
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
File: PShwiOOGgqTkudgoRQszZr3q1d0.mft (raw, json)
Hash identifier: 8Y+B/MmyKRTsHPmsJQ1OdJ3ES9eGNiw0ZTizyd0Xtl8=
Subject key identifier: 02:83:32:66:35:28:B2:74:3C:22:2D:6D:88:DB:AD:16:A6:07:CC:AA
Authority key identifier: 3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD
Certificate issuer: /CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
Certificate serial: 0CC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
Manifest number: 0CAF
Signing time: Sat 04 Apr 2026 18:21:04 +0000
Manifest this update: Sat 04 Apr 2026 18:21:03 +0000
Manifest next update: Sat 11 Apr 2026 18:21:03 +0000
Files and hashes: 1: PShwiOOGgqTkudgoRQszZr3q1d0.crl (hash: Q4vxf4jWpoMcLMxNZjKhAAjKZLzRQyHgrDi5qq1YKDk=)
2: 7716938A416211EB9B0F3C54C4F9AE02.roa (hash: JsMxuAz2clvL8td5dPv4MoycNcApjVpvYRYlrs8BPh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl
rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3266 (0xcc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F02EA, serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
Validity
Not Before: Apr 4 18:21:03 2026 GMT
Not After : Apr 11 18:21:03 2026 GMT
Subject: CN=69d15690-57e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:ca:92:8a:6d:ed:7c:45:5d:3f:bd:6f:35:
bd:5a:88:52:9b:c4:41:9a:12:bf:55:13:e1:d4:29:
85:71:e4:b7:00:e9:16:88:6d:37:df:04:ed:65:46:
35:8f:67:d9:36:b4:0d:71:e4:83:bb:9b:3b:e8:49:
9f:0f:4d:19:f1:04:ff:16:e3:b8:1c:12:ad:00:bb:
07:38:89:bf:03:b7:b7:a6:2c:16:a7:47:7f:a8:f7:
79:48:7a:54:fa:7d:81:29:61:cc:f1:32:07:78:72:
30:f5:63:19:1b:3f:63:42:d9:5c:85:c0:22:74:99:
58:a1:9f:e8:e3:49:36:d1:b7:05:03:a4:99:60:5b:
84:41:14:91:ba:73:c4:21:df:44:ca:9e:e2:3b:f8:
22:d1:ca:34:50:05:5f:9a:be:66:81:97:e2:5f:2d:
ad:89:6c:b2:54:d8:aa:e7:a9:fe:b8:18:5f:51:53:
84:13:80:2f:db:85:55:9d:58:92:85:c7:fe:a7:c1:
1d:a6:e2:d0:51:8d:6f:66:b8:b9:f6:2a:0a:0d:48:
5d:82:95:df:1b:75:53:07:ab:8e:47:90:0a:05:12:
04:57:4a:66:ae:59:57:2b:ee:94:72:a1:38:3e:99:
51:4c:18:66:0b:a9:f9:53:07:f2:ea:a4:ed:5d:f8:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:83:32:66:35:28:B2:74:3C:22:2D:6D:88:DB:AD:16:A6:07:CC:AA
X509v3 Authority Key Identifier:
keyid:3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:a5:81:e9:0c:c8:b5:35:b8:43:33:7d:38:80:ef:c7:6a:c0:
5d:ff:6c:cc:25:e6:e3:22:85:13:b3:2e:98:37:e3:55:c0:2f:
ee:fa:f6:b9:18:ea:ad:2f:1c:11:40:d3:63:44:c2:e4:de:21:
00:fd:7c:61:d6:34:4f:4a:0d:be:b2:2e:00:4c:75:64:55:ca:
2e:6e:5f:93:92:dd:60:96:6e:68:41:5a:1e:20:25:50:8f:67:
69:2b:62:37:ea:fc:dc:63:67:a5:ac:72:c6:9f:0a:14:1b:c1:
0c:b6:98:e9:a1:f2:5c:d5:aa:3a:1e:15:b6:d7:5e:5f:bb:a5:
e9:30:65:86:6b:fd:ec:74:de:2d:91:16:f1:a0:21:63:3a:fd:
ec:2f:46:e8:9f:24:d5:17:44:bb:4a:73:3a:2a:c3:c3:46:79:
6a:a4:49:0d:6c:85:4d:35:78:72:82:d6:ab:ef:5f:c2:d5:7b:
ba:cc:d7:5c:b2:de:cb:a9:e8:40:59:62:98:07:5f:fc:a2:07:
ff:0b:49:40:d1:42:f3:a2:c2:4b:a7:a8:c5:03:5f:a8:4b:37:
c4:74:a0:2e:f3:b7:fa:ca:0b:3c:48:ad:57:89:6c:3f:f0:d8:
32:26:bd:72:ef:e4:15:62:5f:93:d0:8c:ee:5a:f7:13:0c:04:
18:39:70:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:40:39 2026 by rpki-client