
$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json)
Hash identifier: z9mEIoSNeKtrN88h9ST4Wovs4CfolWCnYP6HYqSwQZg=
Subject key identifier: AF:3E:35:05:22:06:28:53:20:D3:E8:68:04:7B:5E:1D:51:53:11:15
Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Certificate serial: 039D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
Manifest number: 0396
Signing time: Sun 01 Mar 2026 23:46:59 +0000
Manifest this update: Sun 01 Mar 2026 23:46:57 +0000
Manifest next update: Sun 08 Mar 2026 23:46:57 +0000
Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: dH2cIvCCmg37hgTiv7ZeCz7H5EvKGJkV/dCY6k2RT0I=)
2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: nomqtva7ggVLFevc3wGgCUafYyn97H4GgqbrGIpWBXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925 (0x39d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Validity
Not Before: Mar 1 23:46:57 2026 GMT
Not After : Mar 8 23:46:57 2026 GMT
Subject: CN=69a4cff2-ac81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3e:90:8e:b8:51:a3:1b:de:37:0a:b4:60:19:
5d:19:cf:08:3c:6e:b6:07:c7:81:24:6f:db:06:20:
e3:f8:bb:73:24:ef:4b:60:6f:ac:b3:17:67:8d:33:
ab:5a:04:a5:d6:1f:52:f6:ae:40:08:ee:0d:c7:be:
5d:44:0c:44:66:2f:70:07:3b:d0:bd:96:18:fe:6d:
b8:0d:9e:0c:84:5a:86:9f:2f:fe:05:cb:b2:67:e8:
6b:64:43:6f:65:21:28:2d:1f:7c:ec:6e:a0:5d:e1:
ae:cf:0a:70:e8:cf:24:3b:95:3b:d2:ee:0f:29:3d:
8c:f8:ec:eb:7e:90:f4:8c:0d:27:e9:05:70:0f:bd:
02:26:7a:ce:eb:47:ee:e7:8e:c7:7c:d6:76:cf:fa:
53:23:de:18:a7:fc:aa:44:9f:82:57:98:ec:70:25:
fc:ff:d8:81:74:f3:2b:2e:ff:4d:91:18:42:46:77:
aa:fa:19:5a:16:ff:46:5a:9d:a3:c9:60:2f:36:66:
84:4e:95:23:10:a4:4f:6c:7a:29:77:eb:38:b9:ae:
e4:57:56:39:ee:eb:13:30:0e:72:a6:52:64:85:b9:
1b:93:ed:0f:7c:72:dd:a4:e7:44:89:00:11:d5:cb:
65:0c:f1:b2:70:73:d8:1e:2f:87:e3:73:f2:00:a8:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3E:35:05:22:06:28:53:20:D3:E8:68:04:7B:5E:1D:51:53:11:15
X509v3 Authority Key Identifier:
keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:24:bc:1f:90:5c:16:dc:05:0e:7b:d4:34:b8:40:b5:b8:20:
3f:e0:2e:cf:ca:39:a0:c9:59:af:d6:5c:fe:4c:07:94:bb:cd:
a7:82:be:10:f9:76:7f:74:e5:f5:9b:fb:2a:32:ad:c9:70:63:
3a:18:a9:de:4e:ea:81:f7:34:4b:d6:cf:cc:8d:30:fd:23:27:
00:7e:c1:f3:34:a6:3e:20:2a:8d:4c:b5:c7:54:54:f4:7c:28:
17:13:25:5f:f4:66:6e:90:45:c8:3e:7d:c6:6a:c5:7b:9a:af:
0f:04:9a:ec:e8:bc:81:ab:0e:70:33:7d:4e:b4:86:c3:2f:7b:
78:3f:35:f8:17:c6:06:cc:39:6f:12:96:70:67:c0:82:77:81:
53:56:16:2c:60:ca:ae:c2:d4:fa:44:dc:37:f1:7f:e1:01:6e:
9c:e1:21:3b:61:dd:cc:04:5d:67:b5:1b:63:d0:87:67:78:f3:
1a:7e:f5:35:d1:d4:b3:a1:89:dd:67:3b:00:39:3b:c0:10:5d:
8e:56:98:2a:d7:b5:09:cb:42:c3:6b:6f:2f:a0:3b:55:59:b7:
c4:a4:7f:7f:d1:89:52:a3:11:4f:cb:3c:fb:ec:b5:16:27:87:
56:12:c0:0e:a3:1b:cb:06:39:a7:39:6b:38:68:81:b6:cb:c3:
2c:a9:a9:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTU4MEExMTAvBgNVBAUTKDczMDQ3NzVDMUNFMzg1QUNBNDA0MDU4NjRFQTlCOUFC
RkVERTkxQjMwHhcNMjYwMzAxMjM0NjU3WhcNMjYwMzA4MjM0NjU3WjAYMRYwFAYD
VQQDEw02OWE0Y2ZmMi1hYzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjD6QjrhRoxveNwq0YBldGc8IPG62B8eBJG/bBiDj+LtzJO9LYG+ssxdnjTOr
WgSl1h9S9q5ACO4Nx75dRAxEZi9wBzvQvZYY/m24DZ4MhFqGny/+BcuyZ+hrZENv
ZSEoLR987G6gXeGuzwpw6M8kO5U70u4PKT2M+OzrfpD0jA0n6QVwD70CJnrO60fu
547HfNZ2z/pTI94Yp/yqRJ+CV5jscCX8/9iBdPMrLv9NkRhCRneq+hlaFv9GWp2j
yWAvNmaETpUjEKRPbHopd+s4ua7kV1Y57usTMA5yplJkhbkbk+0PfHLdpOdEiQAR
1ctlDPGycHPYHi+H43PyAKiwuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8+NQUi
BihTINPoaAR7Xh1RUxEVMB8GA1UdIwQYMBaAFHMEd1wc44WspAQFhk6puav+3pGz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTgwQS84NzhFOTg2RUQ0
REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhheWtCQVdHVHFtNXFfN2Vr
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N3UjNYQnpqaGF5a0JBV0dUcW01cV83ZWtiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTgwQS84NzhFOTg2RUQ0REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhh
eWtCQVdHVHFtNXFfN2VrYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPiS8H5BcFtwFDnvUNLhAtbggP+Auz8o5oMlZr9Zc/kwHlLvNp4K+EPl2f3Tl
9Zv7KjKtyXBjOhip3k7qgfc0S9bPzI0w/SMnAH7B8zSmPiAqjUy1x1RU9HwoFxMl
X/RmbpBFyD59xmrFe5qvDwSa7Oi8gasOcDN9TrSGwy97eD81+BfGBsw5bxKWcGfA
gneBU1YWLGDKrsLU+kTcN/F/4QFunOEhO2HdzARdZ7UbY9CHZ3jzGn71NdHUs6GJ
3Wc7ADk7wBBdjlaYKte1CctCw2tvL6A7VVm3xKR/f9GJUqMRT8s8++y1FieHVhLA
DqMbywY5pzlrOGiBtsvDLKmpwA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:47 2026 by rpki-client