
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
File: PwmXnYiKPadxYLPIBzfMNgDGuN4.mft (raw, json)
Hash identifier: 0vhIRDGOas+9tzc8Qx7BcAv17/4BIoGFQ7EMPxhMM0c=
Subject key identifier: 5B:A1:16:7A:AD:22:FC:74:60:AD:C3:FC:E3:8B:46:07:89:5C:0E:52
Authority key identifier: 3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE
Certificate issuer: /CN=A91389E7/serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
Manifest number: F5
Signing time: Wed 07 Oct 2026 06:48:47 +0000
Manifest this update: Wed 07 Oct 2026 06:48:46 +0000
Manifest next update: Wed 14 Oct 2026 06:48:46 +0000
Files and hashes: 1: PwmXnYiKPadxYLPIBzfMNgDGuN4.crl (hash: 35x0mAws/EvH5rp5fVOUN/RCgIPKwbbayCKnBqYay/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl
rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91389E7, serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
Validity
Not Before: Oct 7 06:48:46 2026 GMT
Not After : Oct 14 06:48:46 2026 GMT
Subject: CN=6ac5eb4e-c796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:48:c9:ab:f6:16:ad:d3:28:d3:a7:76:1f:
ed:6f:61:d0:a6:e6:b6:0a:a7:65:0f:76:1e:4c:1a:
89:b6:d5:30:10:1b:2c:38:04:7a:12:02:2c:e7:67:
ce:3d:a1:85:ca:e0:a5:c9:ac:d7:d1:c6:19:5a:56:
e8:71:a5:48:03:c2:68:cb:b1:33:7f:0a:07:54:83:
26:59:d0:60:cb:7a:8d:fb:88:f7:d1:eb:05:fe:bf:
92:98:f1:bb:fd:05:35:b8:76:4a:ba:fc:8f:1b:cd:
c2:fd:93:2d:c2:ae:52:c8:6d:eb:9e:00:1c:1f:c7:
aa:24:0a:10:8a:e9:44:bc:50:da:0a:d9:42:4a:1b:
be:2d:6b:58:ea:26:41:f1:45:5a:35:b4:22:9c:b2:
a6:0a:90:4f:89:54:84:f3:a5:f0:68:ce:8e:ee:9d:
92:8a:bc:99:27:88:f9:3b:53:30:80:64:56:57:c7:
bf:f5:5c:c5:0d:4f:d7:96:ca:2f:41:8f:91:29:d7:
58:e4:b9:83:1c:84:18:99:49:d1:bc:02:7e:54:3c:
45:b0:16:2f:6c:1e:66:fc:01:f0:03:d2:cf:7f:65:
16:cd:00:9c:41:7b:59:a6:0b:7d:4a:61:42:a8:b9:
68:e3:4f:dd:38:2c:1c:57:b3:28:2f:db:18:7a:4c:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A1:16:7A:AD:22:FC:74:60:AD:C3:FC:E3:8B:46:07:89:5C:0E:52
X509v3 Authority Key Identifier:
keyid:3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:af:ec:90:ec:eb:58:f4:c1:8d:46:9c:fd:e5:7a:fb:fe:44:
c8:57:ee:a0:67:ac:e7:f6:84:7a:a7:da:62:5a:3b:94:43:2e:
4f:16:74:e6:58:74:d3:40:fc:5c:fa:d7:5b:c0:61:09:72:90:
a4:ed:c3:a5:c4:16:89:ff:2e:5a:84:7e:14:41:a4:82:a1:c7:
16:7c:cb:b5:cc:2d:f7:31:72:a7:a2:20:2c:69:35:48:b0:f2:
23:b4:f7:16:23:3f:c9:98:f5:fb:4f:1c:d8:ab:78:4f:2e:9d:
5e:32:9e:3f:2b:7e:c4:16:54:0d:f2:e2:4b:d9:f6:9a:86:61:
54:62:75:63:f7:87:8c:43:d8:17:19:cf:cc:cc:f6:94:82:c1:
87:fa:4c:a3:67:86:be:32:db:57:01:db:3f:c2:39:33:8d:a1:
bf:ee:ce:9e:af:53:22:15:00:a6:70:d0:53:ad:8e:63:f6:b5:
97:61:38:55:74:e9:80:c7:b2:95:72:48:08:a2:f4:9a:0a:af:
fe:fb:5b:ab:83:e1:93:2a:52:c4:a6:a5:7a:26:09:fa:e1:42:
8a:e4:c4:46:e0:80:f0:69:f5:7b:da:46:cb:7a:5e:27:08:18:
c7:51:8f:87:ad:e2:a6:23:d6:f6:08:8e:9a:90:dc:da:6d:72:
b0:e6:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:18:09 2026 by rpki-client