
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
File: PLw5Tr9aIgmw6yx0fD_wBratGds.mft (raw, json)
Hash identifier: VFaw2po4erhXTZqIS9JGtcI9vFSpjj5m2u5ljCyCb64=
Subject key identifier: FC:CD:A2:74:81:74:87:BA:00:9B:A8:AD:CA:C2:75:D6:E4:FA:34:8F
Authority key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
Certificate issuer: /CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Certificate serial: 0209
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
Manifest number: 0204
Signing time: Fri 17 Apr 2026 02:47:33 +0000
Manifest this update: Fri 17 Apr 2026 02:47:33 +0000
Manifest next update: Fri 24 Apr 2026 02:47:33 +0000
Files and hashes: 1: PLw5Tr9aIgmw6yx0fD_wBratGds.crl (hash: 5Vyny2WwHo/BHXYo9YMoDayF42IXdS8tS/zLVJE36CI=)
2: 98B1A08E256211EEB175EF31C4F9AE02.roa (hash: QJ4e16NsI/dZu1qX0OimYIx1FzqVNlcCmqCrTv8ABDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8E1F, serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Validity
Not Before: Apr 17 02:47:33 2026 GMT
Not After : Apr 24 02:47:33 2026 GMT
Subject: CN=69e19f45-bcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:28:14:26:ed:46:ef:3c:62:87:2b:43:c4:30:
53:75:a9:42:21:65:c6:44:0e:51:1c:64:ac:9b:fe:
b1:ce:3e:d1:33:f3:e6:91:27:fa:ae:1f:f2:c9:da:
e0:f5:fb:dd:1f:a6:4d:07:96:91:77:0f:46:55:ef:
57:7e:02:aa:bd:5f:8d:57:5d:a9:c1:49:a2:4c:3d:
42:f6:91:6b:d3:ad:ed:e5:35:99:ed:38:b7:4f:58:
ef:5c:ae:35:a4:f7:8e:9b:7e:44:83:64:76:74:c3:
0b:37:45:8c:8f:0e:c8:14:b8:7b:70:9c:9d:1f:ca:
22:49:a1:b5:09:ec:a1:30:33:4c:34:b8:12:66:e8:
52:b1:1f:a1:2b:8c:4b:ca:c7:dc:de:c9:67:21:b7:
e8:92:a2:85:72:0a:8a:04:0d:a8:1d:e5:78:c8:48:
55:56:2d:aa:28:c1:14:6f:9e:1e:45:60:05:7c:5f:
82:fd:75:57:dc:1b:da:20:f3:08:e5:1d:0b:68:85:
d9:70:04:c7:21:0d:c9:00:45:6d:e5:b4:0c:06:e3:
a2:73:c8:ad:66:63:04:7d:cc:35:5f:dd:9a:44:ea:
25:9c:83:36:d7:7f:31:8d:7b:7a:1f:63:ab:67:a5:
05:d4:9d:c3:35:fd:d8:34:2f:b9:02:33:10:1d:2c:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CD:A2:74:81:74:87:BA:00:9B:A8:AD:CA:C2:75:D6:E4:FA:34:8F
X509v3 Authority Key Identifier:
keyid:3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1a:f4:30:04:f8:59:d0:f3:73:2c:99:41:b3:a6:0f:6a:fe:
be:16:a9:65:95:ab:01:d9:7d:42:29:40:55:2f:9f:eb:91:fa:
70:5e:6c:64:68:d1:f7:75:a0:c9:1d:b1:03:44:0c:aa:7e:9c:
ea:7a:81:44:6c:3d:a9:42:99:6b:22:b8:ea:76:b9:60:22:cc:
5e:18:68:20:46:c0:ba:d9:73:22:13:7f:52:cc:f4:5c:cd:a2:
f9:f5:a6:34:76:2d:8f:ab:9b:12:17:2a:77:8c:28:0e:1a:f7:
2b:81:d0:0c:bb:6e:86:62:1c:f3:94:eb:9f:42:6f:3a:c1:9c:
c2:30:36:e8:c1:98:bf:26:06:ce:5e:ac:cd:c4:37:0a:73:cc:
00:fb:d5:68:da:c6:5f:45:54:41:60:4a:19:84:d2:ac:42:88:
92:57:9c:8d:97:a9:39:f3:bf:5e:24:c3:bf:7d:01:95:03:ce:
d5:71:cb:f9:66:7c:cc:7a:89:e8:0c:88:bb:03:5b:42:7d:ea:
5b:4b:e9:3d:89:08:f1:7e:a6:9f:41:03:c9:1a:39:46:76:64:
9c:bf:d7:3f:2f:ad:88:65:7c:2e:54:5c:04:5f:f3:17:cc:7e:
5d:70:0a:35:47:a0:85:00:18:35:35:a9:bb:a0:0e:fb:8a:0d:
c4:10:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:53 2026 by rpki-client