
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
File: mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft (raw, json)
Hash identifier: x84k3UsTvahweS47gwcXekUHDdoG0cuur/B+h1W6I6M=
Subject key identifier: CE:C3:5E:83:AB:6C:42:C8:B0:89:7E:75:EE:64:B2:EB:38:99:C7:44
Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Certificate serial: 0616
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
Manifest number: 060C
Signing time: Tue 24 Mar 2026 22:34:55 +0000
Manifest this update: Tue 24 Mar 2026 22:34:54 +0000
Manifest next update: Tue 31 Mar 2026 22:34:54 +0000
Files and hashes: 1: mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl (hash: qu5bHA3H+SmxHC93X+e78UxqNpkWQyKp+q1LGYpJEXY=)
2: C4CB04C4E2A911EBB4631960C4F9AE02.roa (hash: jy3+b4NPo7lR9GDIUu2cqRVy4QiOqMsmkaXdSxbFTTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl
rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1558 (0x616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B6C, serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Validity
Not Before: Mar 24 22:34:54 2026 GMT
Not After : Mar 31 22:34:54 2026 GMT
Subject: CN=69c3118f-3829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2b:11:4e:9f:7b:03:18:35:12:dc:81:ea:e9:
32:09:89:bf:37:b4:9d:b7:68:91:47:e2:de:6b:15:
ba:32:a2:ef:e3:24:4c:92:5a:57:6c:e8:cb:4f:fb:
ed:8b:b8:31:ce:6e:d9:7c:36:f6:cc:72:b4:0b:f3:
ac:37:85:2c:1f:32:a2:24:be:db:22:b9:27:71:5f:
f3:5f:71:53:a0:8a:e6:08:65:44:29:17:09:a2:69:
03:dc:76:78:ab:1b:23:c1:39:1c:2d:cf:3a:8c:a4:
d3:22:42:07:48:64:2e:0d:02:d5:35:dd:51:ed:f7:
25:82:c2:3e:11:99:5b:8a:2f:e4:75:31:91:db:a4:
15:f8:19:1a:51:6a:6c:52:53:df:11:01:d9:3a:a2:
78:3f:f9:32:87:e4:38:f6:d0:e9:fa:6d:dc:39:4e:
e9:db:d1:8e:cf:79:03:5c:14:44:7b:7a:f6:7e:03:
6d:b4:98:b9:ae:7f:86:f0:da:0c:fe:a3:d0:16:a0:
ff:8e:ff:f4:b1:8f:6b:29:b7:7b:fc:6c:f5:d9:7d:
ba:ac:7d:4a:e4:2e:05:17:3a:b6:4c:bb:3a:5f:9f:
74:a1:22:66:01:be:05:26:f9:22:86:81:3e:63:07:
7f:18:35:1c:0e:30:e3:f7:b3:06:81:50:9d:e0:d0:
a8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C3:5E:83:AB:6C:42:C8:B0:89:7E:75:EE:64:B2:EB:38:99:C7:44
X509v3 Authority Key Identifier:
keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:0e:3f:11:28:ec:c6:b8:b3:f1:d4:58:6f:03:ed:0d:5f:72:
dd:28:a0:e3:da:fd:7e:cc:59:a6:e1:14:39:54:18:a0:7a:d8:
14:0a:35:6e:a1:e7:ee:e1:a2:3c:9e:1f:d6:9a:2a:c5:3d:69:
a2:7f:74:eb:59:93:1f:f6:11:cb:3a:97:97:7a:04:df:3d:68:
d2:89:50:ac:ed:a0:ce:c5:1f:3e:2d:15:4d:0c:c8:13:9b:92:
1a:33:03:ac:fa:07:1e:69:d5:a5:34:1e:d1:56:83:27:8b:07:
ea:08:9e:47:57:33:24:19:b8:6f:37:77:78:86:c9:0c:b3:45:
75:88:a2:d0:c7:78:1c:6b:c3:9a:52:c5:76:1c:82:f1:1a:cd:
de:d1:5d:72:50:55:2b:bb:f2:7f:a9:ef:16:50:18:30:be:44:
36:0d:aa:6f:f0:f4:db:d0:7b:ad:8d:eb:ad:f4:d7:32:23:39:
a2:f9:25:6d:05:50:5c:04:aa:f7:ad:7a:6c:c3:f6:44:8a:fe:
a2:73:8c:c3:e6:ab:c5:1f:2b:f5:b8:19:aa:09:6f:75:49:7f:
ce:18:56:14:85:5a:5b:73:3e:a1:49:c0:28:c3:a2:a3:4a:6f:
ac:6d:fe:5e:cd:14:7c:2f:a7:1c:97:2d:c8:7a:80:72:a9:90:
04:b0:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:41:31 2026 by rpki-client