
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
File: cwyRiCmzP6bI58jQUnsmzFC5NS0.mft (raw, json)
Hash identifier: 7Aian+ee3GKeiujEISctT7YM+hl8IWtIpOn6Ph6nf0M=
Subject key identifier: 67:42:FE:41:5D:51:5A:48:E1:95:90:6E:86:29:B5:FE:48:2A:CA:C7
Authority key identifier: 73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D
Certificate issuer: /CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
Certificate serial: 023D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
Manifest number: 0236
Signing time: Wed 25 Mar 2026 02:00:33 +0000
Manifest this update: Wed 25 Mar 2026 02:00:32 +0000
Manifest next update: Wed 01 Apr 2026 02:00:32 +0000
Files and hashes: 1: cwyRiCmzP6bI58jQUnsmzFC5NS0.crl (hash: psJpOor4RNrXXFGBo45cftPpruU1wIFmi3z+zw2+3Pc=)
2: 1B010960CD2211ED8A66486BC4F9AE02.roa (hash: 4TQYkH8AoWjbT+Svxs5AnQ83Cfk6vgNgAFDSksmAXXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl
rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FB6, serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D
Validity
Not Before: Mar 25 02:00:32 2026 GMT
Not After : Apr 1 02:00:32 2026 GMT
Subject: CN=69c341c1-4223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:24:43:09:d0:f1:87:81:a5:40:94:5a:e9:cc:
d3:b8:13:6f:d5:f8:fc:60:3d:26:5b:df:a5:7b:61:
1b:9a:85:ea:b3:f8:c3:3d:bf:06:c0:dd:83:87:ff:
12:6f:a3:11:10:d5:c1:da:46:4c:3d:35:3e:c9:06:
1a:76:7e:b8:ed:26:52:b0:6d:58:10:b6:b7:94:a8:
8e:ac:2d:11:50:82:f3:32:45:0d:f2:d4:a5:c1:57:
e2:3f:e6:e3:86:ea:a9:c0:52:ea:a1:2d:a2:28:b0:
77:a6:71:d3:4b:a6:3c:88:56:53:45:d6:3e:70:23:
91:af:2e:ea:ce:22:ea:f0:25:8d:6b:a3:96:ef:20:
86:b3:16:a5:fc:a0:c4:02:da:4c:22:ce:53:5a:f9:
5d:b3:1f:1f:2c:e3:bb:2d:19:de:06:e9:74:22:5b:
3a:14:7c:52:cd:2d:33:a2:a6:ec:43:44:71:66:63:
c2:c7:30:40:1e:c8:71:5a:17:3c:9c:90:b7:42:fe:
19:29:6e:ca:7c:18:d8:ac:6d:b5:b1:d7:24:f6:18:
13:b9:5c:f8:7a:b1:67:f3:9e:bc:49:4a:a8:21:04:
5f:44:6b:0a:ed:09:7e:22:33:f0:bc:2f:7c:8e:7a:
a8:4a:3a:5f:9d:a2:a0:fd:55:90:a0:2b:b2:fc:28:
72:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:42:FE:41:5D:51:5A:48:E1:95:90:6E:86:29:B5:FE:48:2A:CA:C7
X509v3 Authority Key Identifier:
keyid:73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e3:45:8a:83:9a:a0:fb:fe:79:f7:3d:60:04:da:50:2f:03:bc:
92:4e:4e:2b:78:d2:de:43:de:eb:8e:74:e1:7d:44:f7:31:8c:
82:4e:55:71:a3:e9:36:39:40:7a:53:75:b7:47:d8:14:39:2f:
71:9e:42:8e:ac:c5:21:e9:65:92:95:f4:d7:4a:ac:8a:30:0c:
21:be:d5:bb:97:9f:55:8d:e9:85:2c:e0:cc:30:de:19:78:17:
5c:22:d2:bb:42:ec:82:fe:66:6f:a8:40:4d:a8:8a:b1:1c:c5:
a3:84:b2:df:45:f9:b2:bc:af:3d:59:35:45:fd:6a:ec:a0:93:
1a:32:ca:dd:88:68:5b:b5:6a:f3:ad:a8:25:b8:00:f8:5e:95:
6a:90:15:83:5b:ea:91:4b:a7:99:5d:05:45:c6:7d:13:23:de:
ad:f7:b0:db:5f:9e:66:5c:7f:ab:af:a7:dc:22:c3:77:f0:1e:
81:87:5e:db:ab:7c:1a:15:be:02:b3:9d:5c:1e:02:80:76:cb:
a2:69:39:04:44:fa:6e:2f:0c:1c:a7:dc:f2:9f:8b:24:d8:9b:
83:10:db:d4:72:00:3c:2c:81:5d:aa:8f:8a:74:f9:3f:dd:12:
31:f9:ab:e9:96:28:af:15:fd:e4:c9:0d:25:c4:5d:b2:b8:9a:
5e:33:ce:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:36:54 2026 by rpki-client