
$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
File: PwmXnYiKPadxYLPIBzfMNgDGuN4.mft (raw, json)
Hash identifier: ZCYawJMl+PeMY5RfNWWNclBvXlikTYZF6a177Hg2ul8=
Subject key identifier: 8C:AA:71:F1:28:99:0F:4B:7E:2E:4A:DB:8A:25:49:11:7A:93:06:28
Authority key identifier: 3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE
Certificate issuer: /CN=A91389E7/serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
Manifest number: CF
Signing time: Mon 27 Jul 2026 08:52:03 +0000
Manifest this update: Mon 27 Jul 2026 08:52:03 +0000
Manifest next update: Mon 03 Aug 2026 08:52:03 +0000
Files and hashes: 1: PwmXnYiKPadxYLPIBzfMNgDGuN4.crl (hash: TufojlWf/xQn3/qj1U1rdMRxALcLr0Iarm/IyifYHiE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl
rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:52:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91389E7, serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
Validity
Not Before: Jul 27 08:52:03 2026 GMT
Not After : Aug 3 08:52:03 2026 GMT
Subject: CN=6a671c33-e1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c6:13:ed:67:83:03:2c:00:7b:2f:82:dd:4d:
ad:f6:3d:95:30:ae:e6:6d:61:e5:b5:5a:22:88:55:
68:f4:ff:f5:99:c3:00:b5:05:86:fb:65:e2:8e:5b:
4a:e3:ed:62:2c:68:c5:cd:85:85:c5:bb:1e:1d:17:
12:95:9d:d1:7d:c7:70:e1:1d:13:ca:f6:07:5c:a7:
be:c0:4f:33:22:59:2a:67:6d:c3:b0:0c:84:ac:af:
e0:80:1b:26:a8:28:ae:de:15:f9:45:44:8b:6b:63:
c2:f6:02:3c:0d:aa:fc:8e:5d:42:b0:cc:99:96:ab:
d9:f0:b0:88:1b:19:e3:9d:7d:21:ea:c0:c8:13:e7:
58:c6:3a:44:9e:10:9b:bb:64:5b:f3:2d:e9:16:a3:
bd:a2:68:13:ec:d1:fd:da:d6:05:2e:0d:55:01:f1:
a7:e0:01:6e:b9:c2:71:ae:ce:98:d8:5a:d6:23:31:
01:b5:80:fd:39:9d:39:62:12:69:8f:6f:0c:ee:55:
46:cd:8c:0a:d5:a2:ae:55:71:36:ca:1c:92:a3:7f:
f1:43:c0:60:5f:83:b0:18:c3:17:14:4c:62:c4:92:
84:9c:32:05:bb:ff:52:8e:da:4c:75:5f:5c:bd:f8:
4f:d5:c1:be:f7:e1:1f:27:fd:92:20:6c:94:fa:de:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AA:71:F1:28:99:0F:4B:7E:2E:4A:DB:8A:25:49:11:7A:93:06:28
X509v3 Authority Key Identifier:
keyid:3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:dd:4c:45:cd:1d:d5:2e:55:a7:16:68:b7:da:9c:c4:ab:5f:
f0:55:b2:52:c2:76:1e:06:40:4f:7e:60:fe:09:5a:5d:fd:d1:
ef:85:5b:29:bd:9c:ea:e9:a3:29:ff:1f:cc:52:db:d2:08:ce:
46:d6:ab:57:06:47:0f:d5:3c:42:c2:2e:d8:39:05:c7:8e:05:
71:57:36:4f:e3:85:9d:c5:dc:d5:87:21:40:3e:0c:d1:10:fc:
e8:59:8e:cd:de:a3:d6:86:ed:e0:da:21:0d:54:01:c8:68:16:
cb:44:18:b3:72:81:93:5b:f1:d9:6b:a8:3a:9d:12:32:93:50:
f1:6c:dc:68:ed:da:0f:68:bf:80:ae:0b:29:e7:ff:0f:b7:4d:
2f:12:0b:bc:41:3f:a1:c5:c9:0e:57:a4:96:4d:f0:bd:14:a0:
c4:44:72:9f:3b:e3:85:46:55:6c:61:14:11:4d:d9:a1:3d:69:
5e:89:0a:d8:7a:41:30:1e:02:ab:37:a4:62:e3:94:5f:3c:7c:
99:3f:23:b0:2a:78:ac:7f:04:8a:d3:1a:27:5b:11:ee:43:80:
cf:07:33:16:67:1c:83:1d:86:89:43:f7:27:0d:d8:de:71:42:
a0:c9:54:37:3f:e0:e5:d2:72:12:59:be:4c:1c:19:44:34:de:
05:15:93:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:53 2026 by rpki-client