
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
File: pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json)
Hash identifier: gG8M2mJPQgiuO1Um8evkHp+F59zxwr9XV3RwHLQmIUk=
Subject key identifier: D3:FB:8F:6E:FE:A7:47:6C:96:A8:42:B4:B4:C5:CA:9E:FF:16:DB:FB
Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB
Certificate issuer: /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
Certificate serial: 082E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
Manifest number: 0822
Signing time: Thu 16 Apr 2026 20:57:02 +0000
Manifest this update: Thu 16 Apr 2026 20:57:02 +0000
Manifest next update: Thu 23 Apr 2026 20:57:02 +0000
Files and hashes: 1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: WDRNpl0lGGLqoihLwHF/JR7aC1LBjCETBCMBwWfgGsk=)
2: A3205106142511EB8FED0427C4F9AE02.roa (hash: 8fEp2+O8zmOzV0vCI6lvkCvaOZTilKPiu1usSNMcmM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl
rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2094 (0x82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A284E, serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
Validity
Not Before: Apr 16 20:57:02 2026 GMT
Not After : Apr 23 20:57:02 2026 GMT
Subject: CN=69e14d1e-be77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:42:0a:3e:f0:3e:7c:77:85:3f:2d:2c:8e:
1c:32:1e:0f:93:b0:bc:81:9e:ea:e5:b8:b2:7a:71:
af:50:42:3e:5b:46:32:c3:58:6d:e1:9c:80:44:2a:
58:19:82:15:02:16:19:77:77:3e:9d:55:a4:c0:8d:
6b:55:de:77:95:66:a0:0b:fe:81:d3:86:ca:8e:7a:
94:6b:03:b8:4d:e4:32:c8:87:1b:a5:e2:0c:03:94:
c6:22:06:bf:cc:87:68:a5:70:08:ee:6b:77:db:47:
23:0f:a0:c9:a4:02:29:bb:2b:8a:1a:33:11:d1:23:
0b:48:92:c6:52:ab:70:0b:b4:eb:18:d5:b0:09:2e:
14:31:93:5f:a0:85:f3:01:a7:cc:27:fb:27:4d:70:
3c:d5:53:77:ac:eb:97:55:8b:f6:fd:49:6e:25:5d:
63:4e:c8:17:af:a9:36:d9:71:ef:14:8b:56:84:43:
32:bf:a6:c3:3f:d3:97:38:d8:14:b6:b4:68:10:90:
82:1d:d9:24:5a:4f:3d:36:b6:78:5e:fc:58:cb:30:
92:32:55:f8:2e:62:e4:bc:e6:20:2d:f2:7e:f5:b1:
f6:0a:32:1b:5a:dd:8a:d1:2d:fb:36:49:c5:f6:05:
2d:5f:01:d4:74:fa:25:17:64:28:90:f2:1a:68:ae:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FB:8F:6E:FE:A7:47:6C:96:A8:42:B4:B4:C5:CA:9E:FF:16:DB:FB
X509v3 Authority Key Identifier:
keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f8:15:36:03:8f:4f:a3:ed:31:f0:9b:54:8b:7a:df:7a:43:
f2:f0:b3:5a:ba:1b:3a:fd:3d:ee:73:af:dd:60:0d:7c:70:84:
e7:51:7d:bf:10:63:44:c8:c2:be:09:85:5f:3f:07:ee:cd:c5:
0f:91:f7:f1:43:53:88:03:7f:d6:bf:04:05:71:e2:c8:75:6e:
4d:60:c5:e6:c1:2a:60:0c:af:9c:ce:a3:d1:7a:c6:78:95:4e:
a7:0e:bc:c1:43:4a:5c:d8:26:e3:51:62:3d:f5:b9:b0:ae:71:
9f:b1:22:38:16:67:38:0f:f4:82:46:d1:66:5a:5b:ec:41:da:
24:75:df:b8:3c:0a:99:71:61:06:06:44:5a:72:75:b9:37:d0:
d5:86:8c:bb:17:54:53:a9:8f:9c:5e:ee:8e:44:b9:f2:44:66:
a2:77:23:7b:bb:07:88:5a:2d:dd:f0:36:e8:da:8c:1c:2c:01:
28:63:03:28:bb:1e:3d:92:33:0a:8a:14:f4:f1:88:8d:06:9e:
7a:71:bf:fb:5d:5d:09:bd:f7:2e:30:04:c8:47:88:7a:30:fd:
b1:7b:fd:ba:8f:4b:23:65:9c:b4:6e:e5:28:e4:02:2c:83:63:
e2:d8:01:97:8d:1a:58:72:79:b7:49:4a:0f:d4:c8:87:63:27:
7d:86:4f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:24 2026 by rpki-client