
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
File: MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft (raw, json)
Hash identifier: Pz3Dej2NQmqoueebQJTBzqp+EoTz6cOl7m8uC8ZfHr4=
Subject key identifier: 1B:B5:F4:CF:68:5F:33:2F:C1:7A:41:48:3D:26:22:81:63:74:76:72
Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Certificate serial: 06CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
Manifest number: 068C
Signing time: Tue 24 Mar 2026 22:24:26 +0000
Manifest this update: Tue 24 Mar 2026 22:24:25 +0000
Manifest next update: Tue 31 Mar 2026 22:24:25 +0000
Files and hashes: 1: MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl (hash: Mecn+FmcTOMV6t8ymW21bfzWS5crpsqPnJnx6xKjKmw=)
2: 70A511E6ECD111F09C92E5176E6F56BC.roa (hash: 4kvY15kmoRibeYszxVkHrvlLmTn2DqrfKOexn1KZ4Sw=)
3: 40583EE4424311EFB787BD3AC4F9AE02.roa (hash: 20QRaNN5HpjNTE0DjTJaVPeRVD8X2idK/zhTnjiKhQE=)
4: D4A6E66C184411F1A6C9F001253D8C67.roa (hash: RCo97+BQ7c4x9Y7DEYvpGWpLOBI7K1vi8X0A+4tNDLU=)
5: B7BBC928FEA211EDB9013076C4F9AE02.roa (hash: j6RfXO6V8txTwl+e1nfWngitaMdhNY8igbMKNAWQnn4=)
6: B87A46B4FEA211EDB9013076C4F9AE02.roa (hash: LJUjSG4B9nMQjlI/SiJALAQkrtQ8jXDsff/H6xkFjlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1743 (0x6cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Validity
Not Before: Mar 24 22:24:25 2026 GMT
Not After : Mar 31 22:24:25 2026 GMT
Subject: CN=69c30f19-3373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:0f:ff:de:d4:af:39:9f:f6:c2:d8:ff:bd:
00:5f:c2:bf:7e:fa:cd:df:47:7d:25:7b:88:5d:f0:
62:e3:90:fb:40:f5:4a:96:8e:80:ba:9a:a9:df:d4:
06:da:58:c4:ab:2b:29:fa:0a:c6:89:29:28:6b:2c:
e1:4d:c7:d6:70:41:bd:15:4e:33:3c:4b:de:c9:b2:
fa:ff:6a:cb:e1:fe:c4:35:0e:ae:50:d7:81:82:dd:
06:91:fd:10:74:0b:d4:1d:10:8e:6d:11:50:df:01:
38:34:e3:3b:c9:cc:f2:dc:68:53:26:e0:c5:24:c1:
16:b3:66:a6:d6:34:02:99:b3:07:2d:07:6d:58:81:
43:89:0a:1d:42:7b:b1:85:3e:70:6d:7c:e1:28:95:
2c:75:24:2f:15:93:80:89:66:0c:6f:96:03:ef:19:
64:71:88:f4:f3:7b:24:f8:38:e1:dc:f1:6c:10:7d:
c1:83:ad:c1:39:a1:51:51:76:21:6f:7c:b0:fc:43:
06:e0:5a:20:ee:26:27:fa:c9:9c:3d:16:8f:d8:72:
fc:da:38:f3:86:9e:b1:25:e9:51:7f:31:61:00:bc:
90:29:d3:8a:60:4f:7f:9e:a6:2b:da:8d:8b:f0:1b:
ed:8c:9c:c3:5c:02:74:b0:89:d8:92:a6:7f:92:5c:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B5:F4:CF:68:5F:33:2F:C1:7A:41:48:3D:26:22:81:63:74:76:72
X509v3 Authority Key Identifier:
keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:5f:c3:6c:11:74:33:b7:ac:ad:58:fc:33:74:dc:a7:e5:8a:
61:b0:64:1b:87:2e:c2:87:0a:a9:48:49:ff:d7:67:51:fa:c3:
27:e5:bc:d5:da:05:3e:0e:74:cf:64:a2:36:bc:df:dc:e6:bc:
0b:a1:ae:bd:d2:5a:d7:9a:1f:9c:d0:7c:a8:4d:85:07:02:da:
f7:85:81:dd:90:5e:22:fc:7f:64:74:c4:a1:13:61:29:8d:78:
06:3b:04:c2:74:46:e3:30:a2:64:3e:0e:0d:ce:5a:3e:20:05:
77:cd:82:43:be:d8:92:6f:14:92:cb:20:60:10:d7:4f:1a:e4:
b9:49:bd:ed:d4:1b:e2:47:73:00:96:85:b0:3d:55:1f:8c:e3:
82:3e:d5:e4:95:b1:96:52:89:c7:dd:f1:b4:73:fd:23:ad:b5:
c4:42:79:f5:f0:d8:c1:09:00:67:ad:6f:b4:9a:83:f7:fa:6e:
2f:9e:10:8a:54:af:de:4e:6f:31:e6:4c:cc:24:92:23:d9:8e:
44:08:7f:32:13:0c:1a:36:95:05:e3:1f:92:ee:f6:2f:8b:39:
89:e7:5e:68:38:70:6e:60:22:ef:03:8e:2a:ce:07:e1:32:23:
cd:33:3f:fd:eb:e1:ea:7c:9a:7a:08:cd:63:43:a0:f6:7f:35:
a4:c2:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:17 2026 by rpki-client