
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
File: bwlMAO-I_YtwgT1trctUaHYyjNk.mft (raw, json)
Hash identifier: GCI8rsirBcPy36vww3ghHZyfk9t4LzFjTLu97fByi1k=
Subject key identifier: F6:FD:17:11:73:57:F7:55:25:73:5C:12:76:AF:86:12:A4:95:40:64
Authority key identifier: 6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9
Certificate issuer: /CN=A91F8E25/serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
Certificate serial: 2259
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
Manifest number: 2E7F
Signing time: Sun 26 Jul 2026 15:34:00 +0000
Manifest this update: Sun 26 Jul 2026 15:33:59 +0000
Manifest next update: Sun 02 Aug 2026 15:33:59 +0000
Files and hashes: 1: bwlMAO-I_YtwgT1trctUaHYyjNk.crl (hash: 1pDI+R998wREzavZyJRdK1tCnUVkLtoSwZXyfV/FgdI=)
2: 44A88C482CA611F1A847C919C5833773.roa (hash: XIvcZhXRx87BSwov/Ulx76fwgEzGaA5I0TxUrYuAlrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl
rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 15:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8793 (0x2259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E25, serialNumber=6F094C00EF88FD8B70813D6DADCB546876328CD9
Validity
Not Before: Jul 26 15:33:59 2026 GMT
Not After : Aug 2 15:33:59 2026 GMT
Subject: CN=6a6628e8-3f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:b5:cf:1b:a8:7b:75:9e:30:13:c9:03:42:
9d:3d:d3:07:10:78:8a:6b:aa:fe:9e:18:b0:58:b2:
36:d1:09:f1:dc:df:6a:aa:26:62:2c:e8:16:c6:7f:
76:ac:f7:ff:c6:02:0f:ae:3e:11:56:47:5c:ad:9b:
70:71:1d:54:02:6c:bc:b3:ed:ff:0b:c8:b3:57:d2:
4a:30:55:d2:9a:f7:a9:e1:b3:a9:c7:a3:99:2f:78:
b3:fa:a5:f4:23:cb:06:d9:0a:6a:44:4f:ed:69:05:
b8:b0:58:6b:6e:2b:2c:a5:08:bd:39:15:a6:b7:c3:
df:f9:87:54:99:85:76:46:7f:7a:4a:bd:42:4c:85:
15:ad:41:1a:78:93:18:58:3f:bf:2e:d3:86:89:f8:
9b:0b:69:19:5e:ba:9b:0f:1b:0b:fc:ed:8f:95:38:
bf:3c:9a:91:d7:c1:50:f1:43:e8:09:c7:8a:f5:f4:
ef:18:f3:d8:79:11:a6:8f:b6:8c:bf:29:fa:09:6d:
63:1b:e8:4b:58:ce:d3:8f:94:80:02:e6:92:de:11:
9d:12:7c:76:1a:54:63:41:e7:f2:32:72:11:05:9c:
b6:c4:69:f7:e7:8c:e4:ca:ab:db:97:20:ff:4d:58:
fa:24:7d:0f:0c:cd:4c:78:84:14:a6:33:97:e5:59:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FD:17:11:73:57:F7:55:25:73:5C:12:76:AF:86:12:A4:95:40:64
X509v3 Authority Key Identifier:
keyid:6F:09:4C:00:EF:88:FD:8B:70:81:3D:6D:AD:CB:54:68:76:32:8C:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwlMAO-I_YtwgT1trctUaHYyjNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E25/F43441168A2E11E3B5B6E95E5911EA32/bwlMAO-I_YtwgT1trctUaHYyjNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:b1:75:53:37:65:22:11:38:1d:9b:ff:a2:26:37:4b:a6:44:
20:47:69:e1:7d:64:ad:08:02:c3:50:f4:96:69:bd:74:ea:02:
5d:36:ea:e2:1e:4b:db:74:4d:02:f3:e4:97:37:1e:9c:1e:72:
a6:54:e7:1a:27:a6:17:6d:16:ad:df:bb:8d:f9:37:5c:f9:57:
0e:ac:6c:2d:7e:f3:b7:cc:49:82:6b:1a:dd:b4:a9:82:fd:03:
a7:98:d2:8b:5a:8e:39:fe:e5:8f:a7:96:cf:72:f6:d3:f7:5e:
a1:69:f6:ac:bc:5e:01:34:07:31:5d:05:c9:84:89:49:33:ef:
42:ea:56:23:99:bb:49:9c:6c:a6:97:9f:76:b2:e1:3c:32:ab:
1f:10:90:55:ef:9c:fa:bc:d4:77:18:6f:0c:27:59:6e:15:fb:
4b:eb:8e:f8:86:71:f2:96:05:8a:95:54:4a:39:c8:4b:ba:2f:
69:4f:40:f2:dd:24:14:6d:df:06:d9:62:73:ad:5a:f1:fc:bc:
dd:f8:0b:af:ae:2f:74:93:a1:af:37:f9:00:55:af:67:c4:89:
fd:4d:2d:1a:24:5b:04:1b:06:34:f6:48:06:b2:9e:6e:1c:99:
98:ff:07:bd:f1:10:0a:42:d5:ba:99:46:b0:0a:6c:c1:c4:25:
55:07:84:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:11:21 2026 by rpki-client