
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
File: PLw5Tr9aIgmw6yx0fD_wBratGds.mft (raw, json)
Hash identifier: WM++vVc7TUfMd9foAtAEjfJ5JHF+Knh9MlhpQTqne8w=
Subject key identifier: E7:4B:0E:2F:CE:BF:4D:A4:9C:8A:8F:7E:D0:DF:3D:00:BB:8F:9B:AE
Authority key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
Certificate issuer: /CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Certificate serial: 01ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
Manifest number: 01EA
Signing time: Sun 01 Mar 2026 04:04:16 +0000
Manifest this update: Sun 01 Mar 2026 04:04:16 +0000
Manifest next update: Sun 08 Mar 2026 04:04:16 +0000
Files and hashes: 1: PLw5Tr9aIgmw6yx0fD_wBratGds.crl (hash: QaoTVSq1963IZjhtIiSQR4LTVU4uNHbXKsKgbUIGS7U=)
2: 98B1A08E256211EEB175EF31C4F9AE02.roa (hash: f/XfH+fCVff7PA8nldVD7NmbtLtb1i0+sniLXngDEPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8E1F, serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Validity
Not Before: Mar 1 04:04:16 2026 GMT
Not After : Mar 8 04:04:16 2026 GMT
Subject: CN=69a3bac0-a57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:93:6a:5f:42:46:e5:31:89:ec:5a:b9:df:27:
f4:25:a6:cc:c0:d0:c9:f6:7c:90:dc:14:e3:e2:a8:
38:3b:4f:a9:27:16:d4:49:7a:c2:e7:b5:42:6e:97:
37:7f:bf:b4:eb:4f:76:9d:75:d2:0a:8b:f7:92:75:
36:2f:96:45:c2:fd:fc:24:a0:7d:a9:33:ff:bb:77:
ec:f8:a1:b4:6a:46:00:d3:49:c8:48:ca:e5:98:92:
c9:d6:a9:c2:31:b1:63:6e:8e:85:8f:81:69:3d:fe:
df:26:b6:f9:cd:9c:77:4d:33:35:4f:12:a1:a2:28:
96:4f:14:63:62:57:b8:85:f3:7c:27:c2:98:fd:eb:
08:c1:49:8d:e5:3e:af:15:78:ff:a9:73:9a:45:91:
3a:11:56:4e:c2:e5:22:65:51:f7:da:d3:9c:25:14:
cf:2a:f6:3b:a5:99:bc:e3:9b:42:dd:9f:3a:78:0c:
ba:a1:4e:4e:33:93:ac:3d:eb:95:51:61:c3:d3:eb:
db:96:85:75:c5:92:15:17:a8:c3:d3:73:b7:9f:51:
bf:a1:35:5c:90:fb:e6:7b:d8:18:f6:30:93:91:f1:
63:5f:20:05:8b:c0:03:6a:d2:b5:eb:e4:f9:6b:b2:
fc:a1:42:16:6c:27:ee:1b:a5:65:0c:2e:11:55:bd:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4B:0E:2F:CE:BF:4D:A4:9C:8A:8F:7E:D0:DF:3D:00:BB:8F:9B:AE
X509v3 Authority Key Identifier:
keyid:3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:40:d5:ef:41:77:5e:b9:16:6a:8e:f1:ff:e6:c8:9b:64:81:
02:2b:f4:70:f1:68:14:28:dc:0d:cb:4a:34:f4:fb:3f:be:6b:
39:bb:16:25:94:66:7c:53:77:3a:30:9a:cd:37:0b:8b:26:50:
77:12:e6:40:27:cc:41:3b:2d:6c:3c:e5:95:f3:b0:c0:b2:fc:
c4:8e:43:be:9b:da:f7:a9:1c:45:7f:ae:b2:3b:7b:59:5c:5a:
92:20:45:ee:f8:38:80:db:a1:26:a2:dc:aa:41:2e:b0:72:d0:
57:00:44:ac:e6:8d:61:07:85:56:b2:fe:92:6a:cf:7c:0d:43:
09:fa:9d:c8:85:6c:5d:2a:51:95:b7:95:17:db:4c:70:2b:46:
b0:8a:ea:58:1e:a2:c4:bb:cf:92:bb:93:1c:9b:9e:d9:4c:5d:
4f:60:34:99:f0:ec:cb:ff:06:d9:63:09:9f:de:03:e6:c7:7a:
6a:f0:7c:33:d4:dc:bc:66:f1:e8:33:b3:0e:3a:ee:53:2a:4f:
9d:27:30:17:dd:8a:04:45:fc:1c:08:ca:91:02:44:c1:b1:ee:
0e:ef:de:c4:79:94:48:1e:a4:f5:32:78:09:fc:91:aa:d0:bf:
c2:cd:ac:38:d4:db:a9:95:d8:33:bc:9b:13:41:3b:6e:9f:3e:
ad:13:06:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:10 2026 by rpki-client