
$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
File: WKIeeyP68huJ00Jw61b3RJwjmYY.mft (raw, json)
Hash identifier: ihvL9Jh7ZsaNwE3lNl65JG/lr30W154K4jSbjeWth4Y=
Subject key identifier: 40:C4:C1:62:AA:BC:05:96:D1:8D:FA:2F:A7:F5:87:1A:03:90:A0:68
Authority key identifier: 58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
Certificate issuer: /CN=A91656C7/serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
Manifest number: 92
Signing time: Wed 25 Mar 2026 06:37:25 +0000
Manifest this update: Wed 25 Mar 2026 06:37:25 +0000
Manifest next update: Wed 01 Apr 2026 06:37:25 +0000
Files and hashes: 1: WKIeeyP68huJ00Jw61b3RJwjmYY.crl (hash: BlcUW7ZXZ7RmpB97kHKiwGj2p5xP3dY0Awl5g9Xpm94=)
2: 559FC8C054F411F08DC15C53C4F9AE02.roa (hash: 0f4GSHCzNdKS9bURs+KpF8txlIHrkRwt0EzFhj9CMzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl
rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91656C7, serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
Validity
Not Before: Mar 25 06:37:25 2026 GMT
Not After : Apr 1 06:37:25 2026 GMT
Subject: CN=69c382a5-a13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:96:6d:7c:3e:23:6a:63:be:44:0d:4b:f6:
93:b3:3b:16:79:01:1a:f6:bf:c9:b2:48:02:40:aa:
64:cd:ee:bf:82:da:a1:a6:46:55:14:1d:4d:a7:47:
d6:19:07:12:c8:42:60:1d:4c:95:16:40:57:64:5c:
85:bf:78:f3:e2:9f:c8:aa:de:0d:37:e5:d7:53:94:
2b:17:7d:e7:17:7f:cb:68:71:12:9e:d7:7d:dd:78:
1b:03:e2:5f:8e:25:f1:30:36:ea:2a:51:63:7a:4f:
41:cf:1e:7e:4d:f3:21:9a:9a:c0:d9:b4:d4:f7:88:
25:5b:35:20:8f:3b:a9:d5:36:cd:23:33:fa:6e:a9:
d8:f6:55:41:3f:ae:c1:11:31:a5:73:44:42:9b:2d:
9b:e2:e8:d4:46:42:1d:eb:4f:fc:7b:d4:9f:17:f7:
e5:09:ba:8e:8d:6b:8d:1e:42:e6:cc:4a:60:46:01:
47:a1:60:a7:92:d5:c8:37:ba:3b:3a:bd:4d:5c:3e:
d8:f4:5c:4b:f8:ad:7d:3a:02:f4:85:9f:3a:b1:6e:
e5:f0:dd:10:16:c2:a0:be:2b:bb:fa:c3:00:ae:29:
57:50:0b:61:2a:47:e4:86:fe:24:ff:3f:06:d4:fa:
70:0e:c2:25:9b:12:4e:45:5f:7d:f1:5a:a3:5b:d8:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C4:C1:62:AA:BC:05:96:D1:8D:FA:2F:A7:F5:87:1A:03:90:A0:68
X509v3 Authority Key Identifier:
keyid:58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:e3:75:97:27:0e:72:b4:4d:0a:17:35:74:5a:ff:fb:3e:07:
0d:e9:5e:ed:33:2a:1b:92:9b:6e:ec:4c:25:60:eb:dd:aa:4a:
9b:c2:be:55:83:06:5e:38:e8:c7:28:8b:bd:6a:0b:df:dc:c9:
5a:61:c4:ef:49:c6:3f:00:4f:42:36:5a:48:be:0f:83:f6:82:
0a:f2:c8:eb:93:5c:f2:5b:3c:b6:df:f0:4c:5e:11:bf:8f:71:
b3:a7:cb:4a:a7:ce:f9:71:49:fc:f6:69:ec:c4:2f:4a:2e:6d:
ed:f2:93:51:1e:c6:ec:2f:e5:87:bb:2e:8e:60:ba:41:3c:cc:
2f:be:d1:4a:10:c8:1f:9b:c6:d5:c7:a9:bc:99:91:01:0c:a1:
d3:ff:08:70:57:9b:6f:ac:df:db:fa:8c:16:bb:59:97:3c:dd:
21:d1:45:b7:fb:5d:bd:49:35:3e:26:2d:4a:3c:94:ea:16:f8:
84:3a:b1:45:9c:1f:70:ce:ee:67:98:18:7c:a2:45:3f:38:98:
18:82:1e:61:d2:86:f7:57:1a:b0:16:30:de:59:f0:1d:26:99:
8d:95:9d:17:ee:aa:f1:e5:4e:9c:b5:ee:81:3a:af:d8:76:b4:
9e:56:c2:10:2d:c0:f9:56:97:dd:99:64:23:50:4a:a4:78:2f:
d3:c5:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:52 2026 by rpki-client