
$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json)
Hash identifier: Vt7Xa2Sevgb0nTrOxmJ4z5iSxZYCAkizXyReLPDTK6Q=
Subject key identifier: 1E:1C:BC:55:E3:4A:5E:29:B1:3C:A7:93:5E:9D:45:6E:30:34:AD:E1
Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Certificate serial: 03B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
Manifest number: 03AE
Signing time: Fri 17 Apr 2026 00:35:58 +0000
Manifest this update: Fri 17 Apr 2026 00:35:58 +0000
Manifest next update: Fri 24 Apr 2026 00:35:58 +0000
Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: 7DVDkjjh+7mxQZY8TzZAUHKS7XO1HYYimVtMeSaDgEg=)
2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: nomqtva7ggVLFevc3wGgCUafYyn97H4GgqbrGIpWBXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949 (0x3b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Validity
Not Before: Apr 17 00:35:58 2026 GMT
Not After : Apr 24 00:35:58 2026 GMT
Subject: CN=69e1806e-3b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:f5:04:58:11:2c:00:68:bb:7d:1c:d5:7d:
90:56:e7:63:e9:22:9f:21:24:78:16:83:30:0e:6a:
a6:5d:17:61:13:83:6f:78:42:51:7b:4d:46:0b:bc:
34:ed:1d:2b:a5:ab:2d:fd:c7:46:8e:eb:40:41:06:
25:37:fd:d2:96:f7:62:74:9c:32:56:bb:45:d5:f5:
7a:3e:b3:19:a6:82:53:e3:bb:68:71:32:b5:76:53:
aa:13:d8:bf:6c:52:f8:5a:df:e5:63:db:3f:15:be:
3f:a6:81:42:3a:14:f9:92:5b:8e:47:60:e8:4f:23:
fc:ef:c9:f3:92:dc:59:19:e9:ba:db:73:5a:2f:95:
e9:24:3f:ae:06:7b:bf:53:ac:fd:00:c6:44:f2:ed:
0b:bb:bc:13:db:e7:76:e9:4f:3f:3f:14:0f:a5:8e:
86:64:34:3a:cd:1f:7b:1b:3a:ed:26:00:d9:dc:72:
3b:9a:16:bf:de:94:ba:9b:10:c8:25:1e:9f:f7:44:
19:58:45:91:60:31:18:21:10:18:09:90:38:9a:3a:
45:8e:7d:22:1a:12:be:5e:0b:cb:31:49:98:e5:80:
89:84:3a:fd:d2:42:75:c6:6f:de:24:a8:2c:84:02:
0a:36:dc:75:3e:88:68:af:3e:c0:12:19:2d:8d:7a:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1C:BC:55:E3:4A:5E:29:B1:3C:A7:93:5E:9D:45:6E:30:34:AD:E1
X509v3 Authority Key Identifier:
keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:24:ac:eb:a5:db:94:7b:9c:cb:fa:13:00:75:b5:62:0f:da:
06:32:55:31:d8:3e:81:98:69:10:82:24:60:20:44:67:b2:57:
f2:41:6f:ca:71:f7:14:7c:92:30:2d:d9:47:13:3c:9f:1b:c1:
ff:4c:78:49:4c:05:d2:eb:be:e9:f3:c0:4f:28:16:af:76:b8:
2a:96:c2:ec:d0:d2:ad:b6:19:a8:5f:0d:21:fe:33:18:85:95:
95:36:63:80:bb:73:73:98:9d:ec:2d:bc:52:6d:5d:2a:bf:d1:
27:40:99:dc:c9:34:7d:6a:02:65:ae:a9:4e:b5:b8:95:9f:2f:
47:44:3b:0a:ba:f4:e8:8b:86:13:35:22:95:d9:64:d7:b4:47:
e5:fc:bd:04:0a:b5:b6:15:a1:74:ba:4c:7f:f2:06:ce:d4:40:
63:28:c5:0e:f4:e7:d4:d6:dd:97:52:52:fb:d2:d0:d4:53:ee:
da:bc:f1:26:b2:2a:8c:aa:7e:01:ad:08:12:e9:09:07:aa:ce:
77:d8:a3:ed:63:e1:2b:fe:c8:a2:2a:3f:54:20:5c:cc:f2:c9:
f0:62:52:ee:bd:96:bb:a5:0b:2e:6a:53:ef:62:4d:d2:a3:c8:
ba:3e:63:69:6a:5f:fe:3f:e3:27:f6:6e:27:df:08:50:d6:1c:
bd:61:8d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:06 2026 by rpki-client