
$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
File: RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json)
Hash identifier: BrN/MWEr6kvYCGiYHrce8FdDjllbvfq2GTbEzrzEI8c=
Subject key identifier: 8B:26:8C:37:73:85:0D:A9:2C:C9:A5:CD:C2:9D:34:5B:48:06:23:49
Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49
Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49
Certificate serial: 06C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
Manifest number: 06BC
Signing time: Sat 04 Apr 2026 22:09:14 +0000
Manifest this update: Sat 04 Apr 2026 22:09:14 +0000
Manifest next update: Sat 11 Apr 2026 22:09:14 +0000
Files and hashes: 1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: vbUuWcNfg18AU0Nif35X8+TNQ74qAIPLs8/O6wWIIWU=)
2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: B5b4pHn3Q7lWdfVk+2VqlqlxqURQjUTmZj9KZGH2lHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl
rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1735 (0x6c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49
Validity
Not Before: Apr 4 22:09:14 2026 GMT
Not After : Apr 11 22:09:14 2026 GMT
Subject: CN=69d18c0a-c637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:f9:3f:5b:ef:83:03:ab:9a:5a:b0:e1:f4:
15:a9:af:2d:41:7d:ca:00:ce:f4:74:83:32:c8:56:
62:f0:36:98:c5:ca:48:8b:32:e7:39:09:46:b2:cd:
c3:fa:3c:62:2a:6d:77:9d:50:4d:5c:b8:64:38:0c:
75:c1:71:f8:79:3a:a8:41:b2:8a:ac:8f:a1:9d:8f:
c8:4e:a3:ea:08:07:4f:11:81:7b:51:18:b5:73:ef:
04:72:20:ed:f0:e8:ff:84:1b:60:82:d8:50:bf:3a:
d2:3b:7e:00:6f:b8:ff:87:8c:64:01:95:2d:e7:a4:
e8:d1:de:9e:f4:43:ef:73:db:ba:59:e0:58:0a:49:
20:fc:ad:ee:6f:6d:8d:d2:5e:ff:58:82:36:4e:17:
72:98:f7:fa:9c:a7:ef:8d:76:c1:7b:57:53:35:83:
9f:88:1d:5f:48:ee:67:bd:85:3c:0f:66:46:54:3d:
bd:f2:21:d2:e6:85:5d:1b:a5:6c:39:b6:70:17:2f:
16:6a:0e:3c:b4:df:85:33:58:74:d7:2c:f8:fb:b6:
6d:87:17:05:f0:52:11:48:2a:b6:2c:05:82:8a:14:
a5:63:72:fe:d8:b1:41:8e:d7:73:ad:05:d8:b7:5a:
7d:1d:8d:56:14:7a:c5:a1:a8:86:ee:c9:49:f8:ea:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:26:8C:37:73:85:0D:A9:2C:C9:A5:CD:C2:9D:34:5B:48:06:23:49
X509v3 Authority Key Identifier:
keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:eb:6e:26:3a:ac:9c:31:5a:40:f6:1f:3a:a9:fe:19:f5:9a:
45:02:d3:e2:a2:c7:18:ac:21:e3:73:7a:91:9b:ed:c4:9e:ad:
0d:24:b4:7e:f7:28:25:1b:e9:05:dd:e6:d8:ee:72:92:d5:b1:
d9:73:8f:dc:19:31:21:5f:a0:9f:69:30:5c:7b:b9:6f:dd:9f:
14:2b:c8:da:64:71:24:84:6d:ea:9e:16:74:a5:d4:00:0d:ba:
51:26:e6:a1:e7:7a:a0:0b:ae:0f:3a:75:20:5b:a4:25:8c:bb:
c9:45:d7:3a:52:b0:e3:98:d7:b9:4d:f6:64:00:06:fe:08:87:
5b:63:90:b2:6c:3e:e0:50:57:3b:7a:31:a5:49:70:c2:1e:bf:
b4:36:c0:b8:b9:1d:cd:60:84:1e:f2:01:b6:f6:df:92:32:e9:
a2:b0:7f:78:3a:09:5f:49:e1:45:69:38:39:17:99:00:ab:31:
41:ba:91:b8:ca:7c:81:d0:24:b9:61:db:10:f5:2f:cb:0a:91:
16:32:c4:5b:96:01:03:3c:20:e2:a1:46:31:ab:ad:09:77:bd:
85:a3:7f:ce:9d:b6:d6:03:f2:59:39:0a:52:81:76:65:ed:ca:
c6:0e:7a:2d:1c:96:5a:8d:b6:c6:d8:98:c4:e3:8d:f9:15:36:
f1:84:2d:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE3RTUxMTAvBgNVBAUTKDQ1MjU4ODQxRjdGMDRGQjM5RDkxREEzRTNGQUJCNTI5
RTg1MjhGNDkwHhcNMjYwNDA0MjIwOTE0WhcNMjYwNDExMjIwOTE0WjAYMRYwFAYD
VQQDEw02OWQxOGMwYS1jNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtND5P1vvgwOrmlqw4fQVqa8tQX3KAM70dIMyyFZi8DaYxcpIizLnOQlGss3D
+jxiKm13nVBNXLhkOAx1wXH4eTqoQbKKrI+hnY/ITqPqCAdPEYF7URi1c+8EciDt
8Oj/hBtggthQvzrSO34Ab7j/h4xkAZUt56To0d6e9EPvc9u6WeBYCkkg/K3ub22N
0l7/WII2ThdymPf6nKfvjXbBe1dTNYOfiB1fSO5nvYU8D2ZGVD298iHS5oVdG6Vs
ObZwFy8Wag48tN+FM1h01yz4+7ZthxcF8FIRSCq2LAWCihSlY3L+2LFBjtdzrQXY
t1p9HY1WFHrFoaiG7slJ+OoPuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsmjDdz
hQ2pLMmlzcKdNFtIBiNJMB8GA1UdIwQYMBaAFEUliEH38E+znZHaPj+rtSnoUo9J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdFNS9EQjAwRjgwMkEw
RkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3T2RrZG8tUDZ1MUtlaFNq
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JTV0lRZmZ3VDdPZGtkby1QNnUxS2VoU2oway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTdFNS9EQjAwRjgwMkEwRkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3
T2RrZG8tUDZ1MUtlaFNqMGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiutuJjqsnDFaQPYfOqn+GfWaRQLT4qLHGKwh43N6kZvtxJ6tDSS0fvcoJRvp
Bd3m2O5yktWx2XOP3BkxIV+gn2kwXHu5b92fFCvI2mRxJIRt6p4WdKXUAA26USbm
oed6oAuuDzp1IFukJYy7yUXXOlKw45jXuU32ZAAG/giHW2OQsmw+4FBXO3oxpUlw
wh6/tDbAuLkdzWCEHvIBtvbfkjLporB/eDoJX0nhRWk4OReZAKsxQbqRuMp8gdAk
uWHbEPUvywqRFjLEW5YBAzwg4qFGMautCXe9haN/zp221gPyWTkKUoF2Ze3Kxg56
LRyWWo22xtiYxOON+RU28YQtfA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:28 2026 by rpki-client