
$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
File: bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json)
Hash identifier: pFmIRnbSn/JIWzT+xzQFw1nV0ie9+fb9okepuJ2AYNs=
Subject key identifier: 2B:C5:30:07:A9:E2:F9:A6:DB:96:74:AC:A0:38:56:90:B4:38:41:B0
Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61
Certificate issuer: /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561
Certificate serial: 1138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
Manifest number: 112D
Signing time: Mon 02 Mar 2026 17:14:49 +0000
Manifest this update: Mon 02 Mar 2026 17:14:48 +0000
Manifest next update: Mon 09 Mar 2026 17:14:48 +0000
Files and hashes: 1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: i8Hyn3kLF6n8nYKdfqkTl7su331muW2dT84EcJQGDj4=)
2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: w7sXrnUGsDJc+cQ7IcP7P8MU3+8bOEuBq5H+umacKzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl
rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4408 (0x1138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91995D5, serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561
Validity
Not Before: Mar 2 17:14:48 2026 GMT
Not After : Mar 9 17:14:48 2026 GMT
Subject: CN=69a5c589-1963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a6:74:fc:84:d3:17:cc:2e:de:60:f8:2e:90:
a1:5f:b7:4a:14:cc:ea:a0:60:dd:97:1c:30:b0:47:
54:76:8f:d2:18:31:64:82:ef:8d:7b:ae:06:10:89:
b4:2c:98:cb:a8:88:7d:bd:c6:21:34:b1:c7:89:ee:
ed:55:f3:05:53:20:d7:74:9d:78:28:af:ca:d8:ce:
f3:c3:7d:ae:a7:5e:7f:b6:42:f1:87:b5:ba:ca:40:
5c:1f:0f:02:b7:cb:6b:3c:7f:31:6e:d5:0b:8d:cf:
47:a9:c5:60:2c:f2:01:2d:12:f2:6a:c9:30:a0:ee:
fa:1d:e8:57:1c:34:b6:d0:43:1a:70:8b:94:e5:21:
3b:f4:15:26:23:56:28:f1:0d:8b:2c:a6:15:1c:b3:
8c:e6:ac:19:bf:23:20:af:29:38:2b:ba:08:7e:a7:
8c:40:1e:78:3b:f7:a9:a5:8e:e1:fe:ed:fe:40:80:
9d:1e:f1:39:c1:f2:cc:c2:60:8f:ae:88:83:c5:0f:
7e:c1:50:fc:09:0d:7a:72:c2:34:d0:cb:c0:c0:59:
49:71:0b:fa:d4:61:fd:38:25:2a:e4:83:f8:30:ac:
82:f1:af:12:94:ec:c4:8c:12:d3:8c:87:56:0f:1b:
22:af:59:da:77:66:42:41:78:18:44:1d:01:ca:79:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C5:30:07:A9:E2:F9:A6:DB:96:74:AC:A0:38:56:90:B4:38:41:B0
X509v3 Authority Key Identifier:
keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:eb:14:c2:50:a2:d4:02:68:25:09:4d:1b:f1:ed:be:18:2a:
2b:48:d5:06:bf:ed:26:6c:32:61:3d:fa:23:cd:2f:a6:06:0a:
36:71:d1:70:88:b5:f2:cb:c3:e6:e1:53:12:15:ce:6d:25:fb:
e7:05:f5:bc:45:c7:cd:13:35:86:e6:5b:a9:b1:fc:92:1a:91:
56:fd:ad:44:0d:de:e5:c3:9a:41:5f:10:b1:23:03:1f:28:58:
4b:e2:95:7f:44:4b:6a:9f:5a:37:e9:fd:26:c3:8c:9b:12:ba:
d7:00:97:15:4d:04:9f:d6:71:85:94:b3:5e:b1:37:d4:85:18:
e2:65:0c:a3:d0:e1:91:86:40:73:a1:79:e5:c3:79:39:22:c6:
df:3e:d4:8f:84:19:1b:63:f0:28:d0:6d:16:eb:a9:24:1e:7d:
50:04:96:a0:80:d9:bf:7e:9a:17:73:2c:eb:b8:09:54:e4:64:
2a:01:4e:48:bb:59:c3:3f:88:e3:7e:54:51:2e:75:b1:14:3a:
25:2a:f6:4f:a5:55:2f:99:51:01:8d:f6:5b:bd:ca:bb:be:c0:
f8:7d:22:b4:8b:51:8b:ae:1a:a7:16:25:41:c0:aa:ee:12:5b:
79:bc:bb:4a:d7:00:dc:68:6e:38:5c:a5:e4:b9:52:be:69:40:
6e:40:39:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICETgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk1RDUxMTAvBgNVBAUTKDZGMkMyMDc1NTg3NjRFQUI1MEVGODUwNjZGNzg1OTBD
RTVCMUM1NjEwHhcNMjYwMzAyMTcxNDQ4WhcNMjYwMzA5MTcxNDQ4WjAYMRYwFAYD
VQQDEw02OWE1YzU4OS0xOTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiKZ0/ITTF8wu3mD4LpChX7dKFMzqoGDdlxwwsEdUdo/SGDFkgu+Ne64GEIm0
LJjLqIh9vcYhNLHHie7tVfMFUyDXdJ14KK/K2M7zw32up15/tkLxh7W6ykBcHw8C
t8trPH8xbtULjc9HqcVgLPIBLRLyaskwoO76HehXHDS20EMacIuU5SE79BUmI1Yo
8Q2LLKYVHLOM5qwZvyMgryk4K7oIfqeMQB54O/eppY7h/u3+QICdHvE5wfLMwmCP
roiDxQ9+wVD8CQ16csI00MvAwFlJcQv61GH9OCUq5IP4MKyC8a8SlOzEjBLTjIdW
Dxsir1nad2ZCQXgYRB0BynlY5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvFMAep
4vmm25Z0rKA4VpC0OEGwMB8GA1UdIwQYMBaAFG8sIHVYdk6rUO+FBm94WQzlscVh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTVENS8xNjNCMUU3QzJB
QUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRxdFE3NFVHYjNoWkRPV3h4
V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J5d2dkVmgyVHF0UTc0VUdiM2haRE9XeHhXRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTVENS8xNjNCMUU3QzJBQUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRx
dFE3NFVHYjNoWkRPV3h4V0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUOsUwlCi1AJoJQlNG/HtvhgqK0jVBr/tJmwyYT36I80vpgYKNnHRcIi18svD
5uFTEhXObSX75wX1vEXHzRM1huZbqbH8khqRVv2tRA3e5cOaQV8QsSMDHyhYS+KV
f0RLap9aN+n9JsOMmxK61wCXFU0En9ZxhZSzXrE31IUY4mUMo9DhkYZAc6F55cN5
OSLG3z7Uj4QZG2PwKNBtFuupJB59UASWoIDZv36aF3Ms67gJVORkKgFOSLtZwz+I
435UUS51sRQ6JSr2T6VVL5lRAY32W73Ku77A+H0itItRi64apxYlQcCq7hJbeby7
StcA3GhuOFyl5LlSvmlAbkA5IQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:53 2026 by rpki-client