
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft
File: MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft (raw, json)
Hash identifier: ShkLInMp7k6eudnSVmwcCsH9LSWR0/Q0l6nxb/4jGMg=
Subject key identifier: 10:6B:31:F6:81:40:63:74:7E:19:C2:AF:70:9E:B1:71:D7:3F:03:6E
Authority key identifier: 31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34
Certificate issuer: /CN=A91E3441/serialNumber=316D89647F0D0CB06B3732078A4230AF11565334
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft
Manifest number: 65
Signing time: Thu 23 Jul 2026 09:57:46 +0000
Manifest this update: Thu 23 Jul 2026 09:57:45 +0000
Manifest next update: Thu 30 Jul 2026 09:57:45 +0000
Files and hashes: 1: MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl (hash: W29PVAELwsnTr0sRv4d70ckRjmGALbgzDkOul6Jv5uk=)
2: 3954E33CEE9E11F0B32FB2E5666F56BC.roa (hash: 91UfSDMa7uQJKbxkjWHGuOg640JuLtPHQKq29mthHYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl
rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3441, serialNumber=316D89647F0D0CB06B3732078A4230AF11565334
Validity
Not Before: Jul 23 09:57:45 2026 GMT
Not After : Jul 30 09:57:45 2026 GMT
Subject: CN=6a61e59a-bacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d3:fe:e4:0c:61:a1:fa:5c:ef:56:b2:8d:be:
eb:c1:e9:e5:b4:74:bd:02:4f:96:a7:86:ca:39:87:
cb:e6:2d:79:f9:75:bc:7f:41:b3:05:96:4d:72:43:
d8:57:38:50:45:bb:68:39:c9:87:23:82:d3:3d:8f:
32:e4:3a:40:36:d6:a1:61:ba:87:3e:08:e5:cd:88:
37:b2:b1:12:19:27:5b:17:ad:15:3c:fe:90:1e:47:
4e:be:37:e7:cd:26:db:58:32:09:19:8e:e4:75:05:
7b:55:5c:10:3a:51:a8:e4:b8:b3:16:b6:b5:f2:fa:
88:74:af:c5:2b:59:35:70:a4:31:44:85:5a:1e:e8:
cf:1c:ba:c7:fa:ac:01:00:fa:01:11:a2:8c:dc:56:
9c:b0:7c:2b:28:d9:fa:1b:82:60:f1:1a:16:28:31:
b6:ca:8f:88:65:70:99:1b:06:58:f5:45:12:0d:82:
73:4a:2d:4b:5b:d7:cc:9a:a4:df:80:6a:96:0f:89:
19:96:78:8e:da:8a:f9:46:fd:30:40:75:07:28:97:
6d:06:d1:3e:1b:74:8b:30:33:00:75:b7:13:74:28:
38:4c:96:c1:c4:88:04:06:2d:84:65:ad:ce:2f:b7:
84:a2:35:50:0f:90:ee:6a:76:b2:29:34:e3:6c:09:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6B:31:F6:81:40:63:74:7E:19:C2:AF:70:9E:B1:71:D7:3F:03:6E
X509v3 Authority Key Identifier:
keyid:31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:e7:ad:1c:3d:86:c9:2b:97:24:3f:ff:d9:14:ef:86:54:56:
36:52:2f:81:c5:09:9e:62:1b:2a:b1:15:cc:0a:af:d4:08:7c:
38:0d:14:f7:6a:1d:76:6a:50:39:e1:15:d2:51:01:7c:4c:f9:
58:d4:fa:af:15:f6:19:9e:40:fc:f0:d2:23:d8:cb:cb:ec:e6:
72:b6:a1:04:ce:c7:81:c3:80:9a:2d:dc:d4:ec:db:bd:ba:f1:
bb:75:44:3c:58:97:48:19:67:24:93:19:e6:00:5a:14:26:e2:
98:b2:f0:95:10:f2:82:72:61:43:f8:8b:07:6d:81:9a:16:72:
38:69:bc:c4:61:1c:98:e9:0d:31:bd:b4:7b:ca:d0:27:f4:c1:
42:97:b8:3b:16:27:05:c1:51:77:61:72:16:fb:65:c9:79:91:
eb:ab:1a:58:1c:1d:49:26:ab:fb:46:50:8b:06:fd:c4:10:0e:
78:ec:be:38:75:ca:8d:cc:ce:08:b0:cf:6b:86:7f:0a:7c:f3:
a9:1c:ae:5d:9d:67:c8:dd:c2:7d:23:89:d7:43:94:06:69:35:
c1:78:c5:2f:e2:a4:21:03:b2:12:41:d7:91:78:9a:61:19:58:
c5:f7:92:bc:e9:6e:8e:51:5d:45:99:98:1b:3a:57:54:c8:4f:
4b:36:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:48:44 2026 by rpki-client