
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
File: PShwiOOGgqTkudgoRQszZr3q1d0.mft (raw, json)
Hash identifier: /YIHK5sLBmF5Z4a3S1BftMU6WYEyepSY+80bcirbiRU=
Subject key identifier: 5E:D2:B4:52:E8:4E:35:7D:C7:7F:AE:CF:70:3F:56:E9:E4:1C:B6:50
Authority key identifier: 3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD
Certificate issuer: /CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
Certificate serial: 0D1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
Manifest number: 0D07
Signing time: Thu 24 Sep 2026 18:21:07 +0000
Manifest this update: Thu 24 Sep 2026 18:21:06 +0000
Manifest next update: Thu 01 Oct 2026 18:21:06 +0000
Files and hashes: 1: PShwiOOGgqTkudgoRQszZr3q1d0.crl (hash: 8z2PNqSSgqOTVFiTYlMKR6VTD30kVoFzV9/8jZiaEzU=)
2: 7716938A416211EB9B0F3C54C4F9AE02.roa (hash: JsMxuAz2clvL8td5dPv4MoycNcApjVpvYRYlrs8BPh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl
rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3354 (0xd1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F02EA, serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
Validity
Not Before: Sep 24 18:21:06 2026 GMT
Not After : Oct 1 18:21:06 2026 GMT
Subject: CN=6ab56a12-43c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3d:90:d0:9e:3b:31:0e:f0:eb:4c:e4:89:93:
39:6d:9e:4c:f8:0f:14:c6:45:b9:c8:ce:4b:44:b8:
8f:02:d8:71:ab:36:24:a9:5f:b2:cf:74:23:27:e4:
da:c4:b1:e7:38:85:81:ac:0e:ea:a1:91:fc:48:1d:
f1:0b:7f:a5:29:37:6f:04:b5:9d:5d:7e:6b:b5:91:
60:88:91:e9:44:4b:8b:63:13:d8:95:d7:da:fd:67:
39:91:6c:77:b9:c1:f4:22:1f:e7:d4:a2:69:38:cd:
f0:4c:d3:de:12:96:a6:57:c2:09:c6:95:d0:ea:c3:
8e:74:9d:f5:ca:92:9b:29:3a:31:be:3f:72:27:b5:
58:f7:01:c2:4f:7a:15:0b:71:39:5c:ac:c1:c6:ba:
47:ae:2b:c8:85:96:e2:61:f9:e5:c6:05:7f:6e:e4:
16:32:8b:a2:fa:63:62:fb:81:50:fc:e3:5e:3f:6c:
3f:b1:d3:9f:04:13:95:57:56:50:7d:be:29:c2:b5:
25:d6:51:66:d1:b7:fd:3d:ab:b9:81:8e:d7:ab:d0:
b4:c5:ae:41:96:dc:b9:92:eb:64:dd:ce:fd:52:f5:
3d:56:5d:4c:4b:2f:e7:2a:0f:79:42:d4:9a:f6:d6:
ba:45:ea:d2:61:7f:e8:6f:b4:fd:28:fd:89:ae:f4:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D2:B4:52:E8:4E:35:7D:C7:7F:AE:CF:70:3F:56:E9:E4:1C:B6:50
X509v3 Authority Key Identifier:
keyid:3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ce:47:f9:8a:ad:04:f2:29:e9:a4:34:ea:6d:3b:e1:a1:7d:
35:64:13:d0:78:e3:9a:e9:e4:65:9f:00:1d:af:a5:c4:7f:78:
11:47:77:71:3e:34:d5:6d:23:cc:32:34:04:33:c5:9a:11:73:
f8:80:0a:f0:82:a9:e0:07:98:a7:ab:b2:b4:04:04:74:46:f1:
be:ba:3a:58:a9:d6:8b:d2:33:69:bd:63:79:9f:33:21:01:dd:
c5:c5:aa:df:6e:96:60:d4:0b:0b:cd:84:c6:bd:77:ab:98:31:
0d:e0:bd:d5:1f:2f:e8:30:f1:95:9c:4a:7c:20:3c:45:95:e2:
a3:33:9d:0c:83:06:80:67:3c:d4:14:49:4f:48:9a:0c:62:8c:
1a:c9:37:35:82:fa:86:24:44:99:49:00:ae:d3:f8:af:3c:78:
aa:2c:ee:78:f4:9e:cd:43:2e:b7:1c:94:a8:21:d3:38:90:d3:
7a:5c:93:b6:04:2a:9f:b8:70:4b:de:79:78:70:c1:44:c9:85:
37:66:f0:c2:45:75:1d:6a:18:d0:c7:0a:65:94:83:f8:6a:eb:
d0:d5:90:cf:fd:21:d0:b2:3d:b1:63:04:1d:96:61:40:28:da:
71:57:0c:55:29:5e:a0:d3:e1:7a:af:e9:42:b1:e7:4a:c7:66:
db:ac:cf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:53:07 2026 by rpki-client