
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
File: bwlMAO-I_YtwgT1trctUaHYyjNk.mft (raw, json)
Hash identifier: K6QRjBzVfLQBxVQ918mTKS2V8P1caBXV1kn6CednoG8=
Subject key identifier: A1:9E:1F:0F:BA:76:7A:91:CB:2D:7C:D5:12:5B:D7:B0:F2:CB:18:DE
Authority key identifier: 6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9
Certificate issuer: /CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
Certificate serial: 2233
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
Manifest number: 2E59
Signing time: Tue 12 May 2026 15:30:24 +0000
Manifest this update: Tue 12 May 2026 15:30:24 +0000
Manifest next update: Tue 19 May 2026 15:30:24 +0000
Files and hashes: 1: bwlMAO-I_YtwgT1trctUaHYyjNk.crl (hash: 3rjIKlrWnEIrbqUzjkx+wyuRUjrE6bbmw0pFkYTRZ3Q=)
2: 44A88C482CA611F1A847C919C5833773.roa (hash: XIvcZhXRx87BSwov/Ulx76fwgEzGaA5I0TxUrYuAlrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl
rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8755 (0x2233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E25, serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
Validity
Not Before: May 12 15:30:24 2026 GMT
Not After : May 19 15:30:24 2026 GMT
Subject: CN=6a034790-3ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5f:05:4d:a8:77:f0:29:ca:b7:d2:0b:b6:02:
ff:10:c7:e9:d7:ad:f1:42:84:70:bb:38:84:b8:e6:
14:33:c7:b1:22:c1:71:5c:05:db:70:b0:5b:78:8d:
8b:5b:db:a6:d2:a1:3d:a9:f4:0f:74:f7:7f:3e:df:
51:61:43:e8:4c:4f:19:b2:80:ea:42:09:b1:37:28:
b5:d6:98:e2:60:68:e9:47:dc:a3:7e:7d:4a:6d:cb:
98:92:24:9d:b7:4c:ae:a4:a8:50:49:4f:fb:a3:fe:
77:76:91:3d:46:e5:1b:40:eb:18:3b:39:80:6b:79:
70:a0:56:3d:ec:b1:d6:ca:31:dd:6d:b2:a3:33:a1:
08:27:f1:47:35:37:c6:43:00:84:47:f3:68:35:45:
5c:eb:d6:04:d3:81:da:ab:e5:64:f6:d7:d0:67:ce:
20:37:e0:9e:84:4e:a1:7a:9e:aa:16:ef:63:d0:e8:
5a:a8:63:ae:77:06:14:cd:90:94:21:54:db:ac:f3:
a1:af:9c:95:fb:ad:70:ba:31:de:9e:38:84:58:fb:
47:5a:3c:c3:65:b1:51:86:fb:39:03:de:fe:a2:29:
4d:2c:80:a2:3f:b6:15:85:c6:53:bd:11:e8:2f:45:
f3:9b:61:8c:95:22:08:2b:8c:5f:23:59:7f:9b:cf:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9E:1F:0F:BA:76:7A:91:CB:2D:7C:D5:12:5B:D7:B0:F2:CB:18:DE
X509v3 Authority Key Identifier:
keyid:6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f1:34:c9:29:b4:9c:02:3f:93:ea:b6:bc:d6:02:0f:e6:fb:
db:50:b5:df:cd:36:7e:d8:2f:19:41:3a:0a:0d:7b:fd:e6:6c:
84:0a:47:d7:6d:95:a8:43:fb:bc:fa:81:d0:f1:8b:fd:60:d5:
53:46:f2:86:42:9d:82:1b:82:80:32:27:c7:70:fb:dc:f3:97:
f2:99:90:23:ce:18:07:fa:9e:bb:83:d3:10:2f:d7:45:62:69:
87:f4:fe:6f:f6:c6:82:9f:ef:7b:77:16:67:54:c8:17:15:e7:
98:61:29:34:cb:6a:04:7c:5d:f1:8a:d6:5c:c1:08:e9:0f:57:
39:d6:38:80:b3:02:f7:2d:ff:49:63:25:83:3b:16:77:2f:8c:
ab:11:c0:88:61:5c:37:fb:e3:06:af:ff:ac:3b:52:ca:b6:72:
1d:a6:16:10:ae:87:4f:9a:2e:7d:ed:d3:b3:9c:15:25:f0:98:
5e:e9:0a:d4:3a:47:97:4d:be:f4:bd:39:43:60:7d:31:a6:5a:
56:b8:14:98:9b:81:72:b8:7a:b1:27:2a:64:b4:60:76:5e:3c:
dc:cd:c5:79:ff:ba:59:52:47:a9:b9:b5:9e:f3:00:4c:3b:fd:
42:ac:a2:57:ae:d4:fb:65:f2:e2:68:71:03:17:38:28:0f:4d:
26:4e:93:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:55:20 2026 by rpki-client