
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
File: mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft (raw, json)
Hash identifier: 67MFB2kXhQfvvppNpw2RW5Umk/sBdTJmxqWIMhmqoVE=
Subject key identifier: 08:3E:96:DB:E8:71:F2:51:1C:99:21:D9:15:C5:E9:03:5D:04:C6:83
Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Certificate serial: 067F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
Manifest number: 0670
Signing time: Thu 24 Sep 2026 22:29:22 +0000
Manifest this update: Thu 24 Sep 2026 22:29:21 +0000
Manifest next update: Thu 01 Oct 2026 22:29:21 +0000
Files and hashes: 1: mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl (hash: m3Atwa7xsCHWBlMoNGPMLaUgKQmw8XeNhbWQs9o5sso=)
2: C4CB04C4E2A911EBB4631960C4F9AE02.roa (hash: BBAmY6MdAQ+wmYvNw4W6no6AMV+HiT0P/KzwMpsrX3k=)
3: 8AF55BF67F6511F1815D2BEC60A30FBC.roa (hash: LosfvGjnTO0oikHxwkUOn/A4e0QgHvZ4m0M/Lnyunhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl
rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1663 (0x67f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B6C, serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9
Validity
Not Before: Sep 24 22:29:21 2026 GMT
Not After : Oct 1 22:29:21 2026 GMT
Subject: CN=6ab5a442-b56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:16:2a:ff:41:1b:90:f3:78:db:1e:34:8d:
19:9a:5e:b4:80:d9:52:bd:75:79:69:09:e8:ce:04:
8f:c8:ff:3e:b3:4c:14:e7:9d:14:d6:fb:9f:af:7c:
60:4e:5a:ba:bd:8f:63:9d:95:23:54:60:bb:bd:89:
ed:53:ec:ab:fa:f6:5f:f2:62:db:09:0d:b6:c3:c7:
bf:23:91:a3:51:b4:60:22:f1:11:e0:29:72:5a:99:
f6:41:d8:c0:ff:cc:33:4f:a7:12:b2:4f:ff:a3:1e:
0d:17:4f:9d:b7:85:50:e0:cb:3d:54:a3:9b:9f:ee:
fa:2c:38:52:da:3f:4b:fa:38:ca:2e:b4:03:ee:38:
05:94:4c:0b:4a:22:3e:0f:1d:1d:57:9a:cd:5a:52:
11:1a:03:9b:3f:5c:0b:d6:d9:7a:82:a3:e1:35:3e:
f0:e7:2f:41:00:04:24:88:dd:81:dc:47:2a:85:f9:
10:d2:06:0a:64:b9:71:bb:0e:4c:25:4c:27:f5:15:
a0:a9:bf:33:88:0e:cc:26:f2:f6:ef:62:14:98:77:
a0:c4:f6:83:ec:91:68:d9:f8:42:80:1b:c3:48:77:
1d:66:5d:e9:55:7a:91:9a:7d:6a:1d:b1:29:8d:04:
04:5a:00:60:d0:6b:a3:ff:b9:bc:41:2b:df:51:34:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3E:96:DB:E8:71:F2:51:1C:99:21:D9:15:C5:E9:03:5D:04:C6:83
X509v3 Authority Key Identifier:
keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1b:90:81:47:2a:6b:26:33:9c:05:8a:eb:d8:55:9e:cc:2b:
60:7f:4f:67:90:39:73:92:ec:3e:42:42:7e:8e:f5:39:88:42:
f9:29:aa:4c:a1:21:d7:60:65:54:ef:5f:ca:22:19:96:90:49:
42:f5:8e:db:96:06:68:a2:39:5a:10:50:9c:de:dd:9a:c4:a3:
e0:da:db:da:14:99:06:b1:7b:1a:98:f2:02:0d:34:aa:ce:96:
5b:73:9b:67:e3:6d:7d:39:7b:14:5a:38:c6:67:36:a7:bb:f5:
00:f5:17:34:15:6e:cb:a9:4d:2b:9f:42:45:43:e5:ac:24:44:
26:50:5f:ee:cf:72:46:ec:ec:23:13:1e:1d:80:7d:4c:96:fb:
67:8f:d8:f1:13:ae:15:4c:63:23:e8:37:09:17:37:f2:12:57:
27:d6:86:95:3e:43:ee:ed:2f:85:f2:85:48:03:f2:a2:0d:0e:
69:c2:ee:62:d3:da:fa:95:ec:e3:5c:1c:65:f7:3a:24:53:05:
c7:8c:89:de:7e:db:69:a3:59:b9:0c:e4:a7:bf:0f:cd:f5:e8:
d8:64:fc:3b:70:25:b3:d2:20:89:17:9c:29:e0:66:fa:77:79:
94:59:bd:f0:5a:66:82:7a:e1:a1:0a:77:f6:25:25:e5:7b:1e:
55:92:57:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:51:16 2026 by rpki-client