
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier: +1DFPIhRr76jCg9AK5Zk79bM/QPZcNO2aoMGPeU+eFY=
Subject key identifier: C3:2E:F8:29:BE:3D:FA:39:27:04:8E:79:D3:89:49:6C:00:88:12:5A
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial: 1896
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number: 1859
Signing time: Fri 02 Oct 2026 16:39:12 +0000
Manifest this update: Fri 02 Oct 2026 16:39:11 +0000
Manifest next update: Fri 09 Oct 2026 16:39:11 +0000
Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: XL0XR5D0dV2aWJ687ghUoUzN9JaFNK0+UCxUoDJwEWQ=)
2: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: n1u9iSyb9bdQc1QOK/WYlhLEbmOoYxOlffVDVXq1fW4=)
3: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: t9gfSRrRBhg5aKee6bLsa2HCvO/wXMYsjYUGDi3D7i0=)
4: 047C0BCC373211F1887E264A90833773.roa (hash: LWhnCQp9VfJYhsJdhzflBR7RBHFtlmggsyH3Tj4cj0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 16:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6294 (0x1896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Validity
Not Before: Oct 2 16:39:11 2026 GMT
Not After : Oct 9 16:39:11 2026 GMT
Subject: CN=6abfde30-4801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:4a:16:87:69:55:cb:c1:2f:ba:07:d9:d3:
52:de:2e:f4:c4:21:2f:7c:2a:c3:2f:55:b0:01:fc:
25:ad:9e:99:be:91:7e:5d:c1:60:00:8b:f5:70:ac:
85:01:c6:1a:c1:88:49:e2:ba:ad:70:cb:37:e9:c9:
40:cb:d7:33:a0:26:32:0d:e4:3b:26:22:cb:80:76:
d5:26:6e:66:a1:58:90:d0:d1:0b:e8:ef:89:1f:0a:
f3:53:62:1a:c4:e4:a3:55:87:41:b0:08:d3:c7:d8:
df:31:7f:d4:6d:a7:67:75:a7:63:df:c2:82:72:d2:
15:50:0a:17:66:25:fe:c1:dd:83:5e:ad:f2:2a:54:
70:2f:00:8a:f9:85:37:15:d5:53:3f:ca:6f:5d:00:
78:85:a0:b4:56:51:97:c2:64:78:de:89:ba:43:56:
9c:95:3c:ba:56:39:76:56:73:0d:81:77:d9:b7:51:
a0:b8:6e:3e:70:4a:6b:9a:30:da:e0:63:2a:e3:e1:
f4:ec:57:6c:03:aa:fc:a6:a4:b4:c6:e9:79:bc:2a:
53:3c:f0:a4:df:ac:ed:df:16:23:e2:58:46:9f:c6:
8d:a1:2e:5c:73:23:89:65:01:cf:83:b8:7a:11:6e:
27:26:b7:4d:6b:91:2a:fb:c9:ed:bc:ca:11:1a:e9:
1f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:F8:29:BE:3D:FA:39:27:04:8E:79:D3:89:49:6C:00:88:12:5A
X509v3 Authority Key Identifier:
keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:9c:1e:aa:8f:df:a7:b5:c8:49:c8:ee:6f:4b:29:5f:2f:f8:
f5:e1:b4:11:cb:58:87:0a:bd:b0:2c:2a:a1:02:55:49:21:36:
af:97:7c:06:58:f6:bb:17:b2:21:7c:0c:9c:08:2e:6b:2d:79:
bd:d4:6e:46:85:b3:2e:ba:54:0a:a1:09:09:7b:78:58:55:da:
fb:5b:1c:a8:0a:d7:c8:67:90:f3:db:42:69:82:d4:5f:d5:4a:
f1:a8:1b:b3:f9:88:4b:6b:a1:98:ac:21:b6:e5:e0:f7:9e:28:
95:11:e2:dc:98:ec:fa:72:44:1b:54:6f:25:13:dc:d9:01:c8:
48:5f:0f:e4:43:96:c1:f5:51:0b:d1:9f:ed:3c:cf:18:bf:fe:
97:09:8a:9d:a1:6a:1a:55:fa:0b:20:d1:71:28:e4:f2:ff:7e:
c9:b0:ea:5e:e8:18:82:72:10:58:81:99:05:55:ad:05:71:9c:
74:ea:1c:03:d0:7b:bc:e3:10:73:63:8a:4a:32:c4:14:37:7f:
1d:f9:a7:90:e6:43:7c:80:46:95:3e:92:6e:23:e6:32:46:5d:
d5:e2:62:90:0c:f5:7b:1a:24:99:dd:f0:d5:fa:b3:b6:60:f2:
2d:9f:ea:d5:00:39:14:bf:67:70:c8:fd:b7:9c:eb:40:7d:f7:
77:e1:4a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:39:55 2026 by rpki-client