
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
File: pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json)
Hash identifier: loIX80+TNe81f6sAsW01YOH8+nvg4qnlvOipbNikyhw=
Subject key identifier: ED:CA:0F:38:24:AF:7C:DE:A9:EF:15:AF:0D:E3:2C:CB:AF:5B:50:12
Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB
Certificate issuer: /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
Certificate serial: 0862
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
Manifest number: 0856
Signing time: Tue 28 Jul 2026 21:20:33 +0000
Manifest this update: Tue 28 Jul 2026 21:20:33 +0000
Manifest next update: Tue 04 Aug 2026 21:20:33 +0000
Files and hashes: 1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: BJYoNiwbqCYqZE6VemWC+QAD24HDvvR4FDyq6ejZAZg=)
2: A3205106142511EB8FED0427C4F9AE02.roa (hash: 8fEp2+O8zmOzV0vCI6lvkCvaOZTilKPiu1usSNMcmM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl
rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2146 (0x862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A284E, serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
Validity
Not Before: Jul 28 21:20:33 2026 GMT
Not After : Aug 4 21:20:33 2026 GMT
Subject: CN=6a691d21-6321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:11:4b:f8:72:c7:c0:af:ac:24:19:c8:fa:
8a:2d:52:f4:cb:69:e6:21:24:71:51:f5:3c:70:91:
6b:65:cd:0f:e0:4b:16:05:de:91:1f:61:78:c4:d0:
6f:1f:a8:29:60:25:e6:f4:9d:eb:6b:bd:31:92:fb:
ab:1a:bb:2f:25:6c:1d:b2:d3:2a:d2:bd:e1:bf:31:
43:be:ed:e0:e4:0d:a4:8f:c3:db:af:8f:3f:dc:83:
cc:21:5b:1a:9f:09:13:fd:b5:63:3f:bd:38:09:3c:
be:03:a1:dc:29:3e:d5:6c:62:5a:84:a8:3c:ab:ae:
6d:3f:83:8d:89:42:1b:4e:ed:f2:a5:59:f6:e0:84:
4c:69:80:4d:e3:f5:fc:06:0b:1b:52:99:cd:09:5e:
da:d8:d9:9b:58:f1:2f:45:1a:1e:42:94:9a:05:a2:
53:6f:9b:e9:47:bc:a5:ba:10:4f:c0:e2:94:93:32:
0a:3f:cb:d8:5d:1e:de:98:cf:bc:1d:be:73:be:16:
b1:e4:e0:c6:a5:a9:99:e3:c4:ce:2b:c5:aa:f1:61:
58:43:91:25:5c:31:da:08:06:b8:16:bd:2a:f3:38:
8d:02:e3:dc:44:d3:e8:d3:56:98:50:5b:e6:76:8f:
69:ff:4a:d8:13:e0:e5:df:e8:a4:9e:c5:4e:88:bd:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CA:0F:38:24:AF:7C:DE:A9:EF:15:AF:0D:E3:2C:CB:AF:5B:50:12
X509v3 Authority Key Identifier:
keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:db:f5:7f:12:99:14:d4:83:a7:ca:64:1a:e1:ea:51:0f:3b:
6c:f5:f8:af:a9:2f:15:90:dd:aa:e9:1a:47:3c:7b:da:db:ec:
3b:8b:c3:51:6d:2f:b9:95:57:11:ef:2a:af:c0:0a:a1:96:21:
4e:14:29:7f:06:d7:c0:47:4c:02:3c:c3:ec:89:bb:83:f5:83:
f0:ba:44:1f:9d:96:6f:12:3a:a4:25:b9:63:dd:fd:66:9d:f4:
7a:2f:1d:ba:c9:8b:26:e2:66:02:62:4f:9b:fd:c9:fd:36:72:
2b:07:3f:5d:c2:97:61:4a:13:bf:6a:c4:0e:88:0c:b4:eb:46:
a8:a6:4f:1e:86:c2:70:25:1d:aa:9d:87:44:9e:a5:11:c3:75:
7c:4f:68:e9:e2:12:7b:66:40:66:42:a5:72:a6:70:9c:17:8e:
e8:dd:cc:26:1e:83:f1:65:ee:7e:7d:ea:78:51:86:2d:c0:56:
50:81:da:57:0b:9d:44:b4:5f:18:a8:93:4e:40:27:c4:9b:25:
1f:1c:c9:5d:d5:b4:5e:98:fd:73:11:54:5e:4c:4c:fc:f1:4d:
18:29:5e:2e:48:b1:e3:4f:07:f2:de:03:c5:ba:ff:29:39:af:
6d:d7:50:4c:b3:67:80:9f:03:9c:89:00:f6:d8:e0:c5:9d:cf:
bb:11:13:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI4NEUxMTAvBgNVBAUTKEE1NjcwODFEQTY2OTVERDM3QjJDMkIxQjE3QTAxQkEz
REU1OTFFQ0IwHhcNMjYwNzI4MjEyMDMzWhcNMjYwODA0MjEyMDMzWjAYMRYwFAYD
VQQDEw02YTY5MWQyMS02MzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxp4RS/hyx8CvrCQZyPqKLVL0y2nmISRxUfU8cJFrZc0P4EsWBd6RH2F4xNBv
H6gpYCXm9J3ra70xkvurGrsvJWwdstMq0r3hvzFDvu3g5A2kj8Pbr48/3IPMIVsa
nwkT/bVjP704CTy+A6HcKT7VbGJahKg8q65tP4ONiUIbTu3ypVn24IRMaYBN4/X8
BgsbUpnNCV7a2NmbWPEvRRoeQpSaBaJTb5vpR7yluhBPwOKUkzIKP8vYXR7emM+8
Hb5zvhax5ODGpamZ48TOK8Wq8WFYQ5ElXDHaCAa4Fr0q8ziNAuPcRNPo01aYUFvm
do9p/0rYE+Dl3+iknsVOiL2quQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3KDzgk
r3zeqe8Vrw3jLMuvW1ASMB8GA1UdIwQYMBaAFKVnCB2maV3TeywrGxegG6PeWR7L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjg0RS9FOTA1RENCMDE0
MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhkTjdMQ3NiRjZBYm85NVpI
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BXY0lIYVpwWGRON0xDc2JGNkFibzk1Wkhzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Mjg0RS9FOTA1RENCMDE0MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhk
TjdMQ3NiRjZBYm85NVpIc3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZtv1fxKZFNSDp8pkGuHqUQ87bPX4r6kvFZDdqukaRzx72tvsO4vDUW0vuZVX
Ee8qr8AKoZYhThQpfwbXwEdMAjzD7Im7g/WD8LpEH52WbxI6pCW5Y939Zp30ei8d
usmLJuJmAmJPm/3J/TZyKwc/XcKXYUoTv2rEDogMtOtGqKZPHobCcCUdqp2HRJ6l
EcN1fE9o6eISe2ZAZkKlcqZwnBeO6N3MJh6D8WXufn3qeFGGLcBWUIHaVwudRLRf
GKiTTkAnxJslHxzJXdW0Xpj9cxFUXkxM/PFNGCleLkix408H8t4Dxbr/KTmvbddQ
TLNngJ8DnIkA9tjgxZ3PuxETwQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:52 2026 by rpki-client