B:88
X509v3 Authority Key Identifier:
keyid:A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:0d:d7:5d:79:56:dd:7a:a5:5e:a4:f4:cc:3a:80:5c:7c:4d:
be:c0:25:cc:bd:9f:4c:0c:84:35:3d:71:09:cc:3b:dc:10:8f:
ca:86:40:06:4d:b6:8b:e1:5e:04:4f:1b:2a:c5:e2:96:e0:be:
f2:31:81:34:54:43:23:c9:4a:7d:2e:63:5a:ef:ec:79:f5:9f:
ad:0c:11:49:2d:f0:d8:b5:15:1b:84:74:1a:3c:4a:36:84:9e:
23:15:79:c0:14:ef:5f:a8:76:ba:b7:1f:88:9d:18:39:ea:45:
36:3a:5e:88:d5:c4:1c:a8:cc:a7:b5:a0:1d:29:09:f8:88:29:
19:24:06:67:a4:90:99:39:8c:a5:be:a7:93:81:a1:02:11:9b:
5e:30:f1:29:8d:43:c7:03:64:13:b0:f3:91:96:f6:71:96:57:
98:0d:ff:30:ce:5f:2f:0e:75:7f:9f:15:bf:3e:4a:d8:a2:3f:
67:83:ae:f3:8f:3b:d8:96:cc:76:bd:27:7b:d5:ca:e2:2e:5a:
82:37:4e:80:05:37:d7:92:49:3d:ab:4a:f3:f7:af:1d:10:42:
7e:7c:9a:26:d5:78:ec:e8:b3:d0:5d:dd:65:24:04:04:e0:6b:
16:05:a6:bb:a5:4a:6b:b5:8e:50:f1:c0:2d:3f:9a:f5:95:11:
03:27:47:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:01:36 2026 by rpki-client