
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
File: AShwXWnFHg4rB4rtuZiR5_GbTR8.mft (raw, json)
Hash identifier: 21cglCdbTjavII5CocofBPK92UGaDyA0CvRyOXBEq1k=
Subject key identifier: BC:CA:63:06:59:5E:27:45:32:B0:3D:8D:40:C9:57:0D:92:31:BF:2E
Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F
Certificate issuer: /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F
Certificate serial: 0CB7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
Manifest number: 0C8B
Signing time: Wed 28 Oct 2026 18:47:42 +0000
Manifest this update: Wed 28 Oct 2026 18:47:42 +0000
Manifest next update: Wed 04 Nov 2026 18:47:42 +0000
Files and hashes: 1: AShwXWnFHg4rB4rtuZiR5_GbTR8.crl (hash: ojZGIaJXcKoeKBDUeVld9NJ6NUQQAQ7kpGDSveUPMe8=)
2: 71E30CDCC4ED11EAA1C5766AC4F9AE02.roa (hash: 7N0LlMCapbNJ9KXikjeWXJKbiREpp9frRRVKC1Mylhc=)
3: E85B23282DF211EAA63F5D60C4F9AE02.roa (hash: EuY5ohXxwCb20yL/oZ+Bf40RR9HQ+u8RzxEp5n6p+No=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl
rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 18:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3255 (0xcb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F
Validity
Not Before: Oct 28 18:47:42 2026 GMT
Not After : Nov 4 18:47:42 2026 GMT
Subject: CN=6ae2434e-1627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:06:07:42:32:c7:3e:99:54:f7:90:e7:bf:
ae:d9:24:ae:09:fa:63:e6:a1:50:e5:40:11:36:18:
73:b2:e9:ea:c1:c6:6a:a3:0d:df:c8:35:bb:ce:32:
8e:c3:5d:a5:84:33:e4:50:9b:40:f3:51:9e:52:86:
c4:72:48:c6:86:25:7a:ad:e2:64:23:4d:76:0c:1a:
8d:b9:93:f3:e9:99:ee:6c:b4:12:a9:27:a5:bd:7b:
55:35:6d:bf:e0:ab:0b:61:d5:74:a9:ec:22:8d:54:
ce:07:e8:af:99:7c:7f:c8:14:d7:cc:20:22:01:b9:
51:97:f5:40:f3:fe:90:45:31:a1:d4:43:a9:13:da:
6b:1c:ac:df:02:78:43:41:8b:eb:31:f9:91:7f:2e:
53:82:2a:c7:09:bb:c6:e2:1f:46:ea:eb:6b:ab:37:
ce:bd:d6:5c:9f:e4:19:03:9f:ef:f5:f0:ea:2d:59:
c1:22:d2:99:4e:57:e7:74:62:7b:7e:ea:89:d8:b2:
b5:5a:3e:b4:72:8b:fc:39:17:ba:70:2a:ea:e0:a0:
8f:b0:2d:21:3d:d6:fa:4e:5f:46:0b:6c:b2:e7:e2:
7e:24:ba:e8:eb:22:fe:9a:24:8f:74:b5:4f:b7:0f:
1c:a6:0b:33:b5:09:af:39:91:11:a0:ba:dd:25:b5:
c2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CA:63:06:59:5E:27:45:32:B0:3D:8D:40:C9:57:0D:92:31:BF:2E
X509v3 Authority Key Identifier:
keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2e:8d:4f:29:86:1e:f4:8b:c9:ee:5f:d5:8a:3a:dc:d1:b3:
65:e7:77:25:fb:41:74:d2:28:0e:c7:af:43:eb:ed:da:56:92:
87:8f:8d:53:38:a2:2b:7a:a8:47:bf:3c:14:1c:da:0f:c4:65:
42:29:78:6b:14:5b:97:b3:92:b5:80:3d:e4:2f:20:00:9c:d9:
32:66:1c:3e:c7:31:2d:53:80:95:c4:27:56:c9:85:d3:31:5c:
94:9a:be:a1:db:17:f2:4f:0a:6e:10:21:9e:0c:25:31:8d:a2:
57:9d:87:c6:06:a8:fc:e9:5b:5e:40:81:1a:99:21:29:b5:35:
78:bb:de:c8:ee:c7:7b:ee:e7:fa:6e:2c:d0:1d:be:df:2d:93:
ee:28:2d:f0:10:79:b6:e2:31:44:9a:6a:2b:20:0b:c3:0b:71:
53:33:ed:fd:97:1d:df:37:13:e2:28:9f:a9:a3:bb:0f:fe:51:
1c:b2:03:b7:48:14:09:46:5c:4e:ec:9a:38:cf:e3:c3:78:af:
ba:20:55:7e:cd:b9:7c:ce:ea:88:e7:9b:16:b7:47:67:c4:fb:
46:29:48:72:47:20:33:f8:82:a1:2b:95:86:66:db:c7:d8:59:
b6:f0:fe:a3:cc:13:7e:ac:ea:cd:42:ee:53:ae:ee:af:15:a2:
77:3c:f3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:07:37 2026 by rpki-client