
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
File: MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft (raw, json)
Hash identifier: G3jSJEqZF+LT1wkmL/lc7YFhG/a262jPdKqvTvOYGyQ=
Subject key identifier: F3:B6:38:2A:AE:A5:E6:32:50:D9:FF:51:7C:7D:F6:54:D6:F6:F3:17
Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Certificate serial: 06DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
Manifest number: 069A
Signing time: Thu 16 Apr 2026 22:35:18 +0000
Manifest this update: Thu 16 Apr 2026 22:35:17 +0000
Manifest next update: Thu 23 Apr 2026 22:35:17 +0000
Files and hashes: 1: MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl (hash: 9927E6U4+OgjQT5P/io3S+Y5UeWlOw0JJdWlr2aABWY=)
2: B87A46B4FEA211EDB9013076C4F9AE02.roa (hash: LJUjSG4B9nMQjlI/SiJALAQkrtQ8jXDsff/H6xkFjlE=)
3: D4A6E66C184411F1A6C9F001253D8C67.roa (hash: RCo97+BQ7c4x9Y7DEYvpGWpLOBI7K1vi8X0A+4tNDLU=)
4: B7BBC928FEA211EDB9013076C4F9AE02.roa (hash: j6RfXO6V8txTwl+e1nfWngitaMdhNY8igbMKNAWQnn4=)
5: 40583EE4424311EFB787BD3AC4F9AE02.roa (hash: 20QRaNN5HpjNTE0DjTJaVPeRVD8X2idK/zhTnjiKhQE=)
6: 70A511E6ECD111F09C92E5176E6F56BC.roa (hash: 4kvY15kmoRibeYszxVkHrvlLmTn2DqrfKOexn1KZ4Sw=)
7: 9B31D1A6345C11F1B54BE2329F833773.roa (hash: O65ZieU0flTwQCli9NuypBP6hkJ+OicNVNagDUX/Pqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1759 (0x6df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Validity
Not Before: Apr 16 22:35:17 2026 GMT
Not After : Apr 23 22:35:17 2026 GMT
Subject: CN=69e16426-8729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:a6:cb:70:45:c2:70:fe:69:5f:f6:ea:70:
6b:55:6e:36:b8:d1:09:cc:24:b8:67:de:4b:b4:3e:
0e:18:4f:51:df:fd:2d:88:b2:09:ff:8c:45:19:e4:
9e:e3:89:f3:c6:7f:74:cc:e0:17:d7:a3:8d:8a:85:
cd:7f:e5:43:6f:94:9d:43:19:4e:00:d9:9a:8a:0a:
17:b7:58:de:83:b6:49:1a:cb:77:ea:01:84:2b:f1:
d3:a8:fa:50:5a:92:e8:55:f7:53:07:d5:06:fa:1f:
f5:2a:17:1d:a5:4e:6d:a7:56:0f:c6:04:56:d5:b2:
8b:94:d1:09:2e:3c:71:32:82:3f:10:5e:30:bb:ab:
32:8b:1d:5e:dd:bd:28:42:b2:83:0d:16:19:08:bf:
c7:08:98:56:43:ef:6a:eb:be:85:d1:1c:be:0f:94:
7e:56:31:2c:19:af:7f:f7:04:6c:93:d9:73:b6:1a:
4d:24:70:5b:d0:cf:39:1e:14:58:c1:8c:e7:59:e7:
89:cc:07:5c:ec:69:19:f0:14:80:af:10:4f:16:72:
a4:0d:b3:73:5e:86:2c:62:1d:47:6a:4c:02:a8:a7:
74:88:52:30:8d:ba:d1:28:75:b9:74:86:36:bd:6b:
d5:0d:1c:4e:38:96:01:e4:cf:08:77:37:f7:b2:e0:
60:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B6:38:2A:AE:A5:E6:32:50:D9:FF:51:7C:7D:F6:54:D6:F6:F3:17
X509v3 Authority Key Identifier:
keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:07:43:60:11:98:89:93:a8:f4:92:bd:22:35:d0:07:a7:0b:
45:15:4a:b2:0d:3b:65:5f:d1:6d:59:0a:24:ab:64:af:db:f1:
a9:0d:df:fc:75:e8:9a:fb:34:6b:7b:e7:91:79:b8:ff:cf:54:
33:f9:b9:b6:92:1b:77:fe:7a:5a:54:99:5a:f6:c0:37:49:6f:
b9:ba:e8:13:ed:2d:4b:a6:33:ed:71:20:03:fc:8e:b8:6e:e4:
60:bd:5c:29:c9:20:a1:0d:1f:7e:05:1f:ae:4a:ab:9a:a8:05:
09:a8:5c:17:02:4f:4f:51:f4:34:a0:8f:cf:95:0f:86:84:4e:
71:b2:0e:5e:28:75:5c:c1:16:33:7b:19:53:65:0c:63:44:ce:
b6:e9:78:3a:59:ad:c9:96:16:ae:fe:56:33:d9:75:53:d9:ce:
2d:f5:fd:03:28:5e:22:c0:10:df:ce:b4:1e:09:30:00:6e:b1:
9c:00:d8:d8:fa:2c:ac:54:98:42:9c:54:07:4d:95:cd:50:40:
40:3f:06:2e:20:81:31:25:dd:01:60:6e:ac:e0:fe:0b:25:2a:
d2:3e:69:53:8e:ee:c1:96:8a:ba:6b:92:34:99:12:d6:49:98:
d5:58:00:98:a9:df:2e:94:82:5d:e1:21:85:15:6b:49:a5:11:
b9:a4:c4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:08 2026 by rpki-client