
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
File: CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json)
Hash identifier: CKlGVlS5C3wwhPa8qp/V1OBnJZQosqTdGfmtEJGznLA=
Subject key identifier: CF:D0:AC:CE:60:2E:BF:74:D4:19:40:D3:45:3A:1B:50:88:F9:17:75
Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F
Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
Certificate serial: 105E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
Manifest number: 1024
Signing time: Sat 10 Oct 2026 17:29:30 +0000
Manifest this update: Sat 10 Oct 2026 17:29:30 +0000
Manifest next update: Sat 17 Oct 2026 17:29:30 +0000
Files and hashes: 1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: 3TjGQxdZDNU6F5PP9OixdITTwF6Jo1sE1s9piPM5k94=)
2: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: xxh6NZnNYpflyBEdhUUFw/SOYfLeyMddymrrtghmKYo=)
3: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: 9hYvbwxbeq3eQbiK5I082eBTN98qs1zJ9llIbiDaSww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl
rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 17:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4190 (0x105e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
Validity
Not Before: Oct 10 17:29:30 2026 GMT
Not After : Oct 17 17:29:30 2026 GMT
Subject: CN=6aca75fa-f758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:d5:7c:00:12:89:ff:15:54:fe:06:b2:ed:
ee:cb:5c:6d:2f:27:23:bf:7f:45:ea:94:cb:59:ee:
91:d8:c2:1c:5a:71:b6:db:65:7d:5f:4d:16:3a:87:
1c:ca:49:ad:21:cd:01:da:86:62:f0:e0:49:4b:5f:
e3:02:6c:32:09:a3:1c:cd:3d:ba:e7:a6:eb:95:c0:
1b:24:5a:0e:17:09:45:a3:c3:9e:78:84:66:74:26:
92:c2:29:dc:c2:f6:0b:9f:cf:40:58:0f:8e:dd:74:
4c:87:6c:48:f4:39:f9:0d:05:92:e8:3f:3e:e3:90:
0e:b3:76:98:c9:0a:61:17:d2:91:b3:19:87:92:32:
29:3d:41:8d:27:5c:c5:55:07:a5:26:af:42:e0:30:
d7:15:9f:19:fc:36:fc:ec:c4:04:75:01:c7:8e:79:
3e:39:e9:cf:bf:19:2f:40:c4:86:5e:3a:37:d6:6b:
7b:66:5f:c5:9e:c9:3b:4b:a9:14:88:ad:a1:e4:b0:
0e:70:15:35:0a:ba:ca:7d:a1:7c:7d:11:38:d7:df:
43:6e:b5:c0:47:43:eb:16:fa:41:52:dd:7b:93:20:
85:0d:01:44:e4:92:62:12:2f:a4:3a:76:f3:26:a9:
82:94:ff:e5:7d:aa:d6:e3:6d:82:64:11:81:fa:fd:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D0:AC:CE:60:2E:BF:74:D4:19:40:D3:45:3A:1B:50:88:F9:17:75
X509v3 Authority Key Identifier:
keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d8:b1:ce:60:9c:7b:9b:a9:88:fb:c7:90:be:0d:18:b5:30:
38:c7:c0:52:a8:35:6d:cd:0d:c7:4a:cb:68:b3:c4:b1:b4:0a:
83:3c:9d:47:aa:14:ae:46:5e:9e:45:1f:46:84:08:0c:e5:90:
03:11:30:8f:b4:7f:b2:f3:74:a4:16:26:f5:7e:bc:65:6f:19:
50:56:66:cb:bf:c3:bf:82:5a:9a:4a:e3:80:76:d6:26:02:57:
14:54:3a:41:8b:eb:aa:c9:51:e5:13:b1:27:9e:bd:f5:41:7c:
de:86:36:f7:59:66:c9:0b:f3:b4:00:02:b8:c5:65:17:7e:a5:
f6:5e:66:6f:e5:3e:c7:d0:2d:06:b2:99:ac:a0:00:1d:78:33:
5a:5e:89:20:6a:c3:ec:b1:4b:6f:d2:56:1c:79:28:2a:01:e9:
34:9e:fe:a1:1b:05:5b:58:d1:59:92:c0:3e:7b:4c:9e:fd:d1:
32:81:e6:c9:d7:0e:87:9d:00:81:e4:da:48:6a:81:27:2c:70:
09:9b:e1:55:3c:49:bc:fb:ee:7a:cb:34:bb:58:60:4d:4a:f3:
00:01:b4:8c:eb:01:40:44:e0:88:4b:eb:d4:38:21:a8:bb:5b:
ab:e0:47:47:a9:38:f9:6f:25:8f:e9:7c:58:61:9c:dc:83:6e:
ac:08:ba:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkZFOUYxMTAvBgNVBAUTKDBCMDk1MjM2MjM0RTY5MzVCQUEzNDFFMzIzNUEzREI0
NzNBQ0M2N0YwHhcNMjYxMDEwMTcyOTMwWhcNMjYxMDE3MTcyOTMwWjAYMRYwFAYD
VQQDEw02YWNhNzVmYS1mNzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw63VfAASif8VVP4Gsu3uy1xtLycjv39F6pTLWe6R2MIcWnG222V9X00WOocc
ykmtIc0B2oZi8OBJS1/jAmwyCaMczT2656brlcAbJFoOFwlFo8OeeIRmdCaSwinc
wvYLn89AWA+O3XRMh2xI9Dn5DQWS6D8+45AOs3aYyQphF9KRsxmHkjIpPUGNJ1zF
VQelJq9C4DDXFZ8Z/Db87MQEdQHHjnk+OenPvxkvQMSGXjo31mt7Zl/Fnsk7S6kU
iK2h5LAOcBU1CrrKfaF8fRE4199DbrXAR0PrFvpBUt17kyCFDQFE5JJiEi+kOnbz
JqmClP/lfarW422CZBGB+v2HsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/QrM5g
Lr901BlA00U6G1CI+Rd1MB8GA1UdIwQYMBaAFAsJUjYjTmk1uqNB4yNaPbRzrMZ/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkU5Ri84QkUwNjNFMDdC
MTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FUVzZvMEhqSTFvOXRIT3N4
bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N3bFNOaU5PYVRXNm8wSGpJMW85dEhPc3huOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RkU5Ri84QkUwNjNFMDdCMTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FU
VzZvMEhqSTFvOXRIT3N4bjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX9ixzmCce5upiPvHkL4NGLUwOMfAUqg1bc0Nx0rLaLPEsbQKgzydR6oUrkZe
nkUfRoQIDOWQAxEwj7R/svN0pBYm9X68ZW8ZUFZmy7/Dv4JamkrjgHbWJgJXFFQ6
QYvrqslR5ROxJ5699UF83oY291lmyQvztAACuMVlF36l9l5mb+U+x9AtBrKZrKAA
HXgzWl6JIGrD7LFLb9JWHHkoKgHpNJ7+oRsFW1jRWZLAPntMnv3RMoHmydcOh50A
geTaSGqBJyxwCZvhVTxJvPvuess0u1hgTUrzAAG0jOsBQETgiEvr1DghqLtbq+BH
R6k4+W8lj+l8WGGc3INurAi66Q==
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:54:08 2026 by rpki-client