
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
File: buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json)
Hash identifier: qtpZLZeyl2n5doLglzyDQbcOE+mJlb6gVC6XBq+N0S8=
Subject key identifier: D5:15:52:40:D2:7C:83:72:73:CE:FB:00:0F:01:BB:24:6D:55:15:41
Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24
Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24
Certificate serial: 0658
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
Manifest number: 064F
Signing time: Mon 02 Mar 2026 00:59:30 +0000
Manifest this update: Mon 02 Mar 2026 00:59:27 +0000
Manifest next update: Mon 09 Mar 2026 00:59:27 +0000
Files and hashes: 1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: QrVudsCGtYREAuoecz9PP97fHvHelyhiR2sEU6w96Ik=)
2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: NDR9ZBlCPG6TNFjpWR6oUi6H3yAwo0tj9PuG9qFDBEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl
rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1624 (0x658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24
Validity
Not Before: Mar 2 00:59:27 2026 GMT
Not After : Mar 9 00:59:27 2026 GMT
Subject: CN=69a4e0f1-588b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:06:d4:29:55:c9:95:8a:ca:d9:cf:9c:e2:
92:be:e2:43:26:53:26:7d:d9:a8:a8:03:d2:fd:d1:
76:be:b5:95:38:2e:c9:39:ee:f2:7e:83:dd:76:14:
70:c2:df:1f:cc:40:55:ff:79:c3:a3:87:4d:96:93:
75:3b:7b:7c:1e:28:89:7e:0d:6d:7b:96:df:c5:b8:
c5:eb:54:b4:62:8a:5e:ca:fd:b5:5d:94:5f:77:c4:
10:a8:24:ae:da:0b:5a:66:10:33:3e:d8:1d:e0:96:
eb:de:2b:d4:3a:f2:71:50:2c:53:ef:a8:98:51:3d:
69:6b:53:72:6a:49:53:e6:79:1f:84:2c:75:8b:fe:
0e:16:39:69:db:2c:10:7b:d7:cd:c4:d6:2a:33:8b:
6f:58:b2:06:69:a3:6a:b9:c0:01:02:d5:97:c3:0b:
15:75:b7:c4:f5:ab:44:25:f4:be:35:29:61:a2:91:
28:38:20:83:b8:3a:33:5a:41:61:35:9a:1f:ad:95:
2d:c7:2e:e6:ce:19:bc:79:e6:19:fb:69:59:24:db:
35:42:74:dd:ca:6d:fd:76:9a:1a:1a:17:73:2c:7c:
71:9e:e0:70:58:40:08:e2:a7:a2:bf:39:c6:81:dc:
77:04:46:bd:8b:2f:96:76:68:3c:40:0e:50:91:7f:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:15:52:40:D2:7C:83:72:73:CE:FB:00:0F:01:BB:24:6D:55:15:41
X509v3 Authority Key Identifier:
keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8c:09:8e:40:b1:1f:f7:83:c6:25:d8:52:d9:b5:69:4b:50:
57:44:b6:cd:6e:43:a5:40:de:06:c0:17:2f:3a:06:0b:7f:cd:
de:52:ea:d7:84:d1:bb:2e:a1:ad:14:80:fa:ee:79:67:59:23:
06:49:f1:cf:72:cf:d1:31:cb:ee:74:9f:88:87:3a:cb:cf:76:
80:1b:5e:cd:6b:1f:8f:83:3f:2d:5c:76:7b:ee:48:b3:ce:b4:
4d:ec:a0:ec:5d:a1:c2:e8:19:52:1f:f8:61:61:78:ef:58:1e:
39:3c:6f:1e:d5:b6:4d:de:b7:9d:07:6a:f1:f5:77:82:9d:cf:
9d:0c:d7:a4:03:bd:71:95:fe:8d:98:10:66:0d:96:f5:e4:1a:
b7:16:11:12:67:54:2f:3c:41:90:20:07:fc:a0:3e:8d:6c:66:
2f:e0:6a:c4:17:a9:92:df:51:21:23:fc:74:92:24:46:00:c9:
75:09:35:96:cb:21:7f:0a:02:64:3c:7f:55:8c:1e:d5:bf:92:
19:b5:cd:eb:9c:2d:ea:78:a0:94:63:c4:ae:e6:6e:ca:78:b1:
2a:77:0e:1f:9a:76:70:51:90:6e:54:34:45:66:fb:5c:53:6a:
dd:ce:fe:19:d5:fd:f6:04:e3:cc:d4:a9:28:ac:06:65:97:b8:
07:a3:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:31:34 2026 by rpki-client