
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
File: e-hwMVM9L_QxwRpYeani2dyFJ_I.mft (raw, json)
Hash identifier: Lx2tPVAZtbH3sVhLNs2oC9qRDMTkQpFNE7FdidPRKS4=
Subject key identifier: 0E:59:D4:B2:C5:8E:49:B5:D7:FC:59:1E:59:50:C3:9B:26:FF:17:6C
Authority key identifier: 7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2
Certificate issuer: /CN=A91C35C9/serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
Manifest number: 0206
Signing time: Wed 25 Mar 2026 02:23:11 +0000
Manifest this update: Wed 25 Mar 2026 02:23:11 +0000
Manifest next update: Wed 01 Apr 2026 02:23:11 +0000
Files and hashes: 1: e-hwMVM9L_QxwRpYeani2dyFJ_I.crl (hash: jwvr++cYDSXpvWYi20Xkjc4uOYXa7HL7V38gwNkjnR4=)
2: D1315D7C0FDD11EEB007DA41C4F9AE02.roa (hash: kRGMaXV2RHNJEqYjq9seCAVmQioDFvn7XJ10IDk+uJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl
rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C35C9, serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2
Validity
Not Before: Mar 25 02:23:11 2026 GMT
Not After : Apr 1 02:23:11 2026 GMT
Subject: CN=69c3470f-ef31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:b7:86:86:86:5f:2e:31:ec:4c:ef:94:2a:
38:9b:1d:60:77:3e:06:81:f4:3a:64:69:c1:fc:89:
f2:39:2a:70:52:42:15:b6:72:eb:67:ba:12:ed:13:
c4:68:99:8c:21:06:fa:c7:eb:24:17:82:84:d1:18:
72:64:1c:c3:f0:05:48:47:9b:09:d1:ed:27:c9:d2:
58:e7:85:3b:be:a4:66:a3:da:39:93:02:f4:9d:e4:
46:b2:46:90:e3:42:6b:02:2f:0c:fe:ff:fd:f5:83:
b7:70:71:64:e9:a5:28:f2:b5:7c:c1:8c:fe:f4:d2:
8f:25:25:a4:69:ea:ff:e6:bc:c0:59:f8:db:a7:83:
c1:d8:34:c8:92:69:d1:4e:ef:5c:1d:ad:e9:5b:71:
be:91:ad:1d:7b:da:ef:71:fb:56:94:91:7a:5d:07:
9d:b0:4a:46:37:62:b7:93:ad:7b:25:26:e8:23:ce:
8d:8e:a9:cc:50:5b:12:92:0e:85:8f:ca:fa:bb:f8:
3c:25:b3:fc:e9:9a:e7:fd:52:99:19:f9:49:26:09:
c3:b0:8a:8e:86:e9:f7:4c:fc:33:ba:83:24:7c:73:
6a:f4:7f:94:df:44:b4:c3:50:ac:ab:f2:b7:a6:6d:
c4:22:59:7f:3d:14:17:d7:56:47:c0:48:00:59:e9:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:59:D4:B2:C5:8E:49:B5:D7:FC:59:1E:59:50:C3:9B:26:FF:17:6C
X509v3 Authority Key Identifier:
keyid:7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:53:45:0f:bb:d8:24:a8:64:94:57:e8:3d:b3:7b:52:ab:24:
c3:ed:be:d3:70:15:75:0c:62:31:db:12:e2:42:e6:bd:df:cd:
5b:97:2e:3f:bc:ea:3b:40:ea:8b:8a:f6:8a:6e:37:43:7b:90:
4f:a6:91:cf:d9:eb:d4:6e:92:50:08:2f:43:95:b6:ff:b7:09:
74:da:85:cb:10:7b:61:8b:a8:28:8a:77:1a:04:d3:51:a5:f9:
e2:f4:b4:35:f3:47:d4:5c:df:ba:a7:02:91:8b:72:b8:28:f9:
ab:3e:78:8f:17:3f:ce:f2:2c:5c:1e:3b:54:a6:1f:d4:1b:85:
cb:9b:9a:2f:d3:39:e5:0f:70:b5:f7:d0:75:3e:82:46:4a:61:
71:6e:d5:b9:36:10:01:de:c0:67:ed:21:13:2c:a9:37:8a:bf:
7c:57:5f:55:9a:bf:c8:b3:71:13:b7:d9:a8:f9:80:0e:1e:b4:
a3:46:f5:39:44:fa:36:0f:2f:c0:80:c3:e1:4b:8b:b6:26:39:
4b:be:07:dc:44:99:11:c8:e6:69:f5:dc:d5:d2:8f:5e:ef:86:
e9:ba:ff:ca:f3:02:0b:99:3b:95:6c:c1:3d:fd:2f:95:3c:0c:
2d:94:10:15:ec:c8:34:b4:6f:d7:1b:6f:a5:c0:9e:ed:50:86:
29:00:7c:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzM1QzkxMTAvBgNVBAUTKDdCRTg3MDMxNTMzRDJGRjQzMUMxMUE1ODc5QTlFMkQ5
REM4NTI3RjIwHhcNMjYwMzI1MDIyMzExWhcNMjYwNDAxMDIyMzExWjAYMRYwFAYD
VQQDEw02OWMzNDcwZi1lZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtI63hoaGXy4x7EzvlCo4mx1gdz4GgfQ6ZGnB/InyOSpwUkIVtnLrZ7oS7RPE
aJmMIQb6x+skF4KE0RhyZBzD8AVIR5sJ0e0nydJY54U7vqRmo9o5kwL0neRGskaQ
40JrAi8M/v/99YO3cHFk6aUo8rV8wYz+9NKPJSWkaer/5rzAWfjbp4PB2DTIkmnR
Tu9cHa3pW3G+ka0de9rvcftWlJF6XQedsEpGN2K3k617JSboI86NjqnMUFsSkg6F
j8r6u/g8JbP86Zrn/VKZGflJJgnDsIqOhun3TPwzuoMkfHNq9H+U30S0w1Csq/K3
pm3EIll/PRQX11ZHwEgAWen2GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA5Z1LLF
jkm11/xZHllQw5sm/xdsMB8GA1UdIwQYMBaAFHvocDFTPS/0McEaWHmp4tnchSfy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzVDOS83MEY4NEM2MjBG
MjUxMUVFOEQyOUUyNkNDNEY5QUUwMi9lLWh3TVZNOUxfUXh3UnBZZWFuaTJkeUZK
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2UtaHdNVk05TF9ReHdScFllYW5pMmR5RkpfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzVDOS83MEY4NEM2MjBGMjUxMUVFOEQyOUUyNkNDNEY5QUUwMi9lLWh3TVZNOUxf
UXh3UnBZZWFuaTJkeUZKX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM1NFD7vYJKhklFfoPbN7Uqskw+2+03AVdQxiMdsS4kLmvd/NW5cuP7zqO0Dq
i4r2im43Q3uQT6aRz9nr1G6SUAgvQ5W2/7cJdNqFyxB7YYuoKIp3GgTTUaX54vS0
NfNH1FzfuqcCkYtyuCj5qz54jxc/zvIsXB47VKYf1BuFy5uaL9M55Q9wtffQdT6C
RkphcW7VuTYQAd7AZ+0hEyypN4q/fFdfVZq/yLNxE7fZqPmADh60o0b1OUT6Ng8v
wIDD4UuLtiY5S74H3ESZEcjmafXc1dKPXu+G6br/yvMCC5k7lWzBPf0vlTwMLZQQ
FezINLRv1xtvpcCe7VCGKQB8nQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:12 2026 by rpki-client