
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
File: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft (raw, json)
Hash identifier: hxIYLQ0vaJYZTHAIw/SFNH3g6UXR9SY6Rq1lzFiBBcI=
Subject key identifier: FA:8B:78:C7:19:AC:0D:7B:0B:1D:5A:25:27:0E:CE:2C:09:79:6E:F2
Authority key identifier: 0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54
Certificate issuer: /CN=A91E9B39/serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
Manifest number: 2F
Signing time: Sun 01 Mar 2026 10:08:15 +0000
Manifest this update: Sun 01 Mar 2026 10:08:15 +0000
Manifest next update: Sun 08 Mar 2026 10:08:15 +0000
Files and hashes: 1: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl (hash: EnMwCtf6NWR9Y629AYAcoa+soubuwowua2qdaixvN84=)
2: 97B11C3CD29411F09264510FC4F9AE02.roa (hash: QApOxw4AB+QU5Y26DW3TDa/Ln50nbLLZSnM8Pz+sHv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl
rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:08:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9B39, serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954
Validity
Not Before: Mar 1 10:08:15 2026 GMT
Not After : Mar 8 10:08:15 2026 GMT
Subject: CN=69a4100f-1af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:3e:47:dc:23:8b:f5:de:fd:0c:f7:37:f2:
2c:12:39:60:40:03:bd:c7:f2:72:46:eb:de:f7:05:
31:ec:de:ee:b4:39:b9:db:fd:d5:3d:f1:7e:e2:77:
86:27:07:8a:fb:7c:9c:33:cc:a0:74:56:49:56:8a:
ab:96:50:aa:b5:81:d1:bd:45:58:3f:5b:23:47:29:
24:84:b7:9b:42:58:83:e0:6d:75:40:c5:ed:04:b5:
cd:40:7c:13:09:79:54:a7:a4:43:d1:95:f7:2a:91:
30:ad:69:36:f0:b6:67:ed:1a:5b:6d:ec:87:46:8d:
4c:e6:97:8c:7a:f3:2f:38:41:21:12:a3:50:59:c0:
cd:98:c8:6c:4b:9d:31:6e:3b:4e:95:e0:32:b1:84:
20:40:ba:3d:d2:05:30:8f:8b:c4:bb:e1:60:a3:25:
ed:93:b6:30:d8:b6:0a:a4:65:87:2a:0e:fe:a8:99:
bc:2b:c6:ed:36:54:63:3e:18:a9:af:0e:6a:2b:8a:
a6:4d:dd:ac:f1:00:bb:93:1d:22:4b:a4:d0:11:78:
ee:f8:bd:39:5b:fc:ca:e8:28:46:25:2a:84:82:15:
b5:ae:6f:aa:e5:18:54:d5:05:b9:be:18:a1:d5:91:
10:09:cb:e0:ae:11:11:c9:f6:38:5d:da:a3:e2:4c:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8B:78:C7:19:AC:0D:7B:0B:1D:5A:25:27:0E:CE:2C:09:79:6E:F2
X509v3 Authority Key Identifier:
keyid:0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:47:34:37:55:4d:83:5f:70:71:32:42:93:99:1f:33:93:b3:
1b:a2:7f:dc:dd:b2:15:8d:20:06:1a:ac:1d:4a:bc:01:c9:d2:
9d:7b:c7:08:f2:03:1b:5a:8b:eb:d3:4d:d2:71:58:ed:ca:53:
dc:12:a9:d8:ca:25:70:db:f0:4f:99:92:25:32:10:22:06:f1:
0f:3d:c0:fa:8d:95:74:fb:15:2b:74:65:20:10:c8:3e:97:20:
b5:20:c3:27:03:7c:9c:4f:59:4d:b4:d5:c7:37:e3:2b:9c:7e:
bc:7c:05:51:34:62:22:3c:0d:7a:f3:ad:fb:c7:d7:b1:64:3b:
b0:01:d9:49:94:9a:ce:a1:2e:25:95:2a:16:8a:6a:77:8e:73:
66:3f:51:f9:93:d7:44:54:81:e1:3b:73:e6:64:61:56:0b:b3:
72:b3:62:50:aa:77:03:fc:70:5e:55:b2:9a:44:4a:de:d6:6d:
9b:b6:58:b0:fb:b8:dd:23:37:00:ff:20:d8:67:0d:68:52:cc:
c3:b0:22:90:5e:7c:fd:2d:94:65:55:63:99:b8:6f:df:55:42:
f1:69:4f:ad:c9:6f:29:09:d1:e6:10:44:e4:62:4b:32:d4:ca:
98:e9:f1:c2:0b:8f:dd:40:aa:51:3e:76:24:3f:02:42:30:c0:
3e:ef:ae:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:42 2026 by rpki-client