
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json)
Hash identifier: T4pdZZ/BjSRjKOWwfGeFCsE60YGcwUbpEoaZJ//IcVQ=
Subject key identifier: 67:09:96:59:6B:D0:DA:60:43:11:17:40:E7:4E:23:01:8C:18:82:72
Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22
Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822
Certificate serial: 0A0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
Manifest number: 0A05
Signing time: Thu 06 Aug 2026 19:38:25 +0000
Manifest this update: Thu 06 Aug 2026 19:38:24 +0000
Manifest next update: Thu 13 Aug 2026 19:38:24 +0000
Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: gvARO4zHL0ThpLH9I7OkRvrrUow+RdNBUWWlZhOnX34=)
2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: F2o3bVfdgibRTgDe0DxEdoAWCoUl7F1g3jf5bWQpITQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl
rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Aug 2026 19:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2575 (0xa0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822
Validity
Not Before: Aug 6 19:38:24 2026 GMT
Not After : Aug 13 19:38:24 2026 GMT
Subject: CN=6a74e2b0-c7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:6a:86:58:7f:78:55:90:41:55:ce:3d:21:
9e:e2:29:77:5a:a2:53:0c:e0:ad:b0:b7:ee:13:10:
00:be:dc:16:89:21:2f:23:05:1f:83:d3:05:f5:a3:
9e:f9:53:80:5f:db:d0:a6:62:8f:ab:7b:bb:a5:7b:
6e:d3:ba:50:3b:6c:6c:c3:d3:37:16:19:61:57:fc:
94:93:0e:d6:20:84:6f:26:12:8a:50:8b:66:09:49:
f5:28:98:b6:26:a3:ab:73:02:d9:0f:29:b6:13:40:
ce:e3:30:2f:c7:96:79:b7:5c:d7:d6:80:84:28:44:
56:d0:d9:ca:d5:b6:45:22:49:01:51:48:a6:1e:7a:
b0:ff:7d:7a:63:c2:a6:35:61:68:e2:48:d5:fe:08:
07:14:41:a8:eb:6d:2f:59:c4:60:42:5c:ae:29:c3:
05:98:0f:44:62:91:0b:47:e8:0a:d8:57:aa:6d:6f:
cd:24:3e:a1:a7:e4:ee:24:d4:9b:b5:da:31:3f:97:
ff:e0:91:76:d0:5f:e0:7e:47:fc:0a:28:da:ef:e4:
15:2e:ff:89:23:ff:2f:b9:47:0f:be:c5:66:97:b8:
16:81:96:b8:55:30:45:26:0e:06:8f:74:12:db:a3:
86:d5:29:9e:fa:1a:63:66:f6:7e:55:2e:57:b2:91:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:09:96:59:6B:D0:DA:60:43:11:17:40:E7:4E:23:01:8C:18:82:72
X509v3 Authority Key Identifier:
keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:31:66:08:95:b9:63:04:8f:23:58:ae:9e:4e:a1:2c:ad:a0:
5d:de:b7:37:a8:f9:62:10:79:f0:df:12:62:25:af:12:50:cd:
a5:82:7c:e7:17:93:59:1d:cc:f0:13:86:66:3a:6d:af:3c:57:
ac:2a:02:e7:da:64:64:1c:ae:72:e0:d1:f7:83:1b:5c:7e:21:
75:ad:15:cf:39:02:65:6e:3f:0f:51:f5:0c:29:2b:d1:fb:49:
60:56:74:6b:d3:97:73:db:7a:07:0e:d5:cd:95:66:8c:54:5a:
c1:ba:59:c8:27:11:c8:29:e3:0a:5a:32:9c:fe:94:42:c4:5a:
dd:b9:56:77:b3:de:45:60:f3:7c:f0:9d:54:84:52:13:c4:78:
96:84:e7:05:97:e2:2f:8f:12:67:23:df:67:2c:be:ea:5c:1e:
2e:e4:2f:c1:20:4c:e8:c6:38:59:6a:ca:3d:da:80:d6:2e:9b:
fe:14:2e:a6:58:b9:a0:a7:2d:a4:d6:32:39:59:aa:07:a6:d2:
e3:b3:27:5b:a4:da:ec:52:f4:c6:53:c0:f2:ca:8a:ca:54:3e:
d2:be:8a:d7:3f:25:4e:8a:f5:e3:f0:ab:75:96:d9:f7:4b:29:
2c:e8:8f:74:5b:ea:db:a0:1d:02:eb:a5:3f:e9:a5:82:e6:ee:
f0:de:9c:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz
QzYxODY4MjIwHhcNMjYwODA2MTkzODI0WhcNMjYwODEzMTkzODI0WjAYMRYwFAYD
VQQDEw02YTc0ZTJiMC1jN2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtGZqhlh/eFWQQVXOPSGe4il3WqJTDOCtsLfuExAAvtwWiSEvIwUfg9MF9aOe
+VOAX9vQpmKPq3u7pXtu07pQO2xsw9M3FhlhV/yUkw7WIIRvJhKKUItmCUn1KJi2
JqOrcwLZDym2E0DO4zAvx5Z5t1zX1oCEKERW0NnK1bZFIkkBUUimHnqw/316Y8Km
NWFo4kjV/ggHFEGo620vWcRgQlyuKcMFmA9EYpELR+gK2FeqbW/NJD6hp+TuJNSb
tdoxP5f/4JF20F/gfkf8Cija7+QVLv+JI/8vuUcPvsVml7gWgZa4VTBFJg4Gj3QS
26OG1Sme+hpjZvZ+VS5XspEWXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcJlllr
0NpgQxEXQOdOIwGMGIJyMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx
MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh
Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz
eFI5bGY4UGcyRW84WVlhQ0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWDFmCJW5YwSPI1iunk6hLK2gXd63N6j5YhB58N8SYiWvElDNpYJ85xeTWR3M
8BOGZjptrzxXrCoC59pkZByucuDR94MbXH4hda0VzzkCZW4/D1H1DCkr0ftJYFZ0
a9OXc9t6Bw7VzZVmjFRawbpZyCcRyCnjCloynP6UQsRa3blWd7PeRWDzfPCdVIRS
E8R4loTnBZfiL48SZyPfZyy+6lweLuQvwSBM6MY4WWrKPdqA1i6b/hQupli5oKct
pNYyOVmqB6bS47MnW6Ta7FL0xlPA8sqKylQ+0r6K1z8lTor14/CrdZbZ90spLOiP
dFvq26AdAuulP+mlgubu8N6cAg==
-----END CERTIFICATE-----
Generated at Fri Aug 7 01:24:32 2026 by rpki-client