
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
File: bwlMAO-I_YtwgT1trctUaHYyjNk.mft (raw, json)
Hash identifier: Q4cdM7i/Ex8tWYP0TtwEdeKwcVwI2Z+K+jkw7mmBpBk=
Subject key identifier: 9D:BF:43:F8:29:1A:CE:D2:A5:CB:9D:CF:DF:96:29:75:62:6B:27:58
Authority key identifier: 6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9
Certificate issuer: /CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
Certificate serial: 2285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
Manifest number: 2EAA
Signing time: Wed 14 Oct 2026 15:30:20 +0000
Manifest this update: Wed 14 Oct 2026 15:30:19 +0000
Manifest next update: Wed 21 Oct 2026 15:30:19 +0000
Files and hashes: 1: bwlMAO-I_YtwgT1trctUaHYyjNk.crl (hash: IRmqnQJK1sTYSPAd1D90tq/9c0slHqpTXfEODnKHYw4=)
2: 44A88C482CA611F1A847C919C5833773.roa (hash: bKgCp4EHIIvC6tgJBK5J1/iYjgk0IVxADvyBY64+CAc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl
rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 15:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8837 (0x2285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E25, serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
Validity
Not Before: Oct 14 15:30:19 2026 GMT
Not After : Oct 21 15:30:19 2026 GMT
Subject: CN=6acfa00c-1aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:17:5a:9a:b1:30:3a:23:03:c2:3b:b0:25:80:
8c:4e:6b:b5:53:1b:7a:4a:b1:8b:f9:e6:e0:48:90:
fd:09:07:64:82:50:4b:ff:59:ce:8b:e1:59:37:7f:
d9:4d:2f:e9:42:7b:ab:0e:4c:02:1f:12:1b:ae:0b:
39:c9:28:76:31:5c:5b:44:c1:78:e2:f2:5c:6c:3d:
c2:00:d3:c7:1c:69:11:62:fa:43:40:77:62:2f:93:
69:b0:25:c7:2a:c8:dd:26:50:50:34:a3:c2:06:fc:
c1:5d:25:5c:46:47:b6:06:32:a8:f1:dd:01:e5:8b:
14:3e:d9:c9:f9:36:ff:2e:92:28:c0:ec:05:b3:1c:
26:76:8f:e4:5c:22:f0:94:9f:2e:f9:d8:1e:38:78:
78:6b:56:a9:38:dc:b3:b4:9e:1c:1c:27:c3:35:76:
c4:d2:6d:11:d4:a9:1d:9e:d4:55:26:58:96:f5:ad:
de:f1:30:59:c9:5a:f5:bf:9a:bc:8f:e0:6d:6f:db:
8d:77:44:2b:c3:d3:40:75:02:d2:b1:7e:2b:7b:2f:
ab:91:f9:62:b0:b2:2a:a0:d5:1b:fc:4c:d5:8b:26:
7a:1b:d3:56:07:93:70:ba:76:25:24:12:d2:7c:98:
17:5c:4b:79:54:2f:50:c0:9b:c1:38:0a:d5:cc:e7:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BF:43:F8:29:1A:CE:D2:A5:CB:9D:CF:DF:96:29:75:62:6B:27:58
X509v3 Authority Key Identifier:
keyid:6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:c5:d1:7e:f3:30:0b:ce:20:cb:1a:47:c8:b0:a9:16:42:00:
98:ac:d3:29:25:b4:8d:d3:b5:c0:e0:4b:c4:e4:15:3b:39:25:
ec:aa:9b:fc:98:6c:0a:9b:fe:a4:d1:8f:78:2e:62:e2:d1:95:
42:7c:76:d9:a2:b0:c9:07:6f:30:81:9c:e9:8b:98:a1:d5:2b:
57:bc:e7:38:4e:93:0c:17:a1:97:08:27:75:7c:c6:c9:44:23:
df:96:6f:3c:2f:11:83:4d:e8:26:07:8a:a2:98:83:a5:30:8f:
fc:fa:60:1e:8d:bd:b1:21:d2:ae:b5:d8:a8:7e:60:69:1b:f4:
ab:41:58:ee:fc:6f:78:61:67:ca:ba:92:a1:1f:bc:cf:44:fe:
bb:21:f7:9e:51:18:43:8b:23:f8:63:9a:34:37:2e:2f:36:33:
cf:e2:db:d4:9b:44:af:8f:7d:54:23:57:82:99:52:51:9d:53:
14:fe:9c:b9:94:dc:95:45:19:a1:9e:f7:45:40:1f:15:7a:b4:
91:d3:ab:b0:09:e3:0b:a9:0e:aa:4d:d8:6f:f3:7d:cf:6d:bd:
4b:cf:30:99:9c:ff:ce:b4:1b:cc:26:7a:63:12:d1:9c:e5:c5:
5f:71:12:f2:55:bb:05:3e:fa:38:9b:e3:32:e7:00:8d:a1:33:
ae:b1:47:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:52:55 2026 by rpki-client