
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.mft
File: sw-WMCVOp-QpHfb8ZKaYmBg3X8I.mft (raw, json)
Hash identifier: SANd+Mbjl7mlGzclf2FmzIcJjnclR6xmDZu0nXi4p/o=
Subject key identifier: CE:B8:A6:3A:C3:D9:24:95:B2:44:04:B6:88:9D:56:E2:09:93:DE:4C
Authority key identifier: B3:0F:96:30:25:4E:A7:E4:29:1D:F6:FC:64:A6:98:98:18:37:5F:C2
Certificate issuer: /CN=A91A9E58/serialNumber=B30F9630254EA7E4291DF6FC64A6989818375FC2
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.mft
Manifest number: A0
Signing time: Sat 03 Oct 2026 08:04:43 +0000
Manifest this update: Sat 03 Oct 2026 08:04:43 +0000
Manifest next update: Sat 10 Oct 2026 08:04:43 +0000
Files and hashes: 1: sw-WMCVOp-QpHfb8ZKaYmBg3X8I.crl (hash: fjupyYBrjRLR7KdKXO40cUd+gtyiSfzSb/7VrWOTsNc=)
2: F37A409031F611F1AB7DD4D994833773.roa (hash: 2l5TcfFesA4KvyBe2bzpYKxCe9H4gkdIV1Bn6Wja9ls=)
3: C9811862D9C311F09C41289D70D3641D.roa (hash: MqlUvUemQZaIaUMEF8dOrNDnhzZfz8Yjj783as3wBls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.crl
rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E58, serialNumber=B30F9630254EA7E4291DF6FC64A6989818375FC2
Validity
Not Before: Oct 3 08:04:43 2026 GMT
Not After : Oct 10 08:04:43 2026 GMT
Subject: CN=6ac0b71b-e6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:ba:34:3f:3a:96:a3:46:f3:3d:35:49:0c:
f8:1a:25:61:c7:6e:eb:88:1b:85:fa:f2:b5:20:4e:
78:3d:86:e9:ea:57:ea:f9:41:cb:61:89:59:c5:16:
dc:16:83:ae:b5:c9:2c:c3:32:9b:07:b1:5d:f7:52:
1d:36:76:a0:86:d8:d4:8d:3f:8a:a7:32:07:48:51:
b8:ba:3e:96:7c:3c:32:80:09:32:f3:da:93:63:55:
36:33:aa:4e:c4:88:df:40:e0:c7:77:d3:bc:f1:ff:
90:54:77:ec:a5:b2:30:9f:67:75:62:cb:65:41:6b:
6c:fd:ec:a2:75:67:76:82:ee:d9:c9:0b:01:22:f3:
a5:b4:39:e3:63:a4:6b:7f:d0:e5:ff:9d:e8:f9:d2:
ba:2f:7b:0a:17:a5:7a:7c:6a:58:3c:13:a2:80:e1:
2e:c0:8b:9f:45:22:63:99:68:b1:d6:47:bc:25:46:
68:3b:f6:5d:98:aa:e7:ea:18:28:7d:21:62:6f:d2:
2a:1f:eb:73:2e:78:9e:54:3f:ef:6e:10:0b:a5:da:
80:31:2b:27:8c:cf:74:e1:37:fd:6c:42:3c:0e:c1:
9b:e5:fb:b7:91:e6:5f:3b:ad:b0:39:a7:dc:81:7f:
31:78:aa:f5:e7:1e:53:25:7c:a8:d8:75:46:22:10:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:A6:3A:C3:D9:24:95:B2:44:04:B6:88:9D:56:E2:09:93:DE:4C
X509v3 Authority Key Identifier:
keyid:B3:0F:96:30:25:4E:A7:E4:29:1D:F6:FC:64:A6:98:98:18:37:5F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/E9D3FC98D68911F0A2FA37036CD3641D/sw-WMCVOp-QpHfb8ZKaYmBg3X8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3f:f9:d2:94:c1:ba:46:08:e8:b1:c3:2c:64:71:42:45:06:
b8:82:d7:02:7a:00:b6:01:48:51:63:27:1f:54:e3:a1:78:2b:
98:01:61:b1:26:58:f2:9a:86:83:f2:6e:44:df:4f:ab:40:f2:
77:31:35:41:5c:85:3a:3d:82:f8:0f:a4:ba:3b:5c:7c:dd:82:
4c:3d:49:ea:cc:e3:66:d5:06:87:30:ad:2a:cd:28:3b:c2:07:
5f:1a:de:8c:5d:98:5c:87:bb:ea:33:c1:42:1e:08:47:4b:43:
79:eb:d9:2d:3e:22:e7:a5:c4:6e:2c:0d:e8:60:ae:a3:09:79:
4a:b7:11:2c:06:fc:71:db:0f:19:5a:da:b9:4c:d1:a5:a8:b6:
94:6f:73:7f:f0:84:54:fa:c0:53:fc:e9:4b:f0:a4:64:84:55:
70:99:fc:24:31:f2:3b:b5:dc:fa:17:4c:b4:57:31:db:00:40:
4b:2c:4c:b2:04:2c:2d:cf:25:a1:17:c2:66:66:7c:63:10:b7:
13:94:9b:f5:80:5b:a2:93:f8:9f:ad:3a:b0:7e:6f:06:8d:56:
81:46:d6:5d:07:e9:b4:ab:bc:11:16:d7:da:ab:0b:2d:45:0f:
a8:bf:d4:02:7d:bf:5f:61:c8:16:99:8c:e0:d3:00:fc:d0:5a:
06:a4:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:08:15 2026 by rpki-client