
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
File: CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json)
Hash identifier: Lh/73GqBMyFgB+MVapO56ifSULsAL6CVEqx4KwIr38E=
Subject key identifier: 92:33:C8:D3:CC:AA:B9:60:CD:0D:03:9C:87:38:7E:7D:06:62:6B:51
Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F
Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
Certificate serial: 1016
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
Manifest number: 0FDE
Signing time: Fri 12 Jun 2026 17:28:05 +0000
Manifest this update: Fri 12 Jun 2026 17:28:04 +0000
Manifest next update: Fri 19 Jun 2026 17:28:04 +0000
Files and hashes: 1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: D+zlRdO4AxrzxnhqqrFsVEDjXStQPop6NMf/aXcYv7o=)
2: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: LdvKEMxHF6LRdf8uDUGPZDjjr7RNd+qCPf5qkED55LI=)
3: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: xxh6NZnNYpflyBEdhUUFw/SOYfLeyMddymrrtghmKYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl
rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4118 (0x1016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
Validity
Not Before: Jun 12 17:28:04 2026 GMT
Not After : Jun 19 17:28:04 2026 GMT
Subject: CN=6a2c41a5-1f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:6e:16:b2:1d:2a:ef:21:05:5b:e3:26:86:
48:3f:3a:f3:6d:2a:e1:c7:a4:a7:40:23:1a:4b:29:
6d:04:e0:e5:c2:ec:00:47:17:65:a8:d1:0e:34:59:
db:ef:86:b8:b7:66:84:f2:b1:c5:89:c8:ed:16:46:
62:c4:e5:c8:96:a5:cc:70:3f:9c:04:dd:58:8a:81:
94:d4:19:bc:39:d6:b0:0d:8b:70:8e:22:00:de:0c:
2b:2c:8e:51:ac:a0:0b:4a:84:92:83:69:4e:60:b7:
f5:75:81:3c:2d:ba:54:88:91:66:31:d4:e0:22:98:
ec:97:4a:83:9c:73:25:45:56:21:a1:c9:d1:e7:16:
50:58:f7:91:1c:02:dc:e6:5e:6b:67:c5:f0:7d:4d:
cf:a6:7f:b5:43:52:6b:78:e9:12:7c:0c:61:11:17:
56:87:af:09:3d:46:08:2d:82:79:d9:29:b1:01:eb:
bd:7a:3e:be:10:13:32:5f:11:24:99:0c:a2:aa:3b:
b2:b8:9c:a1:1f:ba:01:a3:9a:66:29:10:17:67:a1:
78:b8:27:30:8f:e8:0c:33:a6:e7:e2:8b:c0:6e:07:
c8:58:e0:8f:73:51:80:21:62:b0:5f:34:62:44:e7:
eb:ae:ce:db:5c:13:25:3c:18:3e:be:03:c4:06:1e:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:33:C8:D3:CC:AA:B9:60:CD:0D:03:9C:87:38:7E:7D:06:62:6B:51
X509v3 Authority Key Identifier:
keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:74:e9:87:56:74:ec:46:2b:88:97:89:15:38:9f:6a:b5:b3:
f3:20:6d:02:ba:02:9b:34:15:b1:15:61:ed:b7:a1:99:70:97:
d7:74:5a:be:24:37:c8:cf:99:ff:5a:49:22:e1:fd:03:04:36:
97:de:8f:cd:61:2d:f8:a7:4c:cc:67:60:6f:ac:89:66:df:b0:
19:a6:06:fc:03:25:6f:e7:4d:51:1f:72:ca:9d:aa:f7:c0:51:
3b:df:48:1d:7d:e3:2b:63:03:07:5a:b4:69:a8:42:33:0c:32:
2b:44:c7:16:53:89:4a:9f:bb:5c:86:cc:6e:7c:b0:56:3e:3c:
12:12:64:d5:85:bc:28:87:d0:89:92:5e:9d:66:e2:70:07:10:
51:bf:03:26:c8:8b:30:da:1f:eb:69:ef:7a:9a:e3:85:d8:68:
d8:39:ae:3e:54:75:e2:1c:e6:cf:98:87:a3:cc:99:7c:4c:da:
a0:98:e0:8f:ee:f7:4a:1f:c7:fa:80:ff:8a:3c:bd:75:bd:6d:
91:db:cb:26:c0:93:74:2e:53:62:62:9b:9d:61:0e:f4:47:dd:
dd:84:7a:92:4d:7f:ac:72:b9:6b:b2:29:68:1e:f2:8a:ba:6d:
4e:4b:5f:2d:ea:5f:4d:b2:b7:3e:38:5e:03:c5:b5:f1:48:e9:
e8:dd:ed:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:19:59 2026 by rpki-client