
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
File: AShwXWnFHg4rB4rtuZiR5_GbTR8.mft (raw, json)
Hash identifier: ruMplQ4zbY4UpuAG5Ay2iZL1eOnLW0CVlnE2Dktttvc=
Subject key identifier: 92:B7:DA:62:22:81:C5:92:DA:F3:C6:B7:72:52:D0:49:E5:EE:5B:06
Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F
Certificate issuer: /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F
Certificate serial: 0C71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
Manifest number: 0C45
Signing time: Fri 12 Jun 2026 18:45:36 +0000
Manifest this update: Fri 12 Jun 2026 18:45:35 +0000
Manifest next update: Fri 19 Jun 2026 18:45:35 +0000
Files and hashes: 1: AShwXWnFHg4rB4rtuZiR5_GbTR8.crl (hash: xuc5IzpXHnk1Oh5CwL1aKaOhTSbuNQMqiiZluaDG1jk=)
2: E85B23282DF211EAA63F5D60C4F9AE02.roa (hash: EuY5ohXxwCb20yL/oZ+Bf40RR9HQ+u8RzxEp5n6p+No=)
3: 71E30CDCC4ED11EAA1C5766AC4F9AE02.roa (hash: 7N0LlMCapbNJ9KXikjeWXJKbiREpp9frRRVKC1Mylhc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl
rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F
Validity
Not Before: Jun 12 18:45:35 2026 GMT
Not After : Jun 19 18:45:35 2026 GMT
Subject: CN=6a2c53d0-3d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:17:a0:9f:e2:e4:6f:83:8f:66:69:f2:98:
cb:71:fa:3d:b8:11:6d:3c:c5:0d:7d:69:52:fd:05:
9e:eb:2c:f1:47:07:c6:c6:d5:77:4d:7f:5d:fc:9e:
ba:1b:c0:ab:12:8e:15:dd:97:81:a3:b4:0e:17:9f:
15:64:b3:ee:01:60:b3:ac:54:59:42:90:e0:57:f8:
1e:77:4d:71:68:a7:2d:74:84:c4:51:ad:63:ad:56:
5c:24:f1:fc:9a:9b:d5:40:71:5c:14:0b:c4:37:7e:
db:8a:cc:cb:87:d7:a7:b9:73:f4:6e:4f:3e:24:8a:
72:f2:77:5e:b4:0a:1f:41:58:d7:ce:ad:7f:03:c7:
f0:72:7d:53:f1:53:c0:62:3d:84:e2:39:c5:28:08:
24:77:5d:d2:2c:74:89:f3:1c:3e:a5:a1:30:a9:4d:
d9:e6:61:fe:3f:1a:ec:68:2e:f8:32:20:5a:d5:f9:
ea:11:22:cb:d5:af:fb:c1:7d:ff:a9:34:3b:c4:13:
80:d6:9d:2f:dd:a4:16:19:e8:18:4f:db:7e:00:9a:
7e:84:b3:1a:90:8c:b8:90:90:cc:11:e4:8e:f0:da:
d2:5e:61:12:44:2d:8b:d7:85:e3:f8:29:df:a6:65:
97:4f:43:e7:7e:bf:75:70:40:3e:73:fe:49:28:e8:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B7:DA:62:22:81:C5:92:DA:F3:C6:B7:72:52:D0:49:E5:EE:5B:06
X509v3 Authority Key Identifier:
keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2d:d5:46:0b:47:7a:d4:60:3a:f4:ca:bd:26:3f:16:d7:ac:
36:9f:e4:6a:52:49:d8:0f:8e:3a:08:05:c8:19:b7:b9:38:65:
72:41:b2:07:26:52:d1:95:a0:57:38:10:98:21:de:9c:71:58:
49:9c:ef:61:38:97:ec:95:87:8e:57:89:28:e8:9d:fc:01:96:
c1:11:87:98:02:5d:9e:ce:4a:53:32:05:5a:d0:66:ce:2d:51:
50:6a:30:68:6a:8d:96:e2:bf:0c:e1:93:63:6f:ad:58:dc:07:
77:60:19:bc:cf:f4:8c:f5:db:0a:cc:78:4c:30:bc:17:ef:e1:
e2:fc:23:d0:c1:4d:b6:54:bd:1c:09:97:d8:7e:2b:35:a1:b4:
66:b9:fb:50:7a:ed:be:68:ab:02:f2:7d:01:0d:25:5c:61:44:
e5:46:f6:7a:e5:35:37:6c:db:41:a7:1c:6e:b0:1d:3d:2a:4f:
f3:f0:41:e3:4f:6c:3e:ce:93:1a:0c:63:15:3c:7b:3d:02:6f:
52:b4:43:a2:2e:42:1d:57:08:63:e9:8b:0d:d8:ad:d7:45:60:
4d:6d:79:c5:60:8c:f7:ce:e1:a8:f0:08:59:dd:aa:55:75:de:
ce:7a:5b:f4:14:a0:37:80:27:32:2b:83:cf:5b:80:1a:f9:2f:
e9:6a:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:51 2026 by rpki-client