
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
File: PLw5Tr9aIgmw6yx0fD_wBratGds.mft (raw, json)
Hash identifier: Pooo5r60Rs20T0IK9ZttedGRo6xUDCTCP5nB5dyS954=
Subject key identifier: CA:25:2D:E7:09:BD:C6:03:E7:07:C8:AA:00:43:BF:03:12:14:50:2B
Authority key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
Certificate issuer: /CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Certificate serial: 0240
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
Manifest number: 0239
Signing time: Mon 27 Jul 2026 04:03:43 +0000
Manifest this update: Mon 27 Jul 2026 04:03:42 +0000
Manifest next update: Mon 03 Aug 2026 04:03:42 +0000
Files and hashes: 1: PLw5Tr9aIgmw6yx0fD_wBratGds.crl (hash: x0IF+CoV7qKUTgnPcrCtxI763puh6oOjs31pRPZAJW0=)
2: 09CA244474AC11F1B08F3CAC8FA30FBC.roa (hash: JibtJ7eZGfzjYiUvG6/bqte33TIUclRuC8D87VcUofI=)
3: 6C9E3B36803311F1AD95C63B68A30FBC.roa (hash: o8dV47+n+UlXYBpwopVlH11KiJaiqwp0xkampY+WyhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8E1F, serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Validity
Not Before: Jul 27 04:03:42 2026 GMT
Not After : Aug 3 04:03:42 2026 GMT
Subject: CN=6a66d89e-a63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:88:42:33:e2:c4:2b:05:53:84:52:9f:7e:
38:c3:c5:3d:4e:df:57:46:3c:12:a4:94:55:dc:84:
1e:3d:0a:28:bc:a5:18:3f:ec:79:2e:82:44:58:df:
74:12:82:0e:53:cf:99:cb:a3:19:0b:fc:a3:0e:68:
02:33:72:e1:61:0a:21:72:20:1a:bc:6e:27:6d:84:
2f:d7:eb:ba:94:fe:4a:92:2a:f1:2b:e9:04:3b:07:
db:8e:65:11:16:29:f0:fd:40:49:6b:9b:b1:ea:d0:
73:9d:fc:b2:2f:24:bc:25:3b:26:59:d3:46:1e:68:
c8:57:b7:55:45:1b:ca:5d:f0:40:0c:12:74:26:6f:
d8:0d:9a:93:86:82:09:9f:f9:44:51:81:e9:6a:9c:
32:a1:1b:d5:de:24:2a:26:a2:ea:6c:0e:50:77:a7:
dc:e1:1c:1e:7a:ef:1e:31:e1:4b:16:f7:c7:9e:1d:
90:32:8c:da:6b:70:8e:15:55:40:f0:cb:dc:41:6a:
47:a8:b5:da:7f:7d:88:03:cf:13:72:6f:0e:43:92:
e2:d6:34:3c:38:ba:21:fa:99:25:87:5b:7d:d2:4c:
77:db:60:62:6e:08:d6:22:e4:6b:37:47:d0:e0:0e:
07:b7:de:39:5e:4b:34:3c:dc:fc:e9:14:11:c6:5e:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:2D:E7:09:BD:C6:03:E7:07:C8:AA:00:43:BF:03:12:14:50:2B
X509v3 Authority Key Identifier:
keyid:3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:06:3d:c2:ff:b3:12:85:ce:4c:94:a8:d4:e6:24:f6:58:ce:
61:41:96:03:55:f4:01:c1:58:77:aa:8c:b9:71:99:5a:c9:29:
1e:da:c4:b0:3a:33:b3:fd:9b:96:85:73:c0:bf:f6:83:75:84:
b3:5e:cd:41:b7:73:0f:20:c7:e1:74:21:0a:bd:9c:7a:eb:ea:
b2:0a:b3:ae:d6:28:e2:ef:71:60:ac:8a:7a:54:3e:42:c8:83:
88:03:2f:fa:c2:54:79:d3:1c:f2:cc:ee:38:8e:7a:85:65:c2:
9f:27:07:03:0d:6f:e3:71:26:2e:02:a7:32:98:08:6e:fe:56:
ea:25:56:3f:a8:3a:86:1c:c9:68:25:9e:9e:e5:6f:47:3f:61:
6e:9f:2f:d1:90:6c:2f:4f:c3:0a:10:9d:40:a8:69:28:69:0b:
4e:71:dd:66:91:f6:d7:58:a1:fd:3e:9c:bb:e9:86:cc:34:4c:
bd:11:1b:01:ca:6c:9a:cd:e5:9c:21:a5:b9:58:35:8d:8d:8b:
ef:a0:d0:f7:c1:4c:59:6d:82:cf:c1:88:38:4c:ec:e3:97:91:
ec:08:30:e1:4d:86:69:04:29:16:15:c9:29:ac:79:7a:fa:5b:
11:dc:44:fa:6f:3a:87:76:9f:d9:ec:49:dc:b2:a7:08:98:75:
06:37:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 00:12:01 2026 by rpki-client