
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
File: cwYbqQQBgewK602PbgA_g4_JxI8.mft (raw, json)
Hash identifier: 7tTS1Zurp2puod0KW2t0Vp7nvxCcVmwmGQ3LN9r+R1c=
Subject key identifier: C5:45:B9:45:44:64:55:89:AE:DE:6F:18:C9:29:62:3D:79:5D:CC:BC
Authority key identifier: 73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F
Certificate issuer: /CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
Manifest number: 0198
Signing time: Wed 13 May 2026 04:22:42 +0000
Manifest this update: Wed 13 May 2026 04:22:42 +0000
Manifest next update: Wed 20 May 2026 04:22:42 +0000
Files and hashes: 1: cwYbqQQBgewK602PbgA_g4_JxI8.crl (hash: l40gbosmq5BpoWxl0avvEeXHio5ODQlOtUWeyDzSgwM=)
2: 7D2E766CE5AF11EE9A0A642FC4F9AE02.roa (hash: kbTV9f4IWgZK9S4apMSRBWK1zjlS8Xrya9owJXlI6Ns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl
rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65AC, serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F
Validity
Not Before: May 13 04:22:42 2026 GMT
Not After : May 20 04:22:42 2026 GMT
Subject: CN=6a03fc92-ff10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:80:90:09:fa:ea:9b:da:bb:b0:dd:ae:c6:
0a:2b:ef:60:3a:be:2b:43:c2:78:b1:cd:e2:87:a5:
f3:5c:58:3e:c4:37:74:3d:b8:8a:09:9a:35:9d:e7:
ae:78:3b:34:56:77:b3:ab:7c:55:2f:b1:e8:7b:d6:
07:4a:63:dc:07:56:e0:22:7e:53:db:38:bb:a4:80:
c3:3d:ee:1f:aa:f5:ff:c7:d9:c9:0d:d4:5d:92:68:
21:16:f9:bd:1e:36:cb:c8:82:cc:fa:4d:24:44:54:
87:69:e4:56:82:db:e9:20:42:3e:9f:89:9c:7d:6c:
8c:73:cf:1e:da:b7:ce:86:b3:c4:52:c4:a5:84:6f:
ec:4b:ef:2f:48:27:ef:49:45:d1:2b:1f:2c:4e:bf:
45:5d:24:ee:98:7e:f6:1f:58:c7:17:22:64:6c:97:
a0:8f:0a:8e:9f:f8:9f:8e:84:ed:92:32:31:3f:f3:
3d:22:c4:1e:35:f5:88:61:0c:ba:43:32:12:14:17:
5b:a5:21:ba:3f:b4:f9:61:14:ce:68:39:1b:f1:1c:
7f:f5:9c:78:60:20:25:45:eb:08:23:91:31:bc:a1:
f3:42:5d:a3:ff:f2:69:79:f9:c8:ad:d0:c0:2e:1b:
15:7c:f3:01:96:74:c3:aa:3c:92:51:1e:7e:c2:31:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:45:B9:45:44:64:55:89:AE:DE:6F:18:C9:29:62:3D:79:5D:CC:BC
X509v3 Authority Key Identifier:
keyid:73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:a2:34:f0:bf:92:0c:41:a4:37:1e:95:46:0d:88:a1:7a:20:
23:35:e6:39:58:31:76:9e:c3:0a:ce:f9:89:0e:87:37:9b:0a:
03:1c:1f:14:9c:58:cf:af:d3:2a:3a:ba:e7:57:2b:2a:e0:b2:
5c:34:25:2a:4f:94:bd:03:93:e0:c7:1f:52:35:2d:84:90:4f:
b8:ee:0a:55:4b:36:a1:e1:c4:92:ee:30:ec:d8:b1:11:2f:6a:
fe:25:48:f0:82:1b:8d:30:37:a6:2f:e3:f2:a2:7f:1b:17:08:
81:b5:5e:66:28:e3:b7:4a:b4:06:cc:9b:a5:5d:de:32:60:3c:
07:40:e4:d5:5a:6b:dc:d4:92:f2:76:2f:ea:03:83:7a:d0:33:
5d:cb:eb:8f:7a:21:40:ce:d8:29:57:89:51:bc:fa:ca:77:1d:
db:f1:40:8c:78:09:96:ae:e2:a1:69:ff:f1:26:2c:4b:fd:53:
25:87:72:83:08:d1:89:d8:d5:44:c8:3a:38:42:40:95:cc:77:
e9:fd:7a:a4:e9:93:2c:16:8b:9e:bd:d7:23:cf:f1:4c:af:cf:
1b:fb:06:63:d9:ae:af:d8:37:88:84:94:40:dd:ab:53:43:de:
dc:6e:62:ab:82:4b:fc:b4:ce:46:c5:ea:43:ad:56:1f:64:56:
66:67:81:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:29 2026 by rpki-client