
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
File: PShwiOOGgqTkudgoRQszZr3q1d0.mft (raw, json)
Hash identifier: dEvf1qwhI4s0tjiQl0nEldbF5wPwN6c6X3WdrgeLcsk=
Subject key identifier: BC:6D:C6:FE:DC:1D:C3:FE:73:4D:FD:EE:8A:02:9E:77:2F:78:FD:B9
Authority key identifier: 3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD
Certificate issuer: /CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
Certificate serial: 0D10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
Manifest number: 0CFD
Signing time: Fri 04 Sep 2026 18:20:50 +0000
Manifest this update: Fri 04 Sep 2026 18:20:49 +0000
Manifest next update: Fri 11 Sep 2026 18:20:49 +0000
Files and hashes: 1: PShwiOOGgqTkudgoRQszZr3q1d0.crl (hash: EeF97MLfdYUwIMiRUwBHz4Kdle3yYxF1NOP8URMOBIs=)
2: 7716938A416211EB9B0F3C54C4F9AE02.roa (hash: JsMxuAz2clvL8td5dPv4MoycNcApjVpvYRYlrs8BPh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl
rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 18:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3344 (0xd10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F02EA, serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD
Validity
Not Before: Sep 4 18:20:49 2026 GMT
Not After : Sep 11 18:20:49 2026 GMT
Subject: CN=6a9b0c02-dbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:3b:bc:60:9a:92:7e:24:58:31:3c:88:3e:
ba:5d:f6:e3:4c:aa:65:7e:31:bb:83:fd:1e:93:b7:
4a:a6:b2:c2:73:81:f0:ba:e6:fc:8f:ba:9b:ec:fe:
2d:83:30:4a:8c:60:17:04:25:22:78:b9:2c:88:24:
23:73:c7:eb:a7:c5:8f:ba:2f:7d:3a:b0:46:66:76:
ad:d8:15:70:c8:48:e3:b6:d2:90:41:e1:2f:49:85:
c4:4c:cc:c6:2e:62:aa:d4:ca:2c:0d:23:aa:29:54:
b2:de:05:94:3f:98:e7:06:42:ba:58:67:79:24:f1:
0a:33:39:68:eb:3c:f0:0a:7d:58:3e:88:b7:c4:b2:
8d:8e:39:48:2c:0b:b8:7f:95:e5:29:fc:e3:f8:44:
33:7e:69:07:ff:42:78:35:b4:f6:a0:24:a9:a4:a3:
42:2e:4b:99:d1:2c:8e:08:7e:d0:4d:5d:5e:90:3b:
1a:2b:7d:9a:3a:fb:b1:47:0a:b6:8a:13:1b:51:c9:
c8:87:71:12:b1:00:49:ad:d1:ff:f8:e1:4d:e1:12:
36:ab:8d:3e:07:2e:52:0a:8e:48:eb:4d:c7:2d:fe:
b2:59:74:1b:88:e4:4e:fe:2c:7c:5f:7b:cd:99:a5:
62:94:af:12:91:04:aa:15:57:17:43:b5:1b:32:37:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6D:C6:FE:DC:1D:C3:FE:73:4D:FD:EE:8A:02:9E:77:2F:78:FD:B9
X509v3 Authority Key Identifier:
keyid:3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:51:97:7a:99:31:04:a3:16:a0:66:f4:4c:13:23:e1:e3:56:
a8:dd:45:44:36:17:a5:5b:0a:e0:b0:02:eb:be:bf:5f:61:51:
6a:13:b3:5b:12:d5:76:4a:55:3c:a2:7b:2f:94:70:91:4d:da:
f0:17:9d:ee:c5:a8:b9:50:e3:20:fe:a2:65:c7:c0:5a:bb:e9:
95:37:07:13:0b:39:c3:67:3c:7f:0e:48:29:be:fa:58:87:3f:
79:0a:ae:88:c6:42:69:0e:83:1f:2c:5b:01:b5:05:ff:59:e0:
f8:12:2d:93:ef:64:a7:1f:6f:80:f4:1e:92:2c:74:ee:98:97:
eb:4a:a6:6b:d9:0b:e3:1e:2f:7c:1a:ee:d0:a1:fd:b8:8a:22:
be:f0:29:3a:58:78:07:d0:9e:d1:64:22:99:f5:cc:2c:44:4d:
2f:ab:aa:b4:60:7f:af:ca:ea:5c:d6:3a:05:18:d3:8c:23:ac:
34:21:9b:b1:8d:21:9f:fe:84:ff:97:84:b0:f9:0d:c7:4f:c8:
26:b4:a2:1f:62:07:0a:f7:d8:9a:f4:2e:8e:c1:05:89:06:75:
ef:2f:b1:c2:97:b8:7c:3d:6b:13:c1:bf:bd:a1:ef:47:67:65:
b0:d8:d5:ee:08:d3:bd:ba:06:9b:d6:65:f7:57:72:6a:64:17:
80:75:0f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:05:44 2026 by rpki-client