
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
File: PShwiOOGgqTkudgoRQszZr3q1d0.mft (raw, json)
Hash identifier: VEDOr/coyDjmRkFZQkMMKf1eU2lsiEWH9fownamKop0=
Subject key identifier: 16:47:21:D3:6E:F8:55:97:6A:7A:D8:55:EC:5A:A0:C7:C2:0C:C9:3C
Authority key identifier: 3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD
Certificate issuer: /CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
Certificate serial: 0CE1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
Manifest number: 0CCE
Signing time: Thu 04 Jun 2026 18:29:16 +0000
Manifest this update: Thu 04 Jun 2026 18:29:16 +0000
Manifest next update: Thu 11 Jun 2026 18:29:16 +0000
Files and hashes: 1: PShwiOOGgqTkudgoRQszZr3q1d0.crl (hash: dySfSp4pbdugoA/zYD2KTYOH/egiaRxDVtpYJqlgT7U=)
2: 7716938A416211EB9B0F3C54C4F9AE02.roa (hash: JsMxuAz2clvL8td5dPv4MoycNcApjVpvYRYlrs8BPh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl
rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 18:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3297 (0xce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F02EA, serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
Validity
Not Before: Jun 4 18:29:16 2026 GMT
Not After : Jun 11 18:29:16 2026 GMT
Subject: CN=6a21c3fc-30a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:78:0f:ad:18:79:aa:dd:9a:11:83:03:f0:c7:
66:10:f2:5a:14:15:88:bb:44:1a:97:0f:77:e9:57:
26:fb:82:f4:4c:ac:a2:fc:00:e0:1f:b6:3c:90:c1:
ad:19:e8:b0:77:c0:67:58:1c:3a:84:a9:9d:ef:ce:
b0:2e:53:85:b7:ce:70:00:20:c8:a8:9f:a2:ba:5b:
98:a1:4b:da:4a:90:9a:f3:c9:8f:ea:74:1e:d7:04:
67:fd:b9:98:74:27:e8:6c:3f:53:e1:b8:fb:86:ae:
84:4c:de:a1:8b:d9:bb:6f:22:d5:ae:34:1e:d3:cd:
0e:e9:c5:da:a1:50:5e:42:ae:3b:ac:33:26:37:4f:
b8:bb:ec:1f:69:52:f2:30:77:ff:4c:55:09:d7:4c:
3e:25:19:30:51:dd:b0:e3:11:bf:18:e9:91:29:81:
13:72:a4:99:af:af:b9:15:7e:39:60:f3:f7:67:ca:
e9:ed:ae:4f:a8:a5:a6:96:d5:a5:8d:0d:43:f8:96:
04:b3:d3:2f:fc:0f:58:e5:24:f9:63:20:d5:61:83:
35:56:23:85:09:e8:24:c2:2e:bd:cf:f0:49:f2:cf:
6c:46:4f:73:e5:40:f2:aa:b6:c9:8e:06:40:b7:5f:
f4:57:2f:90:e4:0e:7f:8d:88:ef:be:59:a9:e5:3d:
d8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:47:21:D3:6E:F8:55:97:6A:7A:D8:55:EC:5A:A0:C7:C2:0C:C9:3C
X509v3 Authority Key Identifier:
keyid:3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:b6:ba:d6:2e:3a:08:68:8b:77:04:78:48:62:38:ec:44:39:
56:ab:01:64:fc:68:ef:fe:fd:bc:48:cb:e8:7e:1e:1c:14:b8:
61:d4:3b:bb:e9:8b:17:18:04:a7:d1:c6:a0:7a:a7:02:a9:66:
02:86:e8:a5:84:60:d2:5a:18:ed:db:1b:1b:5f:22:69:eb:e0:
12:e1:fd:32:c7:4a:75:2b:21:12:e4:11:a0:12:6e:fb:d7:0d:
58:68:06:d9:46:23:85:92:d1:3d:12:1a:60:45:43:3b:6c:f5:
1f:95:6c:3a:68:1c:28:6b:3c:fb:4c:ed:b0:50:15:bf:96:a4:
6e:d0:4c:18:cb:d6:bd:d3:c4:77:ab:4c:2c:29:d8:a6:8f:b8:
dd:f5:95:73:5a:ff:50:61:05:b0:e3:7f:fc:4e:1e:00:31:a1:
f5:e4:64:27:d0:7d:24:04:2f:40:80:93:cc:3e:43:69:fe:77:
73:64:39:71:98:17:98:ee:1f:ca:26:90:be:b8:61:71:25:f9:
8c:da:49:d9:2e:00:af:56:7b:d7:61:5b:51:49:32:f3:48:ea:
e4:82:c7:4b:f2:a2:57:c6:f3:57:76:7f:58:ad:de:04:f4:0d:
5c:cd:db:37:89:e6:d1:b2:5a:08:a5:16:f2:d1:fe:08:4d:d0:
5b:1e:7e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:11:33 2026 by rpki-client