
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
File: e-hwMVM9L_QxwRpYeani2dyFJ_I.mft (raw, json)
Hash identifier: Z9yi6pEbVk8EWdI4G65IKY2QS4FVwKvbdiGwmCNELRo=
Subject key identifier: 88:15:C0:69:F9:23:BC:5F:84:B3:5E:E1:02:CE:93:3A:85:5B:BB:95
Authority key identifier: 7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2
Certificate issuer: /CN=A91C35C9/serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
Manifest number: 0213
Signing time: Sun 19 Apr 2026 02:38:10 +0000
Manifest this update: Sun 19 Apr 2026 02:38:10 +0000
Manifest next update: Sun 26 Apr 2026 02:38:10 +0000
Files and hashes: 1: e-hwMVM9L_QxwRpYeani2dyFJ_I.crl (hash: mae5DnBKbkVEQ5Tku6JWfnIaq5jHRhckd1Au6hw3BMo=)
2: D1315D7C0FDD11EEB007DA41C4F9AE02.roa (hash: kRGMaXV2RHNJEqYjq9seCAVmQioDFvn7XJ10IDk+uJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl
rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C35C9, serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2
Validity
Not Before: Apr 19 02:38:10 2026 GMT
Not After : Apr 26 02:38:10 2026 GMT
Subject: CN=69e44012-7234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:9a:17:63:91:7a:4b:85:05:b7:ab:b9:21:
54:bb:40:5f:97:2f:6c:85:ac:29:52:cd:4f:d0:3b:
dd:69:56:aa:0a:a8:f9:66:21:b4:81:67:16:6a:f7:
bd:e5:79:75:24:a4:5d:00:ca:07:d4:44:2e:8e:12:
15:f2:d8:62:bc:c8:e0:68:ec:04:ad:aa:96:be:6a:
06:fd:c6:71:58:79:d5:03:9e:60:69:3d:e2:01:16:
bd:fd:d5:7e:ff:d3:0c:ef:23:c0:be:0b:7f:84:fb:
ae:b5:d1:1f:2e:1d:dd:3c:1d:81:87:a0:e1:a4:e4:
33:8f:6a:1e:b8:e1:5b:2a:78:35:c2:23:9b:71:89:
ba:10:f6:31:2f:b8:06:13:40:98:b7:35:fd:16:65:
9d:37:c8:2a:cb:93:4a:55:e1:c1:c3:11:88:16:3f:
45:8a:4b:c8:cd:57:d4:0c:11:39:63:64:95:28:1f:
45:b7:a5:b9:1a:06:4a:92:8a:bd:46:24:64:3a:65:
d7:b7:67:13:4d:92:d0:a8:08:06:1c:6c:27:26:10:
1e:9d:07:04:5f:e8:29:db:96:85:26:0f:e4:1b:3b:
cc:cb:a7:8d:a2:c0:4e:6e:22:93:e4:b8:de:87:56:
4b:72:f7:db:9d:d7:7f:02:3a:7c:2b:65:dd:30:d3:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:15:C0:69:F9:23:BC:5F:84:B3:5E:E1:02:CE:93:3A:85:5B:BB:95
X509v3 Authority Key Identifier:
keyid:7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:e2:96:d9:26:2b:35:e1:a5:0c:76:74:c6:c6:af:e1:36:08:
77:28:19:61:77:ad:e0:7d:fa:bf:4b:93:c4:fb:f6:8b:f2:33:
dd:84:1b:68:c9:7b:2d:c4:2a:78:17:d0:81:15:9d:89:3c:f3:
25:4d:35:a4:e6:16:59:3d:e6:3e:37:52:9e:86:87:99:8e:41:
2a:d2:d8:4e:c3:30:a7:24:8a:b6:0e:b8:59:08:a1:b7:e9:ce:
46:13:0e:22:c1:d5:0f:d3:77:a9:58:72:ed:d1:c2:94:f6:d2:
9a:2c:f0:8f:d3:86:f7:52:21:ce:7f:61:fa:6d:dc:82:a1:ee:
e3:79:f2:30:fc:0c:67:11:6e:05:ba:0f:57:21:f4:4d:a5:f4:
ad:51:ac:f5:98:af:ba:de:b4:6d:87:b1:51:95:f2:1c:0b:b6:
d4:f2:e9:24:f3:3a:b7:87:31:9d:f6:17:5d:cc:1a:a5:71:0a:
d2:6f:b9:cc:e7:fe:46:90:96:8b:58:d0:aa:3a:5c:04:d5:00:
84:bf:d4:9b:80:35:61:0e:b0:a4:34:18:da:01:fd:9f:71:5f:
ea:90:6d:16:ae:ae:23:18:16:4d:12:44:52:15:26:15:6b:b5:
5b:d4:b3:d2:22:e2:25:cd:70:c9:59:7e:14:b5:27:ef:d2:1e:
ac:b4:0d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:57 2026 by rpki-client