
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
File: pSvwKHcZGUlxLT2tKdSreid57EM.mft (raw, json)
Hash identifier: rinBxV8Si/UVbPh8AQUWyYeB7EYPr4q82GxLwz7FA3g=
Subject key identifier: 61:F3:0C:E2:95:34:A5:3F:BF:F2:E8:98:E7:05:F1:10:F7:AF:31:28
Authority key identifier: A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43
Certificate issuer: /CN=A91AA618/serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
Manifest number: 0174
Signing time: Tue 23 Jun 2026 04:56:15 +0000
Manifest this update: Tue 23 Jun 2026 04:56:14 +0000
Manifest next update: Tue 30 Jun 2026 04:56:14 +0000
Files and hashes: 1: pSvwKHcZGUlxLT2tKdSreid57EM.crl (hash: kaCok30fRCEj+tfoNCmeuwoGVN6cxaNBztenwUmkQSs=)
2: 88F562E83DAD11EFAA46E417C4F9AE02.roa (hash: HG3oXa5WRW8n13BJ73mfkhHNv2TpvyHSb+awWkOaGA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl
rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 04:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA618, serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43
Validity
Not Before: Jun 23 04:56:14 2026 GMT
Not After : Jun 30 04:56:14 2026 GMT
Subject: CN=6a3a11ee-35d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:3e:8a:10:aa:38:bb:c1:aa:5f:60:e6:8f:
51:4b:05:01:fa:66:a3:e3:15:fe:ea:d6:7e:07:85:
f9:81:6b:7c:3d:3c:ec:f3:35:e0:da:22:ad:ec:13:
ec:63:c9:fb:4a:3c:0f:2c:03:77:a1:4d:ee:09:63:
92:c8:6c:49:6e:02:2a:20:73:b5:88:27:2b:b3:98:
9c:69:43:11:7e:76:20:98:ec:f8:dc:b3:d7:eb:ce:
93:b1:23:55:3c:2c:ff:ad:57:ba:dd:f3:81:1e:ea:
c6:dd:5c:a7:56:91:47:9e:fb:f4:89:a4:59:bd:49:
c4:d8:76:9c:ad:8f:25:41:61:f5:9b:0d:3b:b8:b5:
4c:ce:52:e5:14:65:86:ce:2b:c7:8d:1e:65:b1:da:
4a:8e:06:2d:57:ce:51:23:2c:ff:de:41:cc:f4:73:
40:da:cc:ab:e9:97:f5:3c:9e:b2:3e:f7:55:c4:b8:
f6:97:79:0d:04:86:3f:3f:77:59:98:d2:4d:15:59:
58:cb:8b:89:82:47:4c:02:31:dc:21:31:66:6b:bd:
47:85:55:d1:f0:7f:5d:91:24:27:50:77:b4:d4:54:
e4:eb:71:c5:f7:9d:a7:bd:32:0e:73:a4:5a:ae:2a:
9f:c5:cb:03:4e:5d:c7:74:12:3c:66:48:1f:57:eb:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F3:0C:E2:95:34:A5:3F:BF:F2:E8:98:E7:05:F1:10:F7:AF:31:28
X509v3 Authority Key Identifier:
keyid:A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:36:69:19:da:ce:e2:30:dc:56:d6:8a:46:b4:99:cb:4e:b5:
df:82:03:47:0a:53:50:06:bb:18:9d:f0:8a:d9:7f:01:90:69:
5e:dc:3c:72:17:db:41:17:81:06:c3:e4:c4:1f:70:e0:97:67:
23:f9:d1:cf:f7:df:4d:df:d7:00:f9:85:c9:5e:d2:a8:a8:27:
59:49:f5:d2:28:7c:0d:24:f5:18:bb:46:0c:84:73:18:69:83:
f3:e6:a2:45:ed:96:57:8d:4e:fa:84:de:15:32:6d:81:db:5c:
3b:f5:60:f9:f0:69:e3:15:e5:52:e7:d4:cd:21:f2:b8:6b:9f:
e0:d5:78:3f:20:38:41:ef:b1:d5:df:3c:f9:77:8f:95:e9:06:
1e:21:52:3c:de:ba:9e:e9:2f:d4:3e:c1:67:c6:2f:e9:8d:8d:
d2:9c:3d:2b:34:2f:f5:23:45:be:1a:bd:2a:af:23:59:95:43:
37:e6:ba:a0:ff:df:e0:3e:28:e3:02:60:27:ea:61:53:56:ca:
55:73:e8:87:61:1f:04:a4:69:c0:6b:af:13:74:42:cf:04:a3:
9c:63:90:d6:d7:62:62:5e:97:cb:b8:76:fb:48:25:bb:8c:ee:
53:98:83:48:92:2e:2f:ce:41:88:d0:ce:09:d6:1a:b6:0a:75:
37:f4:6e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:56 2026 by rpki-client