
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
File: CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json)
Hash identifier: in0VCi0Fy8oZ5Pxl+Eu/+/uOm3JDxE/9TFvyvUduHPo=
Subject key identifier: BA:F0:D5:C3:91:44:74:23:E4:27:85:4C:3F:1F:EA:1D:EF:DE:76:B7
Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F
Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
Certificate serial: 0FF9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
Manifest number: 0FC1
Signing time: Thu 16 Apr 2026 17:26:54 +0000
Manifest this update: Thu 16 Apr 2026 17:26:53 +0000
Manifest next update: Thu 23 Apr 2026 17:26:53 +0000
Files and hashes: 1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: vHCwE0Gz3ov08MPRHW8uVL/Eb6sEjZNLN9BSqgNKmnU=)
2: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: LdvKEMxHF6LRdf8uDUGPZDjjr7RNd+qCPf5qkED55LI=)
3: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: xxh6NZnNYpflyBEdhUUFw/SOYfLeyMddymrrtghmKYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl
rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4089 (0xff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
Validity
Not Before: Apr 16 17:26:53 2026 GMT
Not After : Apr 23 17:26:53 2026 GMT
Subject: CN=69e11bde-0e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ec:b7:52:71:ad:ac:87:de:8a:ad:d8:5d:c4:
c7:b7:aa:8f:7b:fd:a5:78:46:12:6b:b4:94:10:74:
a5:35:99:50:47:f7:34:0f:37:85:a3:dd:ea:51:e8:
d6:7c:c3:eb:5a:ea:72:05:19:00:1a:a6:f9:9c:12:
ed:d6:92:99:78:a5:3a:34:3e:d1:bb:fe:3b:56:f2:
59:25:64:59:e1:fd:81:01:5c:f4:98:9c:2b:cb:0a:
1f:8d:c1:e5:58:26:0b:70:6e:ae:82:57:94:a3:e9:
7d:db:f4:f3:74:9e:bb:c7:f9:df:c8:ff:4b:35:5f:
38:32:90:46:59:84:bb:f7:36:00:2b:92:55:68:3e:
f1:6e:34:e0:39:dc:6e:f7:1b:ec:28:65:87:f4:56:
e6:91:3e:d4:13:a6:9c:d2:7d:ee:4c:69:62:38:01:
ae:21:4a:00:45:09:ba:e2:47:41:9e:47:fd:b6:3a:
5c:7f:04:51:7f:9c:60:34:2b:44:a2:33:52:b3:ab:
c5:cc:b7:a8:9b:84:24:79:86:ae:77:c5:32:11:90:
93:94:34:ef:82:cb:14:e7:23:0b:66:30:32:61:54:
a0:7f:41:06:57:04:79:4b:8c:cc:7c:a9:18:ce:0b:
ab:e6:77:3d:0f:99:b4:63:dd:f1:9e:04:3e:5f:87:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F0:D5:C3:91:44:74:23:E4:27:85:4C:3F:1F:EA:1D:EF:DE:76:B7
X509v3 Authority Key Identifier:
keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e3:3b:4d:d8:73:1f:53:f1:f3:69:2f:68:a6:98:00:55:0f:90:
13:5d:9a:60:c6:cb:a7:7f:50:66:21:41:02:61:e3:e8:11:a4:
44:99:e9:9a:54:6f:fd:80:99:fc:5d:98:1b:94:66:0e:a0:67:
1b:8d:10:aa:e3:61:b2:4f:53:4f:5d:0c:6f:68:24:c6:ce:2f:
30:53:fe:88:cf:e5:b6:42:fa:9e:f4:9a:e2:f1:68:59:2c:73:
1e:bd:a9:1e:54:26:99:c7:c3:a8:35:2d:f6:98:b4:5f:2e:49:
5a:9b:42:7e:cc:b4:e2:35:36:f9:6d:25:60:69:b8:12:ee:64:
30:7c:67:40:80:17:0b:e7:aa:a8:66:be:c5:c4:23:5e:fe:ee:
4b:a7:28:6f:c1:b9:02:ad:13:2e:83:a6:ba:af:7f:d2:28:b7:
55:3a:c3:ab:29:a6:f9:69:ce:4c:5f:9d:af:f6:a5:d7:67:1a:
42:a4:d3:23:ae:fa:ad:07:90:5d:30:75:f5:6e:cf:c2:e8:a2:
32:5a:9e:4c:97:2b:b9:60:9e:42:f8:97:4b:3c:cb:c7:fe:a8:
0d:27:2f:1e:ee:67:de:5e:92:b1:6d:57:a8:15:6b:d1:76:ec:
c6:64:36:e9:60:e2:4e:67:5c:21:c8:c6:4e:87:d6:62:d6:e6:
eb:36:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:32:36 2026 by rpki-client