
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
File: buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json)
Hash identifier: n4KBvNVsAsWu5nLglmRS2UceTrFCfUfDbSS9+dh9vB8=
Subject key identifier: 6A:1C:B8:0F:A0:1F:06:47:9A:9D:C4:21:78:13:9B:DD:BA:66:28:47
Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24
Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24
Certificate serial: 06CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
Manifest number: 06C0
Signing time: Sun 04 Oct 2026 22:25:06 +0000
Manifest this update: Sun 04 Oct 2026 22:25:05 +0000
Manifest next update: Sun 11 Oct 2026 22:25:05 +0000
Files and hashes: 1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: tAnCOVa1AWFJGFr2Crve3sRZqYujVkVTQBdTZymJDKc=)
2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: Gz+GeHfA60L7+QKUKQDlh8huWYF/SncPBIlNy4m7Y7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl
rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 22:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1738 (0x6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24
Validity
Not Before: Oct 4 22:25:05 2026 GMT
Not After : Oct 11 22:25:05 2026 GMT
Subject: CN=6ac2d241-3690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:c3:16:6b:65:df:72:04:75:97:8b:ff:b0:
40:84:68:81:0b:41:84:19:56:46:6f:31:2f:d3:0d:
5f:66:c4:3c:31:95:d2:e0:69:c7:bd:5b:5c:00:89:
24:4a:85:c5:62:54:57:88:bf:90:9d:e6:fc:fa:c4:
84:b0:8d:ac:d3:4f:27:b4:0d:12:25:61:a2:d6:30:
9b:e6:98:3a:2f:9e:68:41:d7:a3:70:51:95:46:e2:
ee:d5:ad:c3:3f:08:ba:f9:8d:a1:e2:85:28:3e:5b:
53:82:8b:ab:fd:15:9c:91:ed:69:e6:e9:9b:6d:ea:
22:9e:bd:44:dc:26:e7:9d:36:a0:aa:f2:3b:cb:5c:
63:c8:b7:2a:02:9d:4e:e2:f1:9d:72:ed:ed:ef:00:
02:3d:95:d2:b3:ff:c0:1e:e2:8b:1e:57:89:cb:74:
8b:c6:5d:0c:6b:50:92:29:b6:ba:12:a2:34:a4:f0:
de:c9:ec:5f:e8:f4:07:08:cb:2a:76:ec:c2:54:c9:
bd:19:00:2c:0d:5c:19:20:21:37:c6:86:04:85:a6:
79:d2:67:b1:57:01:a3:79:e9:7e:a5:d0:5a:ff:90:
b9:65:23:9c:70:00:93:6d:a5:bf:17:99:d6:8c:4e:
72:15:5f:a5:7d:dc:66:e3:ad:1f:a0:f1:e6:c1:68:
16:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1C:B8:0F:A0:1F:06:47:9A:9D:C4:21:78:13:9B:DD:BA:66:28:47
X509v3 Authority Key Identifier:
keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:74:6d:8a:c2:a3:61:35:27:d7:5d:b8:0f:9c:60:d5:2c:aa:
aa:0e:a4:00:d3:d8:a8:74:60:18:18:e5:96:5e:66:e7:3e:54:
80:64:6c:d8:07:c4:85:72:2e:5d:f0:f3:aa:b5:db:6b:2b:79:
bd:ea:fd:da:cb:52:46:1e:12:66:c7:d6:f2:76:d8:d1:90:49:
f3:bb:5d:c3:8e:dd:da:c8:02:87:67:8e:d0:9f:69:68:8d:6d:
32:2f:93:46:b7:5e:25:be:9c:87:3c:17:67:20:23:de:f4:5d:
f3:42:f3:c4:98:5d:88:fc:23:21:20:e0:db:fb:dc:7b:47:a5:
02:3d:8a:08:b8:e4:54:13:e0:e2:00:7f:32:85:f8:4c:47:ab:
41:13:74:03:3c:f3:50:2c:f6:9c:b6:8b:33:57:10:59:7b:2e:
40:6c:ea:3f:7e:2e:8a:44:1d:29:9e:17:d3:d0:44:0e:4d:7a:
d9:af:a8:3a:51:4f:52:2a:6b:16:e3:12:2d:02:97:3e:cb:99:
f1:1f:4a:21:35:c4:4d:7f:3f:06:31:b2:e2:27:a4:36:ee:54:
63:22:52:50:da:bd:83:15:bc:28:cb:d3:22:68:ce:26:71:e2:
7c:a3:64:76:5e:ab:bf:b0:ac:56:53:1b:f6:7b:e2:c2:33:81:
d7:f1:87:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlENUQxMTAvBgNVBAUTKDZFRTU5QTdEQUMwN0EyMjVCOTFCMzQ2NkFEMUEwNzQ2
NDkzRDhFMjQwHhcNMjYxMDA0MjIyNTA1WhcNMjYxMDExMjIyNTA1WjAYMRYwFAYD
VQQDEw02YWMyZDI0MS0zNjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApDTDFmtl33IEdZeL/7BAhGiBC0GEGVZGbzEv0w1fZsQ8MZXS4GnHvVtcAIkk
SoXFYlRXiL+Qneb8+sSEsI2s008ntA0SJWGi1jCb5pg6L55oQdejcFGVRuLu1a3D
Pwi6+Y2h4oUoPltTgour/RWcke1p5umbbeoinr1E3CbnnTagqvI7y1xjyLcqAp1O
4vGdcu3t7wACPZXSs//AHuKLHleJy3SLxl0Ma1CSKba6EqI0pPDeyexf6PQHCMsq
duzCVMm9GQAsDVwZICE3xoYEhaZ50mexVwGjeel+pdBa/5C5ZSOccACTbaW/F5nW
jE5yFV+lfdxm460foPHmwWgWwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGocuA+g
HwZHmp3EIXgTm926ZihHMB8GA1UdIwQYMBaAFG7lmn2sB6IluRs0Zq0aB0ZJPY4k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQ1RC80MDAxQTE2Q0M0
NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9pVzVHelJtclJvSFJrazlq
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J1V2FmYXdIb2lXNUd6Um1yUm9IUmtrOWppUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUQ1RC80MDAxQTE2Q0M0NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9p
VzVHelJtclJvSFJrazlqaVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdnRtisKjYTUn1124D5xg1Syqqg6kANPYqHRgGBjlll5m5z5UgGRs2AfEhXIu
XfDzqrXbayt5ver92stSRh4SZsfW8nbY0ZBJ87tdw47d2sgCh2eO0J9paI1tMi+T
RrdeJb6chzwXZyAj3vRd80LzxJhdiPwjISDg2/vce0elAj2KCLjkVBPg4gB/MoX4
TEerQRN0AzzzUCz2nLaLM1cQWXsuQGzqP34uikQdKZ4X09BEDk162a+oOlFPUipr
FuMSLQKXPsuZ8R9KITXETX8/BjGy4iekNu5UYyJSUNq9gxW8KMvTImjOJnHifKNk
dl6rv7CsVlMb9nviwjOB1/GHsQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 11:58:57 2026 by rpki-client