
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
File: pwfo7Wx0uvNh3UByccajTUQCIqw.mft (raw, json)
Hash identifier: VGDdp6yPSLaWkJqXXR0TCTAFan0nG0lJcJ34DwE84k4=
Subject key identifier: 97:21:6D:11:48:BA:3E:B8:DC:A7:FC:EE:99:7C:BA:96:6F:D5:51:91
Authority key identifier: A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC
Certificate issuer: /CN=A91D0C14/serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
Certificate serial: 02FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
Manifest number: 02F5
Signing time: Fri 09 Oct 2026 01:23:42 +0000
Manifest this update: Fri 09 Oct 2026 01:23:41 +0000
Manifest next update: Fri 16 Oct 2026 01:23:41 +0000
Files and hashes: 1: pwfo7Wx0uvNh3UByccajTUQCIqw.crl (hash: IsFNWwRavSE9WFFo4YRdRLOrZNOhxzxOdr2RGkRIHLU=)
2: 111C77744E1811EDADB36913C4F9AE02.roa (hash: 6hfUw9nQOdjVrwwSNnhQ1CXEFLWSCYmyZedcFdNSRgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl
rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 01:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 765 (0x2fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C14, serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC
Validity
Not Before: Oct 9 01:23:41 2026 GMT
Not After : Oct 16 01:23:41 2026 GMT
Subject: CN=6ac8421e-98b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:10:eb:85:8e:22:dd:18:4a:dc:77:eb:8f:6c:
d4:00:71:4b:82:e1:95:e1:0d:ca:b7:59:81:e4:33:
41:4b:1f:d4:25:64:5e:bf:c4:5c:45:b7:0e:0e:ae:
d6:45:cc:6f:2a:88:6a:2f:fa:96:e1:47:46:1f:b9:
fd:ba:22:7a:1b:ad:a1:15:e4:04:bb:e0:37:f1:16:
5c:f8:a8:30:84:41:d1:c3:a8:05:ca:f8:cd:e4:45:
e3:df:fb:76:4a:1f:ac:e2:ac:f1:05:92:8f:fe:97:
86:88:72:f0:31:04:c6:80:63:01:14:d0:ad:1c:13:
95:bd:b6:02:40:a2:ee:9a:87:3f:79:91:54:67:7f:
cc:2f:f0:5a:dc:bd:8d:4f:d6:b2:80:fc:e1:e5:1e:
95:88:53:04:4e:85:37:ae:6c:be:54:45:8c:15:74:
96:6b:2e:d6:2c:81:e9:1e:78:0b:f3:cc:12:56:4f:
2c:f3:bc:d3:bc:59:ca:64:e3:76:8e:fb:10:af:63:
1a:96:ac:62:b9:7b:13:de:20:d3:fe:70:df:ba:01:
4d:7b:a0:c5:95:d9:32:2b:3f:52:21:4d:a0:51:b9:
1f:91:ab:ee:32:7c:b0:f3:fc:bd:81:37:f7:c7:cf:
f9:78:ec:46:90:ef:6c:1e:ec:2e:85:8f:85:a4:d3:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:21:6D:11:48:BA:3E:B8:DC:A7:FC:EE:99:7C:BA:96:6F:D5:51:91
X509v3 Authority Key Identifier:
keyid:A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8b:d5:3b:6a:fa:8d:d8:d7:6c:38:57:72:6f:c4:97:05:e0:
c4:80:2a:32:73:39:cd:a4:50:1f:1d:5b:b2:f0:5c:ec:5b:f6:
89:a3:c8:21:b8:43:ce:6e:f2:96:f5:a6:d8:6d:73:2e:5a:d0:
96:32:6d:74:2f:19:52:ea:f9:a6:62:b6:1a:1a:b2:bd:be:2c:
85:5e:cf:89:35:a5:37:84:fa:c6:24:8d:46:6e:69:7d:51:4f:
14:85:dd:a3:ca:29:df:7b:3f:c9:95:10:b8:63:ac:de:c7:36:
48:d0:0e:da:b9:ea:2b:db:5b:dd:6f:a4:98:14:22:fc:6d:bb:
04:2b:74:df:fd:c0:dc:f0:8e:f0:ad:10:b5:36:7a:ee:a4:3e:
3b:7d:ae:93:8e:5c:f1:6c:bd:d8:bb:f8:18:4c:5a:7d:f0:79:
d2:1e:70:b9:ba:cb:8d:ee:40:a5:f3:63:e8:44:72:00:e8:bd:
9f:10:27:16:72:4b:47:d3:94:97:dc:e7:b5:8f:d9:ee:9c:2d:
46:84:28:b5:29:0c:10:c9:cc:0c:31:5b:14:32:81:a2:56:1f:
b8:82:b4:8a:a6:90:e0:30:e9:9a:df:9f:66:49:56:3f:94:e4:
25:c4:12:1d:21:c0:05:5c:52:e6:24:0b:4d:34:4b:0f:69:d3:
27:4c:f0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:14:36 2026 by rpki-client