
$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json)
Hash identifier: PF/nllv/yNC+HVUxWQsNzFiO5kRIyyJdJYAOQaUQF1U=
Subject key identifier: 22:88:3C:F9:59:46:EB:C1:CD:9E:1D:C0:8D:3D:B6:C8:39:33:37:14
Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Certificate serial: 03C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
Manifest number: 03BF
Signing time: Thu 21 May 2026 00:43:55 +0000
Manifest this update: Thu 21 May 2026 00:43:54 +0000
Manifest next update: Thu 28 May 2026 00:43:54 +0000
Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: GMjMzumu/7BV4SbSbcfMICuX1fYCflS1Ozx2jP+oapw=)
2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: nomqtva7ggVLFevc3wGgCUafYyn97H4GgqbrGIpWBXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 966 (0x3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Validity
Not Before: May 21 00:43:54 2026 GMT
Not After : May 28 00:43:54 2026 GMT
Subject: CN=6a0e554b-4cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:92:de:99:e4:bb:69:7e:f9:6f:db:fd:96:9f:
6e:8b:3b:79:e0:90:dc:0a:2a:2d:09:62:10:63:29:
0a:33:df:97:bb:77:dc:32:4e:92:e1:2a:bb:0a:29:
b4:69:28:88:3d:39:95:59:b3:6a:97:e8:33:7a:3f:
2c:7c:b1:20:4a:1b:64:d8:29:52:66:0e:00:61:9a:
f4:fa:0b:e4:83:1f:05:94:d6:16:64:85:28:e8:b2:
97:9b:21:86:3d:d6:06:10:a3:89:0f:c0:10:69:3c:
8e:05:8b:69:e3:c0:1a:b5:1f:e9:ce:f0:0f:07:cc:
b8:4b:6c:63:e5:b3:7f:0d:6f:d5:cc:bb:90:5c:33:
6c:4e:c6:1e:9b:7c:79:0c:6d:d7:69:6a:47:d9:70:
dc:14:ca:58:91:77:8f:c2:a5:b4:89:83:d3:83:71:
a0:ee:bf:b8:e0:71:1e:eb:b4:00:55:1b:f8:38:5a:
7c:82:c1:f1:b0:6f:fa:b3:64:42:60:3e:85:de:26:
af:fb:b7:cc:ac:f0:3b:9f:92:f1:ca:25:b4:81:1f:
7f:2d:32:14:fa:30:43:60:e1:d0:78:b0:fe:51:a4:
62:3d:94:c1:54:8e:b3:b7:4a:94:b7:50:2a:13:c2:
a2:d2:1b:d5:87:9d:df:18:fd:4b:3b:5b:18:59:a8:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:88:3C:F9:59:46:EB:C1:CD:9E:1D:C0:8D:3D:B6:C8:39:33:37:14
X509v3 Authority Key Identifier:
keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:d4:42:b9:18:e9:8a:c0:c0:41:dc:59:39:8a:8c:c8:fd:14:
95:d1:4f:f0:04:33:41:4f:52:af:d6:fa:bc:1f:44:8e:7c:95:
3f:f1:77:61:29:dc:4a:04:ab:67:3e:5d:7a:75:27:a7:4e:81:
9d:af:b6:07:6c:ba:79:a6:c5:0c:28:b5:8d:73:ad:2c:a6:b4:
ce:e7:61:60:35:4b:31:6d:38:1c:a9:37:27:38:fd:74:63:97:
c3:c3:5e:bd:04:11:42:d6:32:66:20:35:4c:71:ca:38:54:66:
94:6d:5d:c7:f9:c1:63:a3:b9:eb:9e:f6:b7:b9:3c:2b:75:ef:
25:3b:ac:8a:fd:2c:be:95:2e:4e:73:f3:a7:7f:98:6d:04:4d:
d0:29:65:67:9c:97:8f:7b:82:e9:fd:95:c8:b0:36:77:84:54:
c1:18:2a:ba:9c:19:f2:fe:d4:78:70:5e:bb:65:eb:c7:db:47:
2a:75:f1:97:a0:dc:63:11:e5:9f:fa:0a:9e:7c:0f:d9:a3:45:
04:35:d6:41:77:28:0a:8f:b5:32:d6:32:6b:dc:7e:2b:5a:28:
c3:b6:5b:bd:1c:d5:4e:f4:2b:2e:21:96:9d:b1:84:c9:7e:f6:
3b:a9:f5:66:1d:09:80:f9:43:4f:84:d7:78:1f:fe:ee:e5:05:
a5:b0:3b:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTU4MEExMTAvBgNVBAUTKDczMDQ3NzVDMUNFMzg1QUNBNDA0MDU4NjRFQTlCOUFC
RkVERTkxQjMwHhcNMjYwNTIxMDA0MzU0WhcNMjYwNTI4MDA0MzU0WjAYMRYwFAYD
VQQDEw02YTBlNTU0Yi00Y2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ZLemeS7aX75b9v9lp9uizt54JDcCiotCWIQYykKM9+Xu3fcMk6S4Sq7Cim0
aSiIPTmVWbNql+gzej8sfLEgShtk2ClSZg4AYZr0+gvkgx8FlNYWZIUo6LKXmyGG
PdYGEKOJD8AQaTyOBYtp48AatR/pzvAPB8y4S2xj5bN/DW/VzLuQXDNsTsYem3x5
DG3XaWpH2XDcFMpYkXePwqW0iYPTg3Gg7r+44HEe67QAVRv4OFp8gsHxsG/6s2RC
YD6F3iav+7fMrPA7n5LxyiW0gR9/LTIU+jBDYOHQeLD+UaRiPZTBVI6zt0qUt1Aq
E8Ki0hvVh53fGP1LO1sYWag6IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKIPPlZ
RuvBzZ4dwI09tsg5MzcUMB8GA1UdIwQYMBaAFHMEd1wc44WspAQFhk6puav+3pGz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTgwQS84NzhFOTg2RUQ0
REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhheWtCQVdHVHFtNXFfN2Vr
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N3UjNYQnpqaGF5a0JBV0dUcW01cV83ZWtiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTgwQS84NzhFOTg2RUQ0REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhh
eWtCQVdHVHFtNXFfN2VrYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFtRCuRjpisDAQdxZOYqMyP0UldFP8AQzQU9Sr9b6vB9EjnyVP/F3YSncSgSr
Zz5denUnp06Bna+2B2y6eabFDCi1jXOtLKa0zudhYDVLMW04HKk3Jzj9dGOXw8Ne
vQQRQtYyZiA1THHKOFRmlG1dx/nBY6O56572t7k8K3XvJTusiv0svpUuTnPzp3+Y
bQRN0CllZ5yXj3uC6f2VyLA2d4RUwRgqupwZ8v7UeHBeu2Xrx9tHKnXxl6DcYxHl
n/oKnnwP2aNFBDXWQXcoCo+1MtYya9x+K1oow7ZbvRzVTvQrLiGWnbGEyX72O6n1
Zh0JgPlDT4TXeB/+7uUFpbA7Aw==
-----END CERTIFICATE-----
Generated at Thu May 21 12:58:29 2026 by rpki-client