
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
File: cwyRiCmzP6bI58jQUnsmzFC5NS0.mft (raw, json)
Hash identifier: 7dIq3NnZxgUxEuf6aYmCaAgekqvoheEeM/kOB5ivn7c=
Subject key identifier: 1F:26:64:C5:91:9D:21:93:A7:7B:32:BC:A2:9D:FA:46:82:A2:F2:FC
Authority key identifier: 73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D
Certificate issuer: /CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
Certificate serial: 0231
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
Manifest number: 022A
Signing time: Mon 02 Mar 2026 01:18:32 +0000
Manifest this update: Mon 02 Mar 2026 01:18:30 +0000
Manifest next update: Mon 09 Mar 2026 01:18:30 +0000
Files and hashes: 1: cwyRiCmzP6bI58jQUnsmzFC5NS0.crl (hash: DoUllnVs5IQNLaUVWuLtGJ/B2UGdYONeQI7+/Fonlu0=)
2: 1B010960CD2211ED8A66486BC4F9AE02.roa (hash: 4TQYkH8AoWjbT+Svxs5AnQ83Cfk6vgNgAFDSksmAXXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl
rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FB6, serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
Validity
Not Before: Mar 2 01:18:30 2026 GMT
Not After : Mar 9 01:18:30 2026 GMT
Subject: CN=69a4e567-0ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:79:0a:81:67:a8:e4:1f:99:e5:4a:93:18:
51:48:cc:15:81:47:12:a8:67:dc:5a:32:93:80:80:
97:f3:61:f6:bd:4f:df:c3:0a:31:fc:b5:77:b8:2e:
0c:1b:58:37:aa:b2:49:bb:85:d4:ea:e1:30:4a:90:
4e:0e:14:63:93:5f:12:b3:61:5c:c0:44:ad:92:d4:
fe:3a:d9:c6:49:2a:60:23:2e:67:a9:d9:78:66:09:
e1:ba:cb:fd:68:57:b8:26:f8:08:0a:e7:20:cc:61:
8a:8b:f3:3e:12:41:02:ab:56:e7:da:88:88:8f:a7:
8f:17:ff:7f:af:c8:f7:de:9d:43:37:a2:45:1d:e8:
b6:dc:d5:0a:cd:93:99:57:97:48:e0:b1:58:eb:c7:
e1:12:34:a1:29:ec:cf:c1:2c:50:c4:67:de:ef:01:
49:47:67:8a:2d:71:76:30:ae:7e:d5:47:02:1d:29:
e0:6c:b1:b6:8b:6c:0d:0a:74:08:2a:42:c4:3c:30:
1b:e3:3e:2b:58:a8:98:40:91:92:be:c7:5b:41:3e:
c4:5a:df:b3:a8:11:61:c4:60:b7:06:e8:5c:16:76:
f9:c1:04:58:e2:40:e4:50:f2:04:a8:3f:c6:ec:22:
55:98:b4:db:f8:b9:e0:49:79:b1:fb:9b:68:18:1b:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:26:64:C5:91:9D:21:93:A7:7B:32:BC:A2:9D:FA:46:82:A2:F2:FC
X509v3 Authority Key Identifier:
keyid:73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:91:78:60:ce:69:ec:0b:b0:01:38:3d:1b:dd:8b:dc:e6:03:
18:b9:79:54:35:00:36:01:06:04:00:aa:06:fe:bb:32:1e:06:
98:52:d2:90:78:bb:df:71:c7:e7:62:a8:54:91:37:44:f2:90:
3c:50:01:f9:7f:d9:40:ee:11:04:e5:1d:dd:85:2a:63:8b:49:
35:62:52:e6:9b:09:ce:97:4a:13:53:42:52:ff:51:0e:6a:5b:
64:6b:43:61:9b:30:b2:69:dd:b4:c5:6b:e5:09:b6:7c:dc:3e:
a8:08:94:47:02:44:92:db:21:71:2c:35:1b:3a:d0:ca:6b:46:
07:b2:20:fd:7e:bd:ec:8b:b4:17:fd:c9:df:94:e9:0a:8a:cc:
62:35:21:fa:be:a7:2f:12:11:d1:e0:79:3d:1b:fe:99:9f:1c:
8c:57:09:a6:9f:28:2f:fb:fa:fe:20:54:10:9b:8e:cc:c9:32:
0b:ed:c1:80:f2:49:ea:8d:3f:7b:8b:0e:09:a6:ca:8e:77:bd:
91:db:24:3e:4a:3c:95:dd:05:14:1b:fa:e2:b9:05:cc:15:34:
7e:fb:67:de:2c:9b:01:cd:39:68:1e:92:e5:f2:53:43:e1:1a:
e9:da:88:64:31:df:57:55:98:ac:a6:87:9a:50:b9:18:bd:b8:
6d:68:09:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:01:40 2026 by rpki-client