
$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
File: bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json)
Hash identifier: 8yyMf0IralY/nzKXDcath85Tujs9Dmz4YUpVmRGi8sg=
Subject key identifier: 73:1A:CD:23:72:B3:AA:78:42:06:08:10:D5:EC:B9:EA:29:29:A6:D4
Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61
Certificate issuer: /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561
Certificate serial: 1143
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
Manifest number: 1138
Signing time: Tue 24 Mar 2026 17:07:38 +0000
Manifest this update: Tue 24 Mar 2026 17:07:37 +0000
Manifest next update: Tue 31 Mar 2026 17:07:37 +0000
Files and hashes: 1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: QUHXP2fLrEhK+YIK1RxeJmMUsnkqegB5JWjkMt5uLF0=)
2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: w7sXrnUGsDJc+cQ7IcP7P8MU3+8bOEuBq5H+umacKzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl
rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:07:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4419 (0x1143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91995D5, serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561
Validity
Not Before: Mar 24 17:07:37 2026 GMT
Not After : Mar 31 17:07:37 2026 GMT
Subject: CN=69c2c4d9-01f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:00:d3:a4:40:5a:0c:8a:68:44:95:5f:07:
d4:10:c8:74:ca:a3:da:a5:e4:18:51:77:5a:be:a8:
8a:a3:3a:5e:e9:75:2b:65:b5:e0:ce:e9:87:09:fd:
68:1c:73:2d:9f:dc:3b:82:a0:d5:93:d6:b4:50:1a:
f2:f0:28:c4:ee:fe:b2:cd:c7:3f:f4:a9:54:c4:c0:
f2:71:ae:4f:27:43:f4:8e:f8:2d:4c:c8:a0:db:9b:
4a:ce:15:1c:9c:53:39:24:ce:28:f1:9d:a7:fa:e1:
94:6b:75:6c:00:ae:4f:8c:e7:77:c4:05:7c:3c:74:
ae:00:fa:55:d2:b5:3e:54:ff:63:2c:1d:c2:62:1b:
5f:ef:76:3b:95:ac:5a:b3:af:0c:30:0a:e2:53:10:
44:24:9e:c6:0c:77:21:54:e4:07:5c:59:2c:9a:d1:
9a:85:24:72:1f:da:e7:4e:47:de:fa:c7:5b:0f:39:
94:86:2a:ad:3f:90:d4:b1:a8:a3:4a:08:48:16:21:
71:0f:d5:5e:2b:00:17:98:0e:96:6f:01:01:58:15:
00:ae:e8:c1:61:58:1e:7f:2f:c2:2c:ad:a0:1b:de:
79:32:77:36:c7:38:1c:59:8e:66:d1:fc:1d:83:21:
a8:17:76:e9:80:3e:3d:1e:e1:ef:67:a7:79:e0:f2:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1A:CD:23:72:B3:AA:78:42:06:08:10:D5:EC:B9:EA:29:29:A6:D4
X509v3 Authority Key Identifier:
keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:5a:3f:72:b7:6d:71:e7:a8:bf:fe:ae:49:eb:29:a6:06:7d:
e7:4a:24:7b:d4:1a:96:eb:ac:dc:0b:c9:8f:14:7f:16:a6:cd:
6e:86:55:0e:63:90:0a:1f:52:7e:43:7e:0d:f9:21:da:c1:60:
7c:75:db:3a:8c:9a:ab:e2:2c:31:9d:72:e1:14:d3:92:14:a0:
80:96:53:e0:54:a2:59:d1:a3:a0:e5:0f:7f:6b:8f:02:12:9b:
f1:78:33:23:cb:aa:7a:87:7a:a9:fd:04:36:7b:9d:a1:1e:bc:
3e:e4:99:de:49:f6:87:8f:ba:de:bd:44:84:0b:31:19:39:6d:
73:68:0d:92:4d:58:da:7b:3d:a6:29:07:83:fb:0f:10:92:78:
78:d2:bd:42:21:35:03:13:8c:bb:ab:22:1c:27:dd:fa:ac:e8:
72:49:3d:3d:8c:78:ec:61:9a:a9:56:01:8a:7b:50:3b:a5:6b:
f9:39:c0:d5:9a:86:74:3d:58:45:2a:cd:bf:0d:79:23:c8:02:
06:d7:4d:86:ba:4d:82:3b:1f:62:58:18:80:ff:87:25:57:f2:
c3:92:0b:c9:19:49:36:06:ac:fd:9e:ab:89:c8:d9:f4:85:be:
b1:e7:61:31:d6:4b:ab:bc:85:7b:f4:05:43:3e:18:e3:c6:59:
16:5b:25:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:25:46 2026 by rpki-client