
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
File: pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json)
Hash identifier: KuVRD/do2L8yoPSgNKf0CrpgBujDw7LpT4a80fV8Dd0=
Subject key identifier: 1D:93:D9:9F:C6:A9:35:D8:B2:04:87:47:C3:A6:B8:B4:73:A4:E0:94
Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB
Certificate issuer: /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
Certificate serial: 083F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
Manifest number: 0833
Signing time: Wed 20 May 2026 21:01:59 +0000
Manifest this update: Wed 20 May 2026 21:01:59 +0000
Manifest next update: Wed 27 May 2026 21:01:59 +0000
Files and hashes: 1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: j/IpuGaPieLAlFEN08MjW4aOUUlrsZ7M81HDXxgGjTE=)
2: A3205106142511EB8FED0427C4F9AE02.roa (hash: 8fEp2+O8zmOzV0vCI6lvkCvaOZTilKPiu1usSNMcmM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl
rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2111 (0x83f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A284E, serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
Validity
Not Before: May 20 21:01:59 2026 GMT
Not After : May 27 21:01:59 2026 GMT
Subject: CN=6a0e2147-7e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:70:3d:59:ea:b2:15:33:26:6b:a2:45:b2:
21:a0:19:26:6f:11:44:a9:95:84:fc:6f:ed:33:ae:
ca:fa:5f:a7:b7:c1:90:39:4a:1a:60:8b:6f:69:38:
f5:46:76:a3:89:d1:5a:7a:48:f9:10:99:04:73:32:
d9:67:71:ef:4e:62:88:b5:d6:95:9d:14:17:b4:28:
79:9d:90:44:4b:76:87:51:5b:85:23:be:f8:5d:26:
32:22:ee:3a:3b:5f:d6:aa:19:4c:a9:10:8f:ea:c8:
4e:8b:87:bd:fd:93:20:a5:ab:04:54:6a:2d:37:d0:
44:68:93:d4:32:c8:99:af:de:a4:af:64:12:16:bb:
1c:52:7b:81:c2:d5:bd:ee:fe:69:c5:bd:93:b4:a1:
21:63:6b:28:b5:18:76:a3:22:3c:98:fe:37:5e:37:
51:5c:1a:7f:55:cb:a9:45:00:4c:27:90:dc:fa:49:
61:4f:b0:ab:7f:3a:21:12:06:d3:4b:db:2a:25:8a:
0b:5d:76:10:76:e2:d8:b2:3e:de:fa:c4:d4:9a:dc:
a6:7b:8f:04:35:d6:43:80:21:0c:03:2f:d5:9e:3e:
c8:4c:89:92:52:88:49:41:2b:69:08:39:60:aa:35:
57:b9:d2:9b:99:46:5f:73:6b:d9:ce:37:c6:cb:0f:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:93:D9:9F:C6:A9:35:D8:B2:04:87:47:C3:A6:B8:B4:73:A4:E0:94
X509v3 Authority Key Identifier:
keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f9:bb:74:df:db:ca:3b:35:60:3c:10:e4:50:a0:ce:dc:82:
b6:92:16:3b:f8:b9:b4:a6:b5:54:d2:1e:36:38:17:e2:aa:59:
05:0f:ac:b6:50:e1:12:e3:93:73:e7:5e:24:8a:2d:3e:6c:a6:
db:5b:36:32:18:46:56:46:aa:65:02:1d:c9:41:b2:0b:a9:5a:
14:13:e9:50:72:6a:e5:51:be:d7:b4:9c:90:d9:4e:94:2d:3e:
77:29:53:23:3a:7c:d3:18:d7:12:ab:2d:a4:81:2f:97:12:b6:
56:e5:84:88:de:8b:df:b4:60:3a:53:60:fc:f4:da:a4:9f:72:
b8:67:ab:3c:fc:b6:dc:99:d3:c0:7b:61:bd:0d:8d:2e:13:56:
0a:4a:ec:2d:a9:60:71:c4:c0:2f:08:45:d3:8f:de:d3:dc:14:
f7:da:d2:63:da:3c:80:1e:dd:9c:67:c7:aa:64:da:5c:84:d0:
d2:f7:a3:e4:e3:ca:e8:2f:9c:2a:60:b5:13:c9:7f:be:f7:d0:
b7:2f:32:f3:4f:c6:8a:c3:f7:30:6f:bc:7e:f8:44:63:be:3f:
0c:72:ff:92:98:a4:cc:f2:5d:6e:12:bc:3a:6b:22:76:56:c2:
27:37:ec:8a:0a:1a:1b:22:09:c2:bc:c2:a9:d5:d7:70:36:ef:
8c:6a:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:46 2026 by rpki-client