
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft
File: PWRH1yl0gylOzsuFOl5QCTXRuNc.mft (raw, json)
Hash identifier: 7ntqD4ssmUk62AWQtBk7ojGRl8aGe/3yE3egYw1IPjk=
Subject key identifier: 80:C0:81:DB:3E:09:7C:A7:24:B4:D3:3F:4D:40:54:59:99:18:23:91
Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7
Certificate serial: 054B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft
Manifest number: 0516
Signing time: Fri 12 Jun 2026 23:42:51 +0000
Manifest this update: Fri 12 Jun 2026 23:42:51 +0000
Manifest next update: Fri 19 Jun 2026 23:42:51 +0000
Files and hashes: 1: PWRH1yl0gylOzsuFOl5QCTXRuNc.crl (hash: VpvgyIQMuK+DuKUB2eimnm8cR/TQhVTk49kTFtVG0VM=)
2: 5997A6A624E011EDAEC0E529C4F9AE02.roa (hash: kgUDwmWc1IMp1gXUMvhqWSGJV5h+vYuf4OkX4cdGtfg=)
3: 18611004B42A11EC9BD3DE42C4F9AE02.roa (hash: F7zelpLk1UD+fObDTKpqTOpRawAblSrVeJkuuPP4a6c=)
4: 793803867DEA11EC9FC67D66C4F9AE02.roa (hash: M0tXX+QlMHyjlPtQ7dwCZagDlP3SILPEeJfJgeWfgIw=)
5: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (hash: yWnDOGXeBuapUFjfel16F3nDCGyHf2soSlsW7nZ7+cQ=)
6: 27992F96832811EFA1BAAC4FC4F9AE02.roa (hash: 0q4oZUj/sR1op8iE3N1tHBskG9i5bEl+Ec/0N0iGDjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl
rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355 (0x54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7
Validity
Not Before: Jun 12 23:42:51 2026 GMT
Not After : Jun 19 23:42:51 2026 GMT
Subject: CN=6a2c997b-a972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9d:01:9c:90:67:22:c7:97:9b:37:67:f0:63:
e8:7b:b7:db:02:62:a9:92:b4:2a:71:03:24:9e:65:
cd:cf:d9:b7:a0:c3:a8:35:04:71:23:b9:0c:27:bf:
52:84:db:54:99:71:4e:26:65:7c:f8:82:05:e1:34:
48:ae:6b:c5:88:b9:66:a5:43:cf:d9:7c:5e:e4:54:
45:91:4b:37:ba:5c:23:fb:53:74:92:21:ab:42:16:
c2:7d:2a:76:c4:ab:b5:31:57:73:74:f4:1b:ae:05:
e3:44:2c:33:13:51:2b:54:c0:bc:8e:75:dd:7f:b4:
5f:6a:0b:34:48:cc:01:0d:06:fa:c6:c1:c4:bd:c2:
97:02:17:79:1d:9c:07:47:0c:15:42:6d:b8:2c:ab:
ec:94:6b:79:c8:b8:c7:91:63:56:55:10:69:5b:df:
15:e5:98:18:07:dd:b6:17:34:51:24:0b:b8:5a:eb:
75:fe:0c:f8:89:8f:85:41:49:e0:8d:e7:c5:e7:a0:
8d:0d:94:7f:98:d4:20:a2:e9:2f:7d:15:f8:d0:14:
0e:ff:bd:e4:d2:20:17:7d:29:50:f0:25:99:a4:88:
bd:1a:49:14:be:b0:e7:5e:fd:62:ef:a5:bf:b3:60:
b5:70:b9:43:dd:03:bf:b7:9b:7a:a9:1e:2b:14:15:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C0:81:DB:3E:09:7C:A7:24:B4:D3:3F:4D:40:54:59:99:18:23:91
X509v3 Authority Key Identifier:
keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:73:9a:27:6d:bf:5c:e6:05:d4:ec:a0:04:0c:f8:40:99:b4:
10:97:49:cd:a5:51:63:c0:8d:60:7e:0c:27:c7:4e:d7:93:61:
91:0d:b3:4f:d5:63:f0:93:69:ce:ab:37:e2:f9:a2:bd:d3:f9:
d1:83:3a:81:cd:9e:2f:13:e0:25:79:db:b1:1f:1e:eb:49:3e:
cb:ce:02:84:60:31:14:7b:12:d6:29:7f:f8:3b:a2:9f:2e:88:
cd:2a:59:b3:b4:ff:3e:ac:a8:e7:04:84:ae:8e:40:2f:44:e6:
f3:fd:be:3f:57:39:c0:0a:f0:fc:32:0b:68:54:5f:e4:43:f5:
03:b8:d1:92:34:0d:7a:f4:10:59:2e:fb:34:72:a8:cf:52:5d:
4b:9d:56:5f:4e:f4:bf:a6:42:82:8a:a3:38:00:cb:8a:66:b1:
87:d3:61:e9:a6:95:cb:8c:62:41:81:46:20:4f:f9:af:35:56:
2f:b7:0f:c2:e0:29:27:93:da:28:54:86:bc:9a:12:e1:cf:77:
b9:f6:8f:e3:86:9b:ac:e7:b4:43:fc:c1:f1:94:37:4e:d7:2b:
b1:06:f1:ae:1e:c2:67:c9:f9:0b:41:c8:ec:50:70:c7:8b:ee:
28:f5:83:74:48:c0:be:7e:c2:c1:4b:aa:52:4e:d2:b9:3d:87:
1f:c4:c0:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5
MzVEMUI4RDcwHhcNMjYwNjEyMjM0MjUxWhcNMjYwNjE5MjM0MjUxWjAYMRYwFAYD
VQQDEw02YTJjOTk3Yi1hOTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7J0BnJBnIseXmzdn8GPoe7fbAmKpkrQqcQMknmXNz9m3oMOoNQRxI7kMJ79S
hNtUmXFOJmV8+IIF4TRIrmvFiLlmpUPP2Xxe5FRFkUs3ulwj+1N0kiGrQhbCfSp2
xKu1MVdzdPQbrgXjRCwzE1ErVMC8jnXdf7Rfags0SMwBDQb6xsHEvcKXAhd5HZwH
RwwVQm24LKvslGt5yLjHkWNWVRBpW98V5ZgYB922FzRRJAu4Wut1/gz4iY+FQUng
jefF56CNDZR/mNQgoukvfRX40BQO/73k0iAXfSlQ8CWZpIi9GkkUvrDnXv1i76W/
s2C1cLlD3QO/t5t6qR4rFBVQWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIDAgds+
CXynJLTTP01AVFmZGCORMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC
RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1
TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5
bE96c3VGT2w1UUNUWFJ1TmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcHOaJ22/XOYF1OygBAz4QJm0EJdJzaVRY8CNYH4MJ8dO15NhkQ2zT9Vj8JNp
zqs34vmivdP50YM6gc2eLxPgJXnbsR8e60k+y84ChGAxFHsS1il/+Duiny6IzSpZ
s7T/Pqyo5wSEro5AL0Tm8/2+P1c5wArw/DILaFRf5EP1A7jRkjQNevQQWS77NHKo
z1JdS51WX070v6ZCgoqjOADLimaxh9Nh6aaVy4xiQYFGIE/5rzVWL7cPwuApJ5Pa
KFSGvJoS4c93ufaP44abrOe0Q/zB8ZQ3TtcrsQbxrh7CZ8n5C0HI7FBwx4vuKPWD
dEjAvn7CwUuqUk7SuT2HH8TA+A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:34:20 2026 by rpki-client