
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
File: PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft (raw, json)
Hash identifier: F4RJv5eh2thLSw7EyxEsxhn0ydTZMbyfZ0Dp3ePeLN0=
Subject key identifier: 68:8F:2A:47:F6:CA:73:FD:6F:88:A5:41:A8:EA:3C:DF:F2:DA:03:FE
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: 0179
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
Manifest number: 0115
Signing time: Sun 18 Oct 2026 20:42:36 +0000
Manifest this update: Sun 18 Oct 2026 20:42:36 +0000
Manifest next update: Sun 25 Oct 2026 20:42:36 +0000
Files and hashes: 1: PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl (hash: L8EcP/A7//nF3GCwk0glN4Qw9DQv22/+jsh9sEioJS0=)
2: E473113C965311F1B6AAEF027011F970.roa (hash: VA+BYPw7KkJtgtKgmOxAvIo9IzjVS7zxoF0GnXz9f/U=)
3: 9F931B1659B811F19C535564C0833773.roa (hash: Yl+9FFpSrh52wT34a0nEXuGuWiSHXlfv9TtSXwtGwb8=)
4: 57370A4C541A11F1A6DC56E096833773.roa (hash: IABEco6g6kBAmcmXHzYKqdz7mGq0emkEIyAj4S82Cn4=)
5: 6CB9FE946FBB11F1AD182CE57BA30FBC.roa (hash: KKwHWZdpGCjc5isRuwQn+k57hTQSSvVdsZLqM2xbZnQ=)
6: 57D03776541A11F1A6DC56E096833773.roa (hash: g5B+ZPm4J3iEu0tXAhc21IWA/N325dD1taQ72qMz0q8=)
7: F5B4E5A0997E11F190B827626411F970.roa (hash: lZ9ga1JlhgTuJE+sDHtBRl1RAezAeE+MSwEko6B+lYU=)
8: E51B21C4965311F1B6AAEF027011F970.roa (hash: PFj7XOgfVJJX1PHud4r6mM9JB2B33xHihqLF3mywRiA=)
9: 5A43882CBB4A11F1AC9AAC623A11F970.roa (hash: /rT6xbvzLwaKaKvrZ3Qktt9TAdazvFJ3y5G/wUXl4fA=)
10: 01B0CB8CC63711F196E89F2D5411F970.roa (hash: syn/FWMqCfbQDSdS3rHrPIDkOS7d1txSQ2P3xyJaLZY=)
11: 025F9668C60A11F0AB4AE483C4F9AE02.roa (hash: +mNkgnGeuZ3AFhM2oKFN8Sh0UnblbTodz6/veBgp/dw=)
12: B36100BE958F11F1853404D43611F970.roa (hash: 9pM1C/xo1Jb93spuccqhJ/7kFPLqovbuJiBp15FDz8U=)
13: 90EC9146631811F1AF84BBE77D47A888.roa (hash: eLPGshAytqyf0YfudVeOPXFxnB9xB91RFHxCBlIkJ3Y=)
14: 901A806E936311F0AFC2992BC4F9AE02.roa (hash: +hmqIoxyFlGHGf+MVx7NHUlRN3EVatUM9ul9ZfEVwmE=)
15: 844A140AC5F111F08382761DC4F9AE02.roa (hash: rBbLnyvsSpyoqt+1Znxybq65uALelom0MON/ooqRZ2Q=)
16: E5B24FEA965311F1B6AAEF027011F970.roa (hash: qVaTwy/ZoiBC4xv9KVRDC3vqXyjmoTg0ferd6+j1Cww=)
17: 48635696486311F19B06CCBAA3833773.roa (hash: dqfljBalhMq2AZ99tvFoEo5fOXil9RHFdoZ+aUnfUXQ=)
18: 12A52794DD1211F0B41550BC5F6F56BC.roa (hash: lew++iLuTuVRoqC+xKEJRL86TGNnlYqrVaVSmjno5u8=)
19: 00A23160C9F511F19F0021FA4011F970.roa (hash: GwrvC/Vr+gayyoqudpdiZbaP+saCorakgB4gxYznZNM=)
20: 00A309DAC63711F196E89F2D5411F970.roa (hash: 3C0w5io6mwe3umICUtoN8jVOx4DGVGeBQmzr6lp3bYw=)
21: D2647EFC503711F19AF4DBDECC833773.roa (hash: 96j5AlvWgWDsKvFFoC2LPQsYZNPXjF7kiQ3FirxrpKk=)
22: A1FA022EC60C11F08F496250C4F9AE02.roa (hash: n2RtfX9lDmWPEncMTV8M7H8XKQDC6atYp58DA958e60=)
23: B7DDE480BC0A11F180E45ED03811F970.roa (hash: cDycKBJXOUxI+akK5mVIps9oXW7WJEblif4OldMMBLA=)
24: 0228453AC5F811F08FFA5F38C4F9AE02.roa (hash: IWJWh705c8m4FHfmtsytROQ/5ReiulZR0f5Dck9Oj7A=)
25: 63B9CFC4601411F1877882318A47A888.roa (hash: 2qNC7PYjyhiorUjFw27xaW1KMDGmom5TuSrxBeKkEWk=)
26: F43C291A59B711F186CA4B50C0833773.roa (hash: Nke9fDJPGf5J0a5rq9AwgOzncKD71fJVsI1tO40axus=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 20:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: Oct 18 20:42:36 2026 GMT
Not After : Oct 25 20:42:36 2026 GMT
Subject: CN=6ad52f3c-aa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:74:e0:02:17:21:87:f2:5f:79:d4:16:96:
10:7b:2b:ee:e4:da:84:13:97:5d:83:76:22:85:8e:
ea:fb:c2:cd:78:c4:86:6a:5a:0f:4b:35:3e:e3:ba:
97:20:62:12:8e:4c:c2:58:87:d5:a0:f1:ff:3b:c1:
45:48:65:ca:ae:f9:17:1e:57:22:bc:ac:ed:cc:da:
cf:cd:73:f8:4c:08:35:79:2c:01:33:22:96:2f:9f:
3a:1a:d7:af:33:a2:27:d5:de:2e:16:cc:78:3d:79:
06:99:b0:f1:d0:ed:32:af:42:cd:3e:5a:ca:86:91:
e6:49:e6:ab:49:05:44:d4:1e:7e:da:9f:2a:b7:ea:
3a:ee:3e:35:ee:e8:4c:a8:46:70:8e:70:2c:ce:07:
de:3c:36:55:df:51:9d:71:2e:ba:ca:5b:5f:8b:cf:
90:3d:34:d6:a1:9e:f5:dd:03:af:0a:0b:e7:91:83:
d8:a4:7a:d9:98:12:3d:ce:93:c8:20:54:4d:0e:ab:
a2:01:ab:2a:16:aa:e1:79:69:71:b3:ad:ee:86:f5:
95:3e:a0:c1:e3:5b:88:c4:b1:91:81:ca:df:cd:4c:
ce:fd:33:6a:11:be:66:a7:83:bf:37:de:05:76:0e:
e9:7a:8f:cc:43:a9:3a:3f:7a:7e:56:7a:d3:4f:3a:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:2A:47:F6:CA:73:FD:6F:88:A5:41:A8:EA:3C:DF:F2:DA:03:FE
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:86:76:08:2d:2b:85:e5:c9:5d:21:fb:ed:c9:97:2d:36:14:
67:72:c2:27:68:e1:e7:93:6d:9d:d8:fe:a1:48:c9:bc:a2:79:
c8:ae:8f:7b:66:34:d9:f7:8f:ba:f0:1e:72:f6:b6:7e:18:2d:
e1:c2:ff:50:6d:77:a8:cb:a4:f2:fa:d1:80:ba:9e:c1:9f:9c:
57:a9:64:02:3f:9a:fc:b8:a1:17:7e:f7:71:b3:7d:ad:b6:49:
fa:a9:02:15:fc:04:11:ff:51:b4:39:12:c0:e6:38:0c:0d:54:
17:39:33:b8:db:ce:23:5f:ad:7b:93:f5:b5:8b:4f:59:6e:78:
ef:5a:7e:89:70:75:c0:2d:eb:48:43:9c:6f:a2:3a:bf:8b:2b:
d2:4c:66:27:77:35:c1:f8:9c:c9:9c:31:17:66:59:d2:68:19:
f2:1b:47:c0:47:20:1f:b2:24:13:18:99:f2:5e:8b:7c:42:78:
2f:9e:ee:fe:7e:2b:df:dc:62:56:51:74:89:3d:4a:59:ed:2e:
9e:da:26:b1:a0:40:b3:52:f5:b2:e6:ab:00:13:09:43:5e:ab:
cc:50:63:56:d3:49:84:3a:23:f3:51:e6:91:33:b4:3a:90:98:
0a:04:2d:66:51:1c:72:19:87:b6:24:22:89:06:a4:7d:3d:10:
43:e8:bf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:58:45 2026 by rpki-client