
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
File: cwYbqQQBgewK602PbgA_g4_JxI8.mft (raw, json)
Hash identifier: 9+0uF98RgXkw3e1eoP4LCLk9vsXlvhqTr5CQ6Is7IPw=
Subject key identifier: 73:8C:A7:6F:38:C3:81:44:40:B1:26:B9:CC:A1:49:16:CF:49:1D:C5
Authority key identifier: 73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F
Certificate issuer: /CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
Manifest number: 018B
Signing time: Fri 17 Apr 2026 04:10:27 +0000
Manifest this update: Fri 17 Apr 2026 04:10:26 +0000
Manifest next update: Fri 24 Apr 2026 04:10:26 +0000
Files and hashes: 1: cwYbqQQBgewK602PbgA_g4_JxI8.crl (hash: UVHCR5DGiSn+evtwxPfN193RKaQk0Q7gJs/xg3sqeGc=)
2: 7D2E766CE5AF11EE9A0A642FC4F9AE02.roa (hash: kbTV9f4IWgZK9S4apMSRBWK1zjlS8Xrya9owJXlI6Ns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl
rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65AC, serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F
Validity
Not Before: Apr 17 04:10:26 2026 GMT
Not After : Apr 24 04:10:26 2026 GMT
Subject: CN=69e1b2b3-0050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a0:01:0e:9f:0b:4f:e2:2b:75:e4:4a:d4:8e:
fd:44:49:1c:4d:d9:95:3d:eb:68:9b:28:96:42:fa:
af:a5:a1:1a:87:72:23:2a:2f:7a:be:c3:d9:d6:ad:
76:de:4f:19:e5:52:43:be:28:0c:9b:88:77:f1:e6:
0f:be:12:d5:d3:cf:8e:a5:b5:14:2b:91:0c:9b:87:
4a:40:ca:2e:8b:01:a0:36:5d:fa:0b:44:9d:e4:e5:
b3:02:17:59:47:08:40:ff:39:37:a4:00:a3:96:9a:
b9:b1:88:e4:5b:54:51:4f:1a:a5:1c:2b:78:d9:75:
93:f8:3e:6a:ea:99:5f:1a:bb:03:d5:e2:2f:8f:0e:
61:b0:a8:90:f2:34:7e:63:2b:d4:0e:f2:e3:f5:48:
1c:8a:29:ef:65:39:52:eb:b7:34:cb:dc:24:b0:c5:
7d:d7:e1:2d:2d:94:1f:b4:23:b6:49:34:ec:4d:09:
51:81:07:8e:98:78:14:97:00:fd:4f:d2:bb:0b:af:
96:0d:c0:b9:dc:96:e0:77:57:31:2f:ef:57:f3:70:
63:d1:db:09:96:04:61:8a:22:94:47:90:1d:ca:45:
89:2c:80:fb:b7:05:7a:44:5d:7a:e2:06:9a:08:24:
c1:bf:6c:52:96:a1:fd:03:3f:d7:df:7c:1a:40:94:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8C:A7:6F:38:C3:81:44:40:B1:26:B9:CC:A1:49:16:CF:49:1D:C5
X509v3 Authority Key Identifier:
keyid:73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:ea:89:1f:bd:9a:55:99:ed:65:91:b8:71:74:bc:cf:f3:13:
e9:d6:35:47:44:c7:7f:89:63:1d:c3:18:2f:f8:58:48:ec:f6:
ea:db:16:e2:8d:65:fc:d9:31:60:ca:89:87:e5:ec:6d:dc:78:
fe:85:3e:08:9c:bd:86:14:48:a9:ac:ac:5b:73:86:cd:b0:7e:
e9:7e:8b:88:47:64:de:5a:a0:61:84:78:fb:38:3a:4d:45:c9:
08:10:b5:f3:63:60:fd:b4:fa:c1:0e:36:7e:58:ff:6f:14:29:
79:83:37:72:d5:a9:99:f6:ba:3b:90:be:9e:e9:dd:bf:e7:62:
7a:2d:37:2d:e7:0f:4a:1d:0d:6c:94:90:cb:ce:71:12:5c:90:
2f:51:4e:60:15:d0:a2:d4:c2:d8:44:0e:fc:1c:bf:0e:07:9e:
03:68:56:f3:30:c5:39:b7:fc:a1:1e:ae:3e:51:41:6a:e6:58:
bb:a5:6a:90:f9:a0:82:d3:6f:21:0d:c6:06:e7:c4:ec:87:35:
a8:1f:58:e9:31:c3:5b:0a:8f:86:8f:ba:dd:9a:37:41:7b:b4:
1f:c1:d4:5f:1e:8b:fd:40:19:05:bb:fb:ee:1c:4d:be:bf:06:
0e:f2:14:17:d4:44:ac:a7:61:7e:10:db:92:ff:7d:db:bb:de:
47:f5:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:59 2026 by rpki-client