
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
File: bwlMAO-I_YtwgT1trctUaHYyjNk.mft (raw, json)
Hash identifier: /eoZ67id8msMtyc+AS160d3Fnx38AYhcNQB7My4TVxs=
Subject key identifier: 64:00:14:77:54:43:2D:84:F4:9F:32:9C:A6:B7:D9:15:4F:C9:08:17
Authority key identifier: 6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9
Certificate issuer: /CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
Certificate serial: 228D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
Manifest number: 2EB2
Signing time: Fri 30 Oct 2026 15:29:07 +0000
Manifest this update: Fri 30 Oct 2026 15:29:07 +0000
Manifest next update: Fri 06 Nov 2026 15:29:07 +0000
Files and hashes: 1: bwlMAO-I_YtwgT1trctUaHYyjNk.crl (hash: 9kqHXoLriQuVE6IgE4cUsa4lassfdXdqeaBf3hg6wrY=)
2: 44A88C482CA611F1A847C919C5833773.roa (hash: bKgCp4EHIIvC6tgJBK5J1/iYjgk0IVxADvyBY64+CAc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl
rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 15:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8845 (0x228d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E25, serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
Validity
Not Before: Oct 30 15:29:07 2026 GMT
Not After : Nov 6 15:29:07 2026 GMT
Subject: CN=6ae4b7c3-7660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:f9:a5:5d:85:49:01:35:ae:4f:41:af:39:
cc:87:6c:ed:de:48:f6:d8:57:b3:7e:86:4c:48:b8:
63:80:95:ee:bd:53:e9:8f:41:cc:0f:f1:95:6e:04:
2d:00:11:20:c7:d8:99:b4:e8:bf:4b:80:56:75:7a:
ec:36:a2:f6:ac:32:6a:16:ef:9a:50:3a:ba:5f:5f:
fe:2a:c0:3b:ae:c7:c7:45:bb:08:85:b0:3e:fc:86:
a5:89:bc:8e:b8:c4:82:64:ef:18:30:3f:87:1e:62:
33:2e:54:00:a1:31:50:3e:af:2d:0f:df:5d:f3:0d:
1e:3a:a3:de:5a:09:2d:43:2d:0c:a0:94:27:9b:4a:
37:1a:92:b9:c7:b8:85:ef:6e:e1:89:6d:f2:7d:6b:
e8:dd:08:e2:c5:fd:c6:b2:2d:c8:35:07:79:66:63:
5f:73:4e:eb:0e:b2:86:b0:4f:a6:6b:49:ae:db:61:
f2:9c:d3:d0:f2:9b:e5:6a:63:75:6c:af:4f:26:31:
e0:fa:b6:ee:68:a1:1b:f0:da:d0:3a:36:49:0f:fb:
37:f2:b1:28:b3:1b:aa:71:33:5b:7b:90:0e:2b:6e:
15:68:b2:90:f5:e1:89:87:d9:37:d8:bc:f7:f0:4a:
e2:b8:04:6d:14:b1:a3:b4:2f:00:cf:77:43:1c:9f:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:00:14:77:54:43:2D:84:F4:9F:32:9C:A6:B7:D9:15:4F:C9:08:17
X509v3 Authority Key Identifier:
keyid:6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:14:6d:55:6a:fb:33:3b:f2:96:df:12:09:8e:96:44:dc:4e:
55:af:0d:fd:d7:91:18:61:0f:27:e7:4e:8b:6b:a8:0c:82:8b:
c4:12:82:48:e8:c7:2a:18:d5:58:ac:f2:ff:76:a6:a8:9b:0b:
ee:2f:c9:65:37:b1:08:b1:54:e6:b5:da:e4:31:51:e7:8e:ef:
bc:84:a5:60:4f:c6:71:fd:ae:bd:51:10:47:5d:7f:06:d5:27:
ae:64:47:05:e1:12:3b:93:47:09:3b:33:79:2c:b0:00:9f:a7:
02:4b:38:94:0d:fe:2a:54:f8:53:f1:bf:54:11:0c:3d:7c:bd:
24:b1:14:86:70:ad:46:22:90:d9:91:e3:15:f6:19:f8:53:74:
c3:c6:e6:fd:3e:7b:3c:66:02:3d:1f:14:c8:0a:b7:11:9a:86:
39:be:ab:81:15:6f:0d:86:73:fb:0c:ab:b2:35:63:0c:30:64:
7c:82:5c:5a:94:c9:71:83:d5:32:ae:1a:d5:e3:c6:91:48:45:
a7:e9:b2:3c:8e:aa:56:fa:b9:47:ee:36:0e:93:26:27:f1:2f:
5b:cb:98:c6:e5:62:c7:49:db:a4:4d:c8:22:7a:e2:06:e3:ab:
6c:2c:26:0c:4b:18:3d:4d:03:53:95:2b:d3:b5:93:26:5a:fa:
11:17:81:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:43:26 2026 by rpki-client