
$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier: O00ijO4yzKPSixQdiceBwqXxPm5WPuSoyE2TmzURg6U=
Subject key identifier: D3:F2:C7:CD:71:4C:DA:06:78:BB:C9:D8:D6:8A:63:45:C9:A8:A6:16
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial: 1830
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number: 17F5
Signing time: Tue 24 Mar 2026 16:27:55 +0000
Manifest this update: Tue 24 Mar 2026 16:27:54 +0000
Manifest next update: Tue 31 Mar 2026 16:27:54 +0000
Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: p176hhUPezAn1YNY9VJ1kxkEiEcLMFnWxHsUKOKU81Y=)
2: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: t9gfSRrRBhg5aKee6bLsa2HCvO/wXMYsjYUGDi3D7i0=)
3: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: n1u9iSyb9bdQc1QOK/WYlhLEbmOoYxOlffVDVXq1fW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6192 (0x1830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Validity
Not Before: Mar 24 16:27:54 2026 GMT
Not After : Mar 31 16:27:54 2026 GMT
Subject: CN=69c2bb8b-443b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:61:db:86:0e:3a:c5:5a:c5:ab:4b:d0:7d:
f4:0a:ba:c4:9d:a3:96:3f:42:f9:62:e5:54:a1:9f:
83:97:a7:cc:07:36:59:25:c7:4d:ab:ab:4f:09:e7:
dc:ac:d3:81:b3:88:78:23:cf:0a:96:35:45:83:09:
2a:7c:1d:93:c3:38:06:1b:bf:88:c2:3c:39:77:d5:
7c:a2:a3:00:b6:ef:6a:49:d6:b1:e5:76:df:89:b2:
30:fd:3a:73:87:30:13:8e:cd:f2:85:b8:86:64:50:
01:cf:80:19:e3:4e:ad:d4:cb:b7:32:8d:ac:5b:38:
6a:44:82:9d:fb:48:b5:bc:1f:af:b9:b4:85:e4:f1:
0a:a7:17:77:1a:24:d6:25:e5:b7:ef:22:ee:be:f8:
9e:e2:63:42:33:cd:9d:21:03:6c:7f:c1:46:6b:e7:
7e:cb:3f:50:6e:21:46:c7:62:95:44:c0:c5:51:15:
d5:eb:e3:47:4f:88:b6:b2:91:1c:a3:72:c8:62:b5:
50:67:97:1d:b4:f4:c8:29:36:08:96:35:80:d2:38:
01:a2:12:38:fe:3d:fd:fd:d7:f1:b8:d1:fa:5c:13:
bf:6c:16:16:46:b8:37:17:ad:ae:4d:80:f2:91:86:
cd:9f:1e:5c:95:6b:73:1f:34:fd:ea:83:e6:71:d0:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F2:C7:CD:71:4C:DA:06:78:BB:C9:D8:D6:8A:63:45:C9:A8:A6:16
X509v3 Authority Key Identifier:
keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6b:f1:4b:28:44:36:79:07:02:73:b9:81:be:02:83:95:4a:
64:c1:e0:43:21:94:43:0d:ee:bf:5f:95:e0:fb:ee:69:74:05:
e2:71:87:1c:68:fb:dc:b3:0c:3d:fd:31:09:5e:0d:2e:67:ed:
bc:cb:49:9b:f1:21:6a:07:6a:c1:47:15:66:dd:51:bb:c9:f3:
e2:e0:5a:1d:b3:18:3b:9e:04:c4:04:7d:24:69:0e:0b:9b:fe:
6c:fb:84:64:4c:60:cf:8a:b4:37:be:f0:57:e4:f9:80:83:63:
b5:64:b5:62:25:fc:3a:cf:c2:a4:9a:f8:7e:64:96:ad:f9:ba:
05:cc:67:f2:09:80:39:65:db:c0:bf:62:9d:55:31:1d:46:03:
04:55:49:25:0f:57:d3:d6:fa:55:b1:d5:cd:ae:3a:f8:9c:93:
cc:3c:4b:51:d3:68:30:c0:3e:7f:27:75:a5:00:c5:fe:17:6b:
69:9c:59:e1:ba:11:38:61:fe:b1:be:01:ae:dc:67:10:13:55:
84:97:8a:e1:02:4d:95:b3:13:28:66:db:ac:c2:49:57:46:33:
73:39:b5:79:46:cc:b4:2f:cd:ee:98:10:0e:42:2f:cf:0d:2b:
88:63:e3:26:15:a4:ab:fa:88:93:bc:44:cd:d2:1a:87:a9:9f:
60:6d:e6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:33 2026 by rpki-client