
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
File: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft (raw, json)
Hash identifier: RPSKye9osE2BU4mUEf6WYT0sPn+o7Fe+IlrceXf7Ukw=
Subject key identifier: 12:85:B4:94:01:CD:38:0C:B1:9A:8E:85:90:56:21:49:BE:A7:CC:5E
Authority key identifier: 0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54
Certificate issuer: /CN=A91E9B39/serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
Manifest number: 3B
Signing time: Wed 25 Mar 2026 07:43:32 +0000
Manifest this update: Wed 25 Mar 2026 07:43:32 +0000
Manifest next update: Wed 01 Apr 2026 07:43:32 +0000
Files and hashes: 1: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl (hash: tS8rrY6wKFm+80yGqb1IWMevAs8zdZi6qCHHhC7GTIw=)
2: 97B11C3CD29411F09264510FC4F9AE02.roa (hash: QApOxw4AB+QU5Y26DW3TDa/Ln50nbLLZSnM8Pz+sHv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl
rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9B39, serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954
Validity
Not Before: Mar 25 07:43:32 2026 GMT
Not After : Apr 1 07:43:32 2026 GMT
Subject: CN=69c39224-ed6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:cb:96:9a:81:75:8e:17:e1:fa:a6:d5:1e:
20:b8:e1:22:93:4a:4a:47:f9:a9:a4:7d:be:13:53:
6f:2c:7f:a7:ef:9c:cb:33:71:7c:93:c4:ce:6f:87:
64:a6:b2:3a:5d:48:9c:8e:3e:20:83:f1:45:d7:8b:
1e:b7:fe:77:99:d6:47:f3:8c:c5:3f:64:4b:92:21:
1c:7f:59:d0:6c:f7:d6:49:b2:57:d4:b9:49:cb:12:
c3:21:89:18:13:b6:94:0e:1b:86:4e:0b:f3:4b:20:
e4:b8:d4:62:be:da:cf:f2:d2:5e:ce:e9:c2:42:92:
14:f4:54:84:26:95:48:73:f4:67:3a:ff:0e:48:1a:
97:3e:0a:aa:98:9f:db:f5:76:c1:c8:03:33:6a:20:
a8:09:51:ab:0b:f4:2e:c4:13:45:fc:69:c2:f9:23:
ba:ca:6e:78:db:f9:f1:39:b4:0f:b9:4a:d6:8a:ac:
89:d6:6d:ef:2a:7f:3c:a6:b5:22:33:9d:79:94:65:
e7:72:ba:d4:84:97:c4:ad:d2:4a:1a:57:25:40:d4:
cb:2d:d9:da:d1:38:8e:2d:09:e7:bc:6e:7d:98:de:
f6:ef:de:10:fc:5e:dd:77:df:63:70:5e:b5:cf:36:
ac:b3:7e:25:e2:2c:b4:db:07:ae:81:a1:5f:01:d3:
86:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:85:B4:94:01:CD:38:0C:B1:9A:8E:85:90:56:21:49:BE:A7:CC:5E
X509v3 Authority Key Identifier:
keyid:0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:2a:d5:9d:73:8a:9e:34:a4:0f:52:d5:a8:5a:44:9d:dd:9d:
d8:28:6f:19:85:d0:2c:66:8a:c2:44:57:71:9f:e7:3a:06:eb:
4c:dd:e2:94:13:66:bd:15:4c:0a:2b:f0:f6:33:28:91:65:b5:
72:66:81:62:a8:1c:25:bb:aa:ff:4a:98:c3:95:a0:0d:4b:71:
c2:87:e9:a8:1d:0f:bf:12:1c:2e:70:b1:26:13:ca:b5:73:36:
f3:58:6c:37:57:49:57:1d:81:62:1d:ee:86:d1:0b:cf:ac:80:
d4:e0:59:d5:0d:b1:91:4f:23:39:d1:80:a9:e9:4e:2a:db:e1:
41:f4:07:90:99:97:7b:0f:b8:fc:4b:d2:68:8b:dd:16:ee:d5:
6a:69:e1:ec:38:e4:46:54:86:56:90:e6:1a:95:3d:85:a5:5a:
f1:9b:2d:97:9d:20:35:88:83:33:38:90:e0:5c:78:67:7a:bf:
6c:2b:ef:25:be:a0:93:ad:32:8e:27:db:e9:04:1f:13:d4:9b:
09:a6:ed:f7:66:19:46:3c:c0:14:bf:88:62:53:91:7a:32:4a:
7e:b8:32:f0:cf:06:fb:91:3c:99:42:51:78:5e:97:f7:f8:d1:
01:ca:50:4e:73:51:b2:45:60:c7:aa:53:61:2b:fd:fd:72:8b:
fc:c3:ca:c7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
OUIzOTExMC8GA1UEBRMoMEIwRTRBNEVBQUQxNTBBM0Y2M0U2MTFCMDQ4NDMxMEZF
NUZBRjk1NDAeFw0yNjAzMjUwNzQzMzJaFw0yNjA0MDEwNzQzMzJaMBgxFjAUBgNV
BAMTDTY5YzM5MjI0LWVkNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzhsuWmoF1jhfh+qbVHiC44SKTSkpH+amkfb4TU28sf6fvnMszcXyTxM5vh2Sm
sjpdSJyOPiCD8UXXix63/neZ1kfzjMU/ZEuSIRx/WdBs99ZJslfUuUnLEsMhiRgT
tpQOG4ZOC/NLIOS41GK+2s/y0l7O6cJCkhT0VIQmlUhz9Gc6/w5IGpc+CqqYn9v1
dsHIAzNqIKgJUasL9C7EE0X8acL5I7rKbnjb+fE5tA+5StaKrInWbe8qfzymtSIz
nXmUZedyutSEl8St0koaVyVA1Mst2drROI4tCee8bn2Y3vbv3hD8Xt1332NwXrXP
NqyzfiXiLLTbB66BoV8B04ZXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEoW0lAHN
OAyxmo6FkFYhSb6nzF4wHwYDVR0jBBgwFoAUCw5KTqrRUKP2PmEbBIQxD+X6+VQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QjM5LzUxQUY5RjY2RDI5
MzExRjA5Qzg2NUQ3N0M0RjlBRTAyL0N3NUtUcXJSVUtQMlBtRWJCSVF4RC1YNi1W
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQ3c1S1RxclJVS1AyUG1FYkJJUXhELVg2LVZRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5
QjM5LzUxQUY5RjY2RDI5MzExRjA5Qzg2NUQ3N0M0RjlBRTAyL0N3NUtUcXJSVUtQ
MlBtRWJCSVF4RC1YNi1WUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAzKtWdc4qeNKQPUtWoWkSd3Z3YKG8ZhdAsZorCRFdxn+c6ButM3eKUE2a9FUwK
K/D2MyiRZbVyZoFiqBwlu6r/SpjDlaANS3HCh+moHQ+/EhwucLEmE8q1czbzWGw3
V0lXHYFiHe6G0QvPrIDU4FnVDbGRTyM50YCp6U4q2+FB9AeQmZd7D7j8S9Joi90W
7tVqaeHsOORGVIZWkOYalT2FpVrxmy2XnSA1iIMzOJDgXHhner9sK+8lvqCTrTKO
J9vpBB8T1JsJpu33ZhlGPMAUv4hiU5F6Mkp+uDLwzwb7kTyZQlF4Xpf3+NEBylBO
c1GyRWDHqlNhK/39cov8w8rH
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:04 2026 by rpki-client