
$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
File: PwmXnYiKPadxYLPIBzfMNgDGuN4.mft (raw, json)
Hash identifier: RLMpD671uU9AvXG7K3NZukjujhfkumAfTUw+JJoGLOI=
Subject key identifier: 2D:4B:27:21:10:A1:02:76:21:2C:E1:05:76:84:C4:AD:A5:56:AF:19
Authority key identifier: 3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE
Certificate issuer: /CN=A91389E7/serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
Manifest number: 85
Signing time: Sun 01 Mar 2026 08:57:00 +0000
Manifest this update: Sun 01 Mar 2026 08:56:59 +0000
Manifest next update: Sun 08 Mar 2026 08:56:59 +0000
Files and hashes: 1: PwmXnYiKPadxYLPIBzfMNgDGuN4.crl (hash: Z38W6nox0GdSTnZmMKWaRqtP3uouNiDHB0MFRY0gdDE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl
rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91389E7, serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
Validity
Not Before: Mar 1 08:56:59 2026 GMT
Not After : Mar 8 08:56:59 2026 GMT
Subject: CN=69a3ff5b-240e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:f7:15:d4:5e:08:fe:61:55:88:07:a7:b3:
08:42:f2:d3:47:74:87:f6:ca:11:23:50:a6:e4:51:
38:15:d1:6e:65:39:bb:4a:f4:1b:93:08:7c:68:e4:
f4:3b:86:c0:3a:01:4d:74:a6:eb:0b:33:22:11:bb:
96:9b:93:7d:76:23:0f:c6:c4:62:7f:a4:e4:50:78:
5b:21:3d:ef:ec:dd:7c:8e:5b:f4:75:85:7a:cb:9a:
22:78:c2:85:a2:6d:db:45:1a:03:6e:44:31:a0:a8:
1f:cf:05:b5:51:63:45:c4:cc:32:5e:3f:d5:d9:bf:
0a:d2:f3:86:7f:61:91:47:47:dc:66:57:e5:7f:6c:
3f:45:29:15:db:8a:73:fd:4a:8b:05:92:ee:d9:82:
5b:76:22:85:52:19:f7:dd:0e:8b:98:37:6c:4c:89:
ad:a0:1b:83:ee:9d:82:64:ca:e6:60:15:37:ab:a2:
d9:40:5a:2f:67:33:65:14:47:6d:d4:16:e5:c9:60:
78:25:ac:90:de:c0:5f:3f:25:b7:f3:3b:5f:52:57:
c4:f4:f8:13:6a:60:85:a5:f8:cd:23:eb:ff:b3:2f:
a9:cc:ef:2b:75:f2:7d:ca:cc:e7:7b:b4:00:64:3b:
ec:8c:cf:5b:4c:67:6d:db:d2:64:4e:3c:a8:48:02:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4B:27:21:10:A1:02:76:21:2C:E1:05:76:84:C4:AD:A5:56:AF:19
X509v3 Authority Key Identifier:
keyid:3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:2b:d7:56:b0:c3:13:86:26:b1:dc:d8:ff:4f:e1:cf:9c:1a:
5e:50:f2:b5:99:b0:cd:ea:9a:55:8d:36:7a:cf:ab:4d:ec:9a:
05:5a:dd:6b:e4:00:26:bf:3e:ac:90:cc:02:e2:1d:67:38:29:
43:7d:0c:bf:53:39:6f:54:16:51:63:a3:2a:eb:45:4c:7c:44:
a3:cb:53:1e:e5:dc:8f:6e:5e:5b:59:96:dc:d3:b6:bd:92:1d:
b2:9d:95:89:ef:34:2d:0d:35:76:27:b5:c9:9c:b7:65:f2:7a:
88:28:0a:3a:7d:d8:e8:83:26:b9:52:2b:2e:83:82:9f:c2:d6:
d0:b2:8a:62:73:de:36:2b:15:fa:0e:f8:47:af:a5:20:bc:9b:
e8:58:b0:72:f8:79:a5:a8:d1:5a:ed:64:c4:4c:bf:ff:f5:82:
82:11:36:03:e8:8b:47:e6:07:cb:c1:ae:71:a7:0d:cc:91:8f:
b6:9d:e4:03:8e:45:0a:0f:6e:5b:ac:d0:32:ec:58:3d:f5:14:
7a:16:ae:fb:92:6d:97:09:7e:32:28:d8:5a:b7:bf:35:9a:ef:
ce:03:04:7e:8b:f8:ed:1e:56:2c:2f:1c:3b:a4:e0:de:42:0c:
9b:66:1c:6a:47:62:12:b4:d2:ef:0c:c5:e6:b2:29:35:8f:3d:
b6:ba:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:57 2026 by rpki-client