
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
File: awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json)
Hash identifier: CakVtqXvVIeFHx/FKzEMTg/pxjpqx0PJjFBKnMc2kK4=
Subject key identifier: E6:54:98:4A:85:4E:F4:09:FE:1F:6B:EA:B4:0C:E4:7C:C8:87:1C:7B
Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Certificate serial: 0CF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
Manifest number: 0CC1
Signing time: Thu 16 Apr 2026 18:24:32 +0000
Manifest this update: Thu 16 Apr 2026 18:24:31 +0000
Manifest next update: Thu 23 Apr 2026 18:24:31 +0000
Files and hashes: 1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: VtTAGuL+ks1WE8jqICe93zB2W8mi6GeMNBUa7kwKCLc=)
2: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: UNRqxb3T+0nOQ/GO8zWJElSOEcU0ZScoqyo9xYCh4+U=)
3: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: XSNUZ0r/o28q/R/sUwKxLrt1L1Gim57J92y6DiX5k8o=)
4: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: oZ5Fktk/X7IkMniZfmOwOSIMZJUooUAA4uRqYhgv5JA=)
5: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: MNLepmkmDKIhV6gh+S8mCUAnPQoTINkDmI9IbqljxRQ=)
6: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: Q/z2xPgEev/jp2CYBsFY4fwnHwuGTUM4Sob54bGfHrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3314 (0xcf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Validity
Not Before: Apr 16 18:24:31 2026 GMT
Not After : Apr 23 18:24:31 2026 GMT
Subject: CN=69e12960-b13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:69:16:be:de:ad:c5:cd:b9:80:3b:f7:a8:
ed:1b:bd:7c:ff:ca:9b:18:42:e0:51:18:4d:eb:ed:
9b:e8:a2:fe:e8:de:a8:24:3f:99:78:90:ae:65:d5:
9f:ca:63:14:ed:cf:f2:73:5a:2f:ff:1a:c2:1e:70:
48:e8:e5:44:04:12:a8:3f:e9:54:24:53:07:79:c5:
17:83:d1:b0:11:3a:f7:43:2b:4b:cb:6e:09:bd:e0:
91:fc:0c:a5:4b:d7:94:35:d9:26:16:c7:81:76:0d:
c7:cd:f3:2c:58:99:1e:b1:33:9c:1f:fd:67:2c:35:
5d:e6:21:36:d9:57:12:93:e2:6d:c9:11:34:07:c7:
7c:b1:75:65:88:b2:03:e4:25:a0:e8:7c:04:d6:81:
d8:52:0a:f6:e8:9e:43:58:6f:92:ac:71:f1:7f:0e:
59:82:55:00:41:3d:c5:40:c4:72:92:e9:db:03:c6:
c1:81:11:fc:21:a6:61:68:f2:d5:8a:0d:d9:4a:46:
12:f2:23:c6:f9:50:31:ee:44:56:24:fa:f2:1c:02:
2f:46:a4:13:73:c9:f6:fc:cf:63:02:39:f1:9f:a6:
87:b9:2e:da:f9:01:d7:4d:c7:25:85:86:46:61:16:
8e:c7:f9:73:86:ee:b3:e0:ea:30:d9:c5:88:11:02:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:54:98:4A:85:4E:F4:09:FE:1F:6B:EA:B4:0C:E4:7C:C8:87:1C:7B
X509v3 Authority Key Identifier:
keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ca:41:4c:3a:86:35:8c:5c:44:05:6e:76:a9:95:1c:21:17:
7d:0c:63:7e:a4:dc:21:8c:bb:28:35:4d:76:d1:67:09:51:36:
f7:47:c6:d3:de:e3:ce:35:9b:07:01:ef:2c:cb:e7:ee:29:6f:
c1:69:19:e8:70:ac:d5:cb:93:6f:6f:fa:9f:c5:83:5a:18:ae:
77:6a:2b:dc:a1:65:97:c7:c8:78:86:2e:dc:0d:af:48:c2:57:
78:fd:f8:2d:6e:bb:84:ac:df:a2:87:46:da:29:1f:d4:c6:6e:
c1:6f:98:b9:70:1e:cd:9a:1e:3b:c2:ac:71:6d:14:47:fb:ac:
09:21:db:3b:7a:18:1d:7d:ef:e9:41:49:49:9b:ae:7b:31:82:
47:43:26:a3:dd:87:7b:86:a7:52:ae:06:b8:d2:d2:36:7c:d2:
e2:aa:e8:44:5d:eb:38:24:d5:61:47:be:a2:81:31:62:2b:28:
8b:b0:ee:36:08:32:1b:f9:38:a3:5f:ed:88:a1:51:c0:8d:50:
73:13:b2:19:f3:0f:ca:69:7a:fc:0b:35:39:47:e5:b2:7e:3d:
e5:cb:4b:8b:d6:f5:e1:fd:6f:0f:9e:7a:23:4a:3a:d6:44:bd:
12:24:30:4e:a8:61:eb:4e:2c:8a:33:8b:9d:4c:23:60:aa:c7:
f9:df:6a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:44:12 2026 by rpki-client