
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json)
Hash identifier: b3EsW3UyN0kA02OP2X8YawH0CYXf3QS6UjEI1swjgcQ=
Subject key identifier: E9:DD:BD:6F:94:7D:76:E5:72:1E:48:EA:E1:30:F7:C1:9A:46:35:AF
Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22
Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822
Certificate serial: 09B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
Manifest number: 09B0
Signing time: Sat 28 Feb 2026 20:14:07 +0000
Manifest this update: Sat 28 Feb 2026 20:14:07 +0000
Manifest next update: Sat 07 Mar 2026 20:14:07 +0000
Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: U6XGr9b/hTj/Xa/9AOLQn5dkiDGPhHiVafsUWht1XUI=)
2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: 0cYkjMp/gtYpvp6HxvXFQpX0b09jvpiPKpMRszh/Xsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl
rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2487 (0x9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822
Validity
Not Before: Feb 28 20:14:07 2026 GMT
Not After : Mar 7 20:14:07 2026 GMT
Subject: CN=69a34c8f-30e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:95:ab:5e:15:26:f7:ab:e3:03:56:f7:a3:
66:ec:19:33:f6:6d:64:aa:eb:d8:c1:9e:f0:b7:f6:
61:42:f1:d1:1b:1b:76:ab:a1:23:fc:20:34:4b:f2:
9b:6a:a2:84:a7:27:96:27:8c:8e:53:76:93:e9:54:
5f:20:18:8a:21:62:75:7c:03:4c:7c:f6:6d:40:ed:
51:24:88:b7:88:8f:85:a4:70:e5:d6:aa:5d:c7:97:
05:d6:5b:f8:fc:5e:6b:fb:c1:be:61:2b:3c:d6:62:
de:7f:b3:6a:7a:8a:a4:4a:20:c4:a1:30:f0:73:67:
49:a6:e5:13:b2:d6:2a:82:af:67:68:ac:71:08:da:
b9:79:45:a9:44:d1:be:e6:e8:01:ac:0a:14:23:93:
a4:e5:9b:1e:3a:43:d7:9d:e1:22:23:fd:7e:f5:36:
73:44:14:45:09:a9:64:ad:ec:38:f8:21:cc:15:c1:
13:31:7e:8a:33:e5:81:bf:4f:0f:c1:1e:af:63:88:
0d:9c:43:1f:08:0f:a3:8f:03:bd:0d:f4:f5:3b:ff:
78:e7:0a:99:b4:78:5b:93:2b:cf:f5:e7:37:0c:b6:
b5:dc:eb:a9:ed:7e:4f:99:0d:51:df:45:2d:1d:76:
57:5d:a3:83:e2:a5:0b:d1:7a:91:b1:68:c1:7e:a0:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DD:BD:6F:94:7D:76:E5:72:1E:48:EA:E1:30:F7:C1:9A:46:35:AF
X509v3 Authority Key Identifier:
keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:ce:80:d3:80:a5:11:7c:8d:41:4f:0e:ea:35:1f:87:35:64:
02:14:78:5c:e4:cb:85:1e:0b:22:5d:c8:9b:00:67:86:67:ac:
0f:a1:66:2f:72:d8:62:f0:2d:6e:70:e2:e6:da:59:a7:ea:ed:
b6:6a:34:ec:2c:b1:e5:a3:3a:77:e9:bf:13:20:74:9a:10:89:
2f:fe:a6:5b:96:1a:ce:11:37:15:e9:20:7b:b9:40:8d:d5:7d:
72:3b:ea:8d:b0:28:3d:3d:ef:a4:17:13:7b:8b:0e:59:8a:37:
70:67:e7:50:d6:e4:48:fd:88:34:70:29:2e:ec:83:ca:12:77:
08:a4:cb:44:8f:88:f0:b1:d5:d6:3b:69:3d:03:80:77:42:ae:
aa:78:80:34:df:c5:8c:1b:b7:68:09:d3:d3:94:84:23:ec:6a:
f0:fd:4c:17:5c:dc:63:27:61:7e:3f:eb:6d:57:98:6d:27:19:
90:7a:04:fa:7d:36:29:e4:21:10:b0:2c:72:d5:0d:2f:c2:18:
0c:de:91:85:a7:a8:4d:21:6e:7f:67:d9:27:ca:35:15:8f:b2:
f3:6e:10:51:f6:88:a2:ba:4a:62:0b:5a:c4:fe:39:55:45:15:
04:cd:76:26:48:cd:08:90:71:99:9b:71:0b:59:70:56:ae:08:
c6:7b:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:28 2026 by rpki-client