
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
File: cwYbqQQBgewK602PbgA_g4_JxI8.mft (raw, json)
Hash identifier: QaH4YNLgNaPPhWIRD5DR0gVs0d+2YRvsfJ0R7ISpqYc=
Subject key identifier: 46:7F:12:47:B8:16:A9:DE:21:29:29:8F:07:01:BE:24:1C:F4:50:8D
Authority key identifier: 73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F
Certificate issuer: /CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
Manifest number: 01A7
Signing time: Sat 13 Jun 2026 04:08:40 +0000
Manifest this update: Sat 13 Jun 2026 04:08:39 +0000
Manifest next update: Sat 20 Jun 2026 04:08:39 +0000
Files and hashes: 1: cwYbqQQBgewK602PbgA_g4_JxI8.crl (hash: e1J15xEpnMeO8L7RqjD4K/v2TnPnbrbT72NxuXZmm2s=)
2: 7D2E766CE5AF11EE9A0A642FC4F9AE02.roa (hash: kbTV9f4IWgZK9S4apMSRBWK1zjlS8Xrya9owJXlI6Ns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl
rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65AC, serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F
Validity
Not Before: Jun 13 04:08:39 2026 GMT
Not After : Jun 20 04:08:39 2026 GMT
Subject: CN=6a2cd7c8-641f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:54:38:21:02:3c:6e:aa:8b:6b:b9:3b:73:
6c:60:fe:0b:df:5d:13:b6:fb:56:95:11:1f:a5:68:
d8:58:c1:7d:fb:41:c3:82:67:2b:67:f7:9f:de:4e:
d6:2a:cf:32:1e:6c:60:15:8b:42:47:c4:d4:f4:12:
a3:64:ad:6c:a8:4d:62:b0:77:15:0f:20:02:cd:8b:
34:2a:d7:d7:29:65:f4:87:69:12:cb:09:3e:f2:f5:
8f:a3:42:16:8a:ac:36:6b:98:a6:00:ab:b7:8e:51:
80:a5:e2:6b:b3:3f:48:ed:38:42:9d:93:ed:83:69:
a7:89:25:2d:36:56:00:2c:30:96:0a:93:7d:fe:c0:
b0:77:6f:38:cb:fe:cb:7c:df:e7:a6:d4:fc:4f:af:
75:30:10:5c:3c:07:2c:8f:e5:8e:57:c4:e5:f4:43:
20:d4:12:da:93:9a:3f:7a:aa:0f:a0:8a:d8:65:c2:
12:33:70:42:a2:31:e6:3f:cb:c0:47:27:a9:c4:22:
e0:7b:8b:c2:12:e6:57:38:fe:9c:ad:1f:15:b0:51:
c4:ee:3f:77:db:f2:70:27:e8:31:c1:d5:2b:44:ef:
f3:47:87:c5:0c:93:cf:36:b9:74:1c:ab:86:2c:06:
64:48:2b:e7:a0:be:19:71:07:8c:7f:e7:8a:51:2f:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7F:12:47:B8:16:A9:DE:21:29:29:8F:07:01:BE:24:1C:F4:50:8D
X509v3 Authority Key Identifier:
keyid:73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e1:03:be:ad:ce:c5:47:d3:59:71:81:db:b3:7c:00:f1:6c:
d2:af:e6:1d:44:41:80:75:ae:fb:be:c5:95:42:35:73:77:bb:
20:15:e5:51:1f:b4:d3:d6:94:9d:7c:a4:d9:94:e9:f1:59:6b:
4c:eb:ab:36:cd:1e:f6:93:ff:1c:98:68:15:68:12:80:42:5f:
57:8f:f6:9e:50:44:74:eb:64:98:78:6d:57:af:d9:ec:83:78:
43:15:bf:55:e0:a3:04:a5:6c:0c:9a:d2:1c:f1:38:f9:b6:f6:
31:03:94:a3:97:41:66:db:6f:1a:b7:c0:11:60:1f:8b:f8:c4:
af:6e:0d:70:ce:14:7e:77:d0:59:55:a3:1e:52:6f:8b:91:62:
3e:91:f0:8a:2f:ef:d6:f7:31:6e:68:bc:2f:40:7b:c6:e0:58:
ce:5d:a2:9c:70:fc:a5:7b:73:cc:11:ef:17:a9:71:36:a2:f5:
2b:89:31:94:38:cb:70:f4:89:1f:3b:8c:14:a2:0b:c6:ee:79:
a0:f5:cb:37:bc:7a:1e:0f:08:2a:fb:6a:7a:33:1d:e9:98:14:
74:3d:d3:4c:b7:9b:02:bf:a4:ab:91:34:7e:b6:a5:f4:44:29:
fe:f8:da:3b:81:3a:b4:a8:f8:e3:a3:1e:eb:2c:48:67:c8:e6:
8a:fc:c4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:27 2026 by rpki-client