
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
File: cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json)
Hash identifier: PZE1GEcRMoG0K3Fouh7m+6yTrwh517Fs2nw3LTDlVGU=
Subject key identifier: 12:BF:B5:C7:D1:3A:5E:6F:D0:B5:79:06:81:BC:60:8D:CC:28:FD:01
Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Certificate serial: 041B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
Manifest number: 0413
Signing time: Thu 29 Oct 2026 00:33:09 +0000
Manifest this update: Thu 29 Oct 2026 00:33:08 +0000
Manifest next update: Thu 05 Nov 2026 00:33:08 +0000
Files and hashes: 1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: 12YxsTMQ3k5nltsp/0dHhUky49vec1twjpzLEHM3v7M=)
2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: fEkscTOPczLjdNokDvAYNFJrvZePwXKN3ANl82TsKZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 00:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Validity
Not Before: Oct 29 00:33:08 2026 GMT
Not After : Nov 5 00:33:08 2026 GMT
Subject: CN=6ae29445-7a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:b5:6d:52:c9:83:94:98:7e:0b:8a:ff:e2:
33:b0:db:fc:16:22:61:be:e5:72:58:67:9e:a1:d6:
5c:8c:a6:f1:16:55:76:f9:69:b6:22:7e:57:df:ff:
9d:1a:bd:1a:f5:55:e5:92:5d:77:99:3f:c8:6d:39:
e6:bc:53:1c:f0:9f:9b:a3:ba:8e:0e:bb:f5:63:1c:
2b:2f:e1:f4:52:b6:75:36:06:b4:a1:8e:c9:35:94:
36:7d:8a:5c:89:72:69:06:a4:8b:c5:9b:81:b6:20:
86:59:07:a4:df:fe:1d:0b:71:92:e1:94:86:f8:6f:
39:fc:79:2b:9f:07:0c:9b:b9:bf:7f:7a:f3:1f:ff:
15:5c:ef:65:91:5f:82:d1:b7:e4:cf:b4:eb:5f:b6:
46:e1:c7:d0:90:64:23:65:9c:46:96:f1:c0:d2:da:
6a:67:6d:f3:2b:66:85:66:d7:b0:92:c0:d3:05:9f:
f3:31:2a:7e:7f:af:6a:8a:7a:18:ed:0c:48:36:d9:
65:d5:53:ac:ae:b1:5c:85:a9:44:f7:bf:a6:92:50:
c7:a7:c4:5b:d6:3e:a2:dc:16:0b:f6:0b:2c:75:17:
8c:5d:bd:1f:04:40:57:da:40:2b:13:9e:84:27:6a:
73:01:74:6d:4a:48:98:c5:f4:bf:96:84:dd:e3:cb:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BF:B5:C7:D1:3A:5E:6F:D0:B5:79:06:81:BC:60:8D:CC:28:FD:01
X509v3 Authority Key Identifier:
keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:6b:91:fe:7b:37:1b:ef:ad:78:0d:16:13:a3:dc:a8:30:e5:
43:3a:6b:8e:97:52:1e:88:0d:3b:f1:fc:35:58:21:56:c5:d1:
b1:fb:f8:4f:d7:27:bb:5e:4d:65:99:52:2a:5d:a1:fc:2c:a6:
3b:eb:2d:d8:0f:2f:c5:0c:03:fe:d6:55:d2:a4:ec:98:72:3c:
67:62:ad:66:20:df:25:cd:e0:d9:e5:c6:04:63:77:ab:49:9e:
b7:1b:20:72:e5:5d:ed:5c:f4:fe:64:b9:73:83:3b:84:53:89:
3c:df:cd:02:d0:6a:d5:55:c5:be:3c:b6:db:75:9a:7f:95:76:
2b:b8:82:c3:e1:3f:2f:83:ee:49:74:c8:e4:9c:b8:1c:6f:e5:
fd:08:ad:06:53:c5:a9:50:fe:76:c6:4b:87:30:12:c4:3e:1e:
79:92:45:8b:d6:90:0a:17:3e:e5:aa:72:a8:e6:7a:ed:4d:b8:
ae:d8:2c:5c:f0:10:62:b5:fa:0f:dd:02:15:a8:10:e4:83:f7:
92:3b:27:6d:e8:a2:1c:c6:af:3e:94:db:e5:c2:8c:6c:48:e9:
0c:65:2c:d6:b7:bf:6d:0e:4f:12:ee:dd:fb:2e:0b:a9:3f:98:
73:a6:0a:c5:f8:f6:9f:a5:60:3f:00:fe:ff:0b:19:1d:f7:fc:
9d:6e:4a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:33:31 2026 by rpki-client