
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
File: PShwiOOGgqTkudgoRQszZr3q1d0.mft (raw, json)
Hash identifier: dDXZwOMeHzMODtUImdgCHAouDDo3Sne0FM+3/mt3PdI=
Subject key identifier: 0C:42:BA:AE:D3:12:A2:7F:80:CA:D9:8B:20:82:A8:62:4F:AD:9D:64
Authority key identifier: 3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD
Certificate issuer: /CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
Certificate serial: 0CFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
Manifest number: 0CE9
Signing time: Tue 28 Jul 2026 18:36:17 +0000
Manifest this update: Tue 28 Jul 2026 18:36:16 +0000
Manifest next update: Tue 04 Aug 2026 18:36:16 +0000
Files and hashes: 1: PShwiOOGgqTkudgoRQszZr3q1d0.crl (hash: uq5ORFu0Qcfb8Dkq9DGz6q9W4JSnEJ+78SqwKldkmfA=)
2: 7716938A416211EB9B0F3C54C4F9AE02.roa (hash: JsMxuAz2clvL8td5dPv4MoycNcApjVpvYRYlrs8BPh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl
rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3324 (0xcfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F02EA, serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
Validity
Not Before: Jul 28 18:36:16 2026 GMT
Not After : Aug 4 18:36:16 2026 GMT
Subject: CN=6a68f6a0-b7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:95:96:76:50:a8:0f:c2:79:83:84:43:c7:
16:9d:30:9a:49:83:b6:40:7f:09:16:98:66:fc:70:
ea:c0:c1:c8:f4:03:e3:3f:37:74:d9:29:d3:21:18:
db:2c:48:fd:61:71:05:6c:8b:79:9f:d7:a5:5f:9e:
9a:ba:bb:16:28:59:a2:36:53:ed:ff:80:1f:28:fd:
30:3d:d6:53:e9:37:8a:d5:fe:06:e5:fd:94:3b:a3:
86:57:54:52:ac:66:10:93:c3:2a:db:9a:a1:36:c5:
61:ea:2c:a2:3c:e5:18:49:32:c9:35:8d:4a:87:f0:
ce:3d:79:92:15:d8:0b:c8:5b:ce:76:79:14:a0:0e:
ab:85:b4:36:9b:22:09:79:52:1d:47:e3:bb:36:2a:
bd:16:3b:a6:a4:58:01:bc:0c:ec:6e:49:18:5d:18:
d6:c2:11:79:5c:64:67:fd:12:5b:1c:2d:11:a9:60:
f3:13:ee:2a:76:e3:b3:b1:ea:b3:62:93:a4:60:f0:
47:da:8c:df:0e:35:1e:36:2f:5d:78:7e:55:0a:29:
07:e5:09:10:2e:2c:04:66:ac:97:b2:ab:e1:06:fb:
d1:b1:7d:07:9e:f3:73:04:aa:00:55:34:12:55:d0:
8b:1e:8b:bc:f3:81:ee:c8:0d:0e:25:73:15:ff:ed:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:42:BA:AE:D3:12:A2:7F:80:CA:D9:8B:20:82:A8:62:4F:AD:9D:64
X509v3 Authority Key Identifier:
keyid:3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:6d:b2:61:11:5c:7a:6a:ff:10:fa:53:1b:c6:a2:e3:06:46:
bf:3b:70:5b:bc:4e:84:1c:0b:71:e9:76:84:8f:64:fa:fd:fa:
35:28:0d:4b:07:83:0c:ea:d4:75:7f:67:9d:6a:8e:75:be:46:
31:b3:80:96:a9:e8:17:ac:cb:b9:eb:51:e0:47:41:56:a0:c9:
ff:cc:f8:1e:94:57:3c:51:f9:17:df:a6:b5:dd:20:9f:c1:97:
13:68:1a:f0:da:3f:21:82:77:fa:ca:38:fd:53:49:b0:56:f8:
26:2b:c0:0d:2d:4b:6f:97:36:9b:5c:71:c8:5f:c4:3f:18:71:
c2:a8:02:63:58:18:c1:8c:9a:7a:45:32:9a:08:b4:f0:f2:58:
b2:75:1e:cb:c4:57:7b:a1:50:fc:5d:42:a2:c6:83:b4:b1:e2:
da:13:4d:0b:b3:b4:91:69:04:ef:9a:1f:34:aa:38:3a:3a:5d:
cb:b6:b0:48:ed:47:6e:5f:61:a5:3c:64:50:3a:3e:a5:8f:12:
90:38:82:80:41:8b:db:1e:51:73:3f:a5:22:8d:49:ac:09:34:
bb:9e:93:5a:ae:39:c0:2a:9a:7a:4d:1e:91:49:dd:b4:b0:89:
6e:8a:e0:7e:3e:81:e2:cf:e1:53:af:00:f0:ed:38:d2:6d:51:
8b:52:aa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:46:39 2026 by rpki-client