
$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier: B9EHW43ckQCO655QREIVejdDcoGQryhka0XxtRpO+z4=
Subject key identifier: E9:1F:49:48:F8:4A:C1:F3:58:0B:2E:EB:F5:7D:D8:5C:E9:CC:E2:ED
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial: 184D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number: 1810
Signing time: Tue 12 May 2026 16:33:25 +0000
Manifest this update: Tue 12 May 2026 16:33:25 +0000
Manifest next update: Tue 19 May 2026 16:33:25 +0000
Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: zwf8GySRDeGlBWE5eh8FNPSbsjGnatxCS7TJ9dAFpMM=)
2: 047C0BCC373211F1887E264A90833773.roa (hash: LWhnCQp9VfJYhsJdhzflBR7RBHFtlmggsyH3Tj4cj0M=)
3: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: n1u9iSyb9bdQc1QOK/WYlhLEbmOoYxOlffVDVXq1fW4=)
4: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: t9gfSRrRBhg5aKee6bLsa2HCvO/wXMYsjYUGDi3D7i0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6221 (0x184d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Validity
Not Before: May 12 16:33:25 2026 GMT
Not After : May 19 16:33:25 2026 GMT
Subject: CN=6a035655-427d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:2c:39:93:40:c3:19:87:be:b3:09:4b:50:
05:9d:27:f1:9e:33:64:9f:c9:2a:87:e8:26:b6:af:
c7:0e:72:11:f9:1d:77:60:72:0f:bf:ac:3d:3d:a6:
59:5a:67:2a:b2:3c:81:a3:79:5e:2f:06:c4:4a:ad:
51:b2:cb:5f:9a:9b:78:94:a4:07:72:b7:30:16:c3:
f5:ce:49:ef:8a:06:a1:8e:c1:42:70:3e:78:d3:de:
c8:48:cb:36:ed:12:e4:9d:64:f1:35:e0:bb:4e:22:
f9:b0:59:7d:bd:42:bf:03:d4:de:0b:d3:64:c4:89:
ba:33:7b:b5:75:e6:d9:4c:f0:83:d1:8a:c1:46:4d:
f6:59:9c:ea:b1:44:33:a6:87:5f:21:d1:71:f1:c5:
04:d8:3a:61:b7:e3:cc:0a:03:b9:bb:13:2f:69:b1:
b5:67:7a:13:cc:eb:75:4f:d9:32:fe:90:66:80:c4:
98:e4:7d:6d:41:42:ca:9e:54:96:65:13:88:06:1e:
d3:f5:2f:4e:3b:b9:a9:c4:b7:e2:5d:c4:7a:b5:29:
55:ad:ae:0a:61:2c:58:1c:95:1b:cb:a3:87:3e:a1:
04:3a:d3:31:5e:de:de:3a:d4:73:32:c3:bc:a3:80:
fd:ee:aa:b7:e1:5b:f9:6a:91:35:98:7e:f4:cb:bd:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1F:49:48:F8:4A:C1:F3:58:0B:2E:EB:F5:7D:D8:5C:E9:CC:E2:ED
X509v3 Authority Key Identifier:
keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:88:a3:f5:9b:7f:a4:16:f4:6b:ce:56:1c:aa:fa:d0:70:4d:
41:db:9a:f0:f2:85:9b:64:17:1a:68:48:73:75:f2:2a:1b:36:
48:cd:0d:83:5f:31:d2:19:59:8f:6d:73:0c:b2:29:74:b6:df:
13:e7:15:1d:aa:16:54:55:78:1d:06:0b:d8:cb:f1:15:9f:7d:
4f:2c:6d:dd:32:f6:f9:2d:10:a3:de:b3:53:33:6c:44:1c:a4:
0a:b1:73:a4:f8:b5:c8:79:c5:cf:1f:10:5f:b2:97:55:41:a0:
4d:85:e2:af:30:41:8f:cf:89:df:cd:fa:10:e6:81:f8:c3:47:
0d:3c:5a:e4:f5:10:33:33:77:12:82:d9:68:b1:8f:f6:48:44:
20:7e:61:31:b8:f1:c2:17:dd:e5:69:6b:73:d0:7a:4e:09:0a:
16:09:f0:a9:8a:cc:10:16:39:45:75:96:e1:6f:8d:d0:29:22:
d2:35:94:96:96:12:b7:07:3b:09:61:41:97:24:f0:db:5e:a1:
3e:56:d0:e3:89:c9:7b:36:fd:05:2e:52:f6:90:ff:fb:1c:ca:
35:f6:9a:9b:62:17:8a:b6:0e:06:fe:0a:55:3d:41:bb:dd:29:
1d:2b:ab:3c:a9:f7:05:c8:d1:9e:65:e6:87:38:d7:ae:77:46:
5c:0a:d3:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4RTIxMTAvBgNVBAUTKEMxNDg1M0Q5QkQzRjc4RjY0ODBDNjMzNTIwNzY5NDNC
Qzc5QjlGQzIwHhcNMjYwNTEyMTYzMzI1WhcNMjYwNTE5MTYzMzI1WjAYMRYwFAYD
VQQDEw02YTAzNTY1NS00MjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuS4sOZNAwxmHvrMJS1AFnSfxnjNkn8kqh+gmtq/HDnIR+R13YHIPv6w9PaZZ
WmcqsjyBo3leLwbESq1Rsstfmpt4lKQHcrcwFsP1zknvigahjsFCcD54097ISMs2
7RLknWTxNeC7TiL5sFl9vUK/A9TeC9NkxIm6M3u1debZTPCD0YrBRk32WZzqsUQz
podfIdFx8cUE2Dpht+PMCgO5uxMvabG1Z3oTzOt1T9ky/pBmgMSY5H1tQULKnlSW
ZROIBh7T9S9OO7mpxLfiXcR6tSlVra4KYSxYHJUby6OHPqEEOtMxXt7eOtRzMsO8
o4D97qq34Vv5apE1mH70y70SkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkfSUj4
SsHzWAsu6/V92FzpzOLtMB8GA1UdIwQYMBaAFMFIU9m9P3j2SAxjNSB2lDvHm5/C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhFMi80QzkwOEEyMkUw
QjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQWklER00xSUhhVU84ZWJu
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dVaFQyYjBfZVBaSURHTTFJSGFVTzhlYm44SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzhFMi80QzkwOEEyMkUwQjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQ
WklER00xSUhhVU84ZWJuOEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeIij9Zt/pBb0a85WHKr60HBNQdua8PKFm2QXGmhIc3XyKhs2SM0Ng18x0hlZ
j21zDLIpdLbfE+cVHaoWVFV4HQYL2MvxFZ99Tyxt3TL2+S0Qo96zUzNsRBykCrFz
pPi1yHnFzx8QX7KXVUGgTYXirzBBj8+J3836EOaB+MNHDTxa5PUQMzN3EoLZaLGP
9khEIH5hMbjxwhfd5Wlrc9B6TgkKFgnwqYrMEBY5RXWW4W+N0Cki0jWUlpYStwc7
CWFBlyTw216hPlbQ44nJezb9BS5S9pD/+xzKNfaam2IXirYOBv4KVT1Bu90pHSur
PKn3BcjRnmXmhzjXrndGXArTdQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:02:15 2026 by rpki-client