
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
File: MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft (raw, json)
Hash identifier: 2dSv6cqweHilqTHLMcHCAwwVcQ+OKqVmcj1dXD4M+2E=
Subject key identifier: 7A:9D:03:CA:4D:B7:B1:04:61:37:0F:A1:15:D7:3E:DF:92:35:48:A4
Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Certificate serial: 0714
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
Manifest number: 06CE
Signing time: Sun 26 Jul 2026 23:21:09 +0000
Manifest this update: Sun 26 Jul 2026 23:21:09 +0000
Manifest next update: Sun 02 Aug 2026 23:21:09 +0000
Files and hashes: 1: MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl (hash: qWTgvXdnQJBbxQtWIxz7qbKhp6ZdzFf+bogNejmJyAo=)
2: D4A6E66C184411F1A6C9F001253D8C67.roa (hash: RCo97+BQ7c4x9Y7DEYvpGWpLOBI7K1vi8X0A+4tNDLU=)
3: B7BBC928FEA211EDB9013076C4F9AE02.roa (hash: j6RfXO6V8txTwl+e1nfWngitaMdhNY8igbMKNAWQnn4=)
4: 70A511E6ECD111F09C92E5176E6F56BC.roa (hash: 4kvY15kmoRibeYszxVkHrvlLmTn2DqrfKOexn1KZ4Sw=)
5: B87A46B4FEA211EDB9013076C4F9AE02.roa (hash: LJUjSG4B9nMQjlI/SiJALAQkrtQ8jXDsff/H6xkFjlE=)
6: 40583EE4424311EFB787BD3AC4F9AE02.roa (hash: 20QRaNN5HpjNTE0DjTJaVPeRVD8X2idK/zhTnjiKhQE=)
7: 9B31D1A6345C11F1B54BE2329F833773.roa (hash: jMikS9RGpUmqgmd/SaqqBD3rRwu2SOtrAx+BMNj4gVA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1812 (0x714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Validity
Not Before: Jul 26 23:21:09 2026 GMT
Not After : Aug 2 23:21:09 2026 GMT
Subject: CN=6a669665-d999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:4d:d3:cc:01:15:4f:b4:db:62:2a:ef:c3:
b0:b9:60:49:de:79:8d:24:0d:77:00:07:08:e6:42:
00:f1:15:f1:a4:31:0d:4b:6f:ea:0e:83:a0:46:b0:
5c:17:72:24:5e:21:b5:e4:63:44:33:4e:a2:c1:35:
a9:7f:28:24:8d:71:2a:8e:b6:fe:a6:0d:c3:1b:04:
b6:28:e9:99:ff:ae:71:c8:73:00:06:13:f3:ad:f5:
a7:82:4c:59:30:74:d1:ae:6f:40:48:ac:3f:e2:98:
f1:9f:1b:c6:a7:45:73:84:5d:b5:df:df:ec:43:0b:
5b:44:db:cd:b3:17:42:21:5c:04:02:2c:36:7c:41:
c0:db:79:66:9d:d1:7f:68:bf:3f:19:08:a7:3b:49:
7a:ab:b1:4f:5e:35:cc:a3:59:27:ad:bd:69:4c:c7:
33:9f:ac:3b:aa:f1:76:e8:dc:b3:b8:1e:20:ba:32:
4d:35:f8:db:2a:79:53:62:1b:ef:a3:08:c7:19:8a:
63:5e:87:fb:e7:58:1a:8a:b1:30:03:b1:57:e6:ad:
a0:52:6d:5f:0e:b2:ec:b4:a6:cc:81:51:8d:19:63:
29:88:1a:45:96:22:03:98:d8:07:7e:20:d9:37:56:
ae:da:9d:81:93:30:0c:ed:43:fe:f7:1c:34:ab:e8:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9D:03:CA:4D:B7:B1:04:61:37:0F:A1:15:D7:3E:DF:92:35:48:A4
X509v3 Authority Key Identifier:
keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:87:30:0f:74:91:f5:1c:9e:71:05:05:75:66:1e:88:c2:f9:
19:4e:1d:7d:85:e9:ba:35:85:bf:0c:12:4a:b0:f0:1e:fa:54:
38:06:7b:f0:5b:3c:36:0c:4f:84:b6:f7:12:68:da:07:fd:2d:
e8:51:2e:fa:b4:a8:b8:de:2e:e1:ea:c0:81:04:24:d6:95:a0:
da:31:9a:36:76:a9:63:70:a8:71:92:6e:58:4d:eb:04:0c:71:
40:42:43:f7:7e:94:6f:93:cb:4c:88:e1:3e:6f:e3:4d:3a:19:
aa:b3:ea:48:88:21:2b:5d:0d:78:a6:d3:7c:d7:c4:07:0b:f7:
e6:2a:25:f1:90:7e:00:fb:7d:69:7a:ef:b2:24:31:d1:49:a7:
88:bf:3e:c6:aa:69:36:cc:58:d0:b0:6a:0b:ec:65:9b:1d:cf:
76:b3:33:c4:ee:6a:e6:b6:f0:ff:dd:3f:65:3f:e5:2b:ae:f3:
db:79:df:5f:13:96:26:ee:47:d0:f9:1c:d8:47:2b:18:83:68:
f1:a1:fa:c8:70:20:82:fd:35:66:9d:3c:27:fd:9e:4a:9a:46:
e1:0a:79:cc:b0:66:24:14:df:6f:98:8f:85:f0:7b:31:e9:02:
5f:9a:bf:6f:6e:96:e0:d7:69:36:3f:76:ab:b4:34:6d:fe:1c:
70:c8:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:09:06 2026 by rpki-client