
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft
File: WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft (raw, json)
Hash identifier: 4EZqTdLqeFdKxOxPmfHmDjU6OvCFabooV3nuuDOAqG0=
Subject key identifier: 49:27:7B:E2:61:5A:20:E0:60:8B:E2:09:29:51:C5:7E:AC:C5:9E:3B
Authority key identifier: 5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D
Certificate issuer: /CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D
Certificate serial: 03E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft
Manifest number: 03E1
Signing time: Fri 25 Sep 2026 00:19:38 +0000
Manifest this update: Fri 25 Sep 2026 00:19:37 +0000
Manifest next update: Fri 02 Oct 2026 00:19:37 +0000
Files and hashes: 1: WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl (hash: NngQAD1UBrKWBEWZ+lqGV3VGx0FZKeKkrgDDIJhYFoo=)
2: BD65DA5EE24111ECB7132461C4F9AE02.roa (hash: bxUKlVvCWdZ2Eyvw13Hoq944T3dQzpz/Hp7tmrauMz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl
rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 999 (0x3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181B90, serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D
Validity
Not Before: Sep 25 00:19:37 2026 GMT
Not After : Oct 2 00:19:37 2026 GMT
Subject: CN=6ab5be1a-018b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cf:13:0f:a3:a6:53:2d:f3:c3:0b:46:e5:e6:
66:17:d9:ab:b2:1b:9b:8a:6c:15:89:c8:28:fe:f1:
59:e5:85:f8:a2:4f:c0:80:dd:71:e1:75:2e:5c:c1:
d8:84:c1:b1:9e:85:1a:6e:f0:61:74:47:65:8b:4c:
ea:7a:88:87:7a:ac:93:92:d9:be:0b:12:a6:de:fe:
2f:08:e0:22:f3:53:13:23:16:81:1f:0c:05:36:be:
23:28:57:b8:7c:7b:1e:ad:ef:2f:f4:9d:e8:fe:14:
34:bd:c5:20:95:10:a5:d5:4c:83:4b:36:b1:b4:b4:
bb:18:cd:34:75:4c:35:1a:59:5f:38:c1:4a:e7:29:
ee:5e:4c:2f:55:6f:94:ed:7f:77:2c:b6:c1:24:eb:
1a:f9:36:02:f3:0d:c0:8e:32:b9:69:2d:53:c8:82:
02:bb:02:67:5c:ed:bd:a0:a6:b5:7a:b3:4c:3d:51:
af:94:24:1d:c8:57:f8:66:77:08:69:dd:eb:64:62:
ec:e7:91:e6:cf:d8:b4:02:3c:87:a7:33:de:15:68:
bd:5c:58:84:db:f7:65:cd:7b:e9:65:ba:c0:20:42:
6f:31:a4:09:70:d8:2d:33:e0:ab:69:ea:fa:4a:55:
2e:e5:05:66:b6:d6:8d:ec:98:6d:76:01:0f:46:52:
19:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:27:7B:E2:61:5A:20:E0:60:8B:E2:09:29:51:C5:7E:AC:C5:9E:3B
X509v3 Authority Key Identifier:
keyid:5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:27:64:2b:77:48:a9:92:1d:fa:af:14:4f:9d:7a:c3:46:e7:
e4:a1:19:ac:64:4b:99:7d:75:2a:3c:04:e3:b5:56:a8:34:cd:
f5:fd:15:e7:3a:fb:95:93:92:7b:1d:97:92:bd:ff:2f:5e:b7:
2f:c9:c0:d3:9c:5e:0c:e5:fa:0c:54:1e:7a:de:7c:8b:e9:34:
00:7e:53:22:d1:81:36:5a:b7:20:fb:61:52:20:08:f5:71:2b:
0a:59:f9:bd:1b:e8:5b:9c:9e:f7:5f:8e:aa:64:74:59:35:cb:
2c:a2:db:31:3a:90:65:1a:7e:a6:68:e5:ee:14:db:13:f2:77:
0f:43:a6:ab:53:d2:d6:5b:09:90:62:81:cf:3a:a6:a3:42:bd:
d5:9e:c5:a8:5f:cd:67:0d:a9:6d:b4:72:88:5c:aa:df:3b:3b:
89:6b:25:37:fd:e3:96:99:74:82:5e:bd:99:48:9b:10:16:b1:
48:d7:3b:54:d0:6b:66:8f:02:23:6d:d4:24:47:1f:c7:f5:9f:
dc:a5:bc:da:fc:ad:90:67:a2:86:bf:ee:5d:6e:82:09:3c:3e:
ea:e4:90:94:72:7b:ea:84:7e:ad:0b:b3:19:86:31:5d:62:4f:
7d:6b:27:1b:e0:3b:f8:fb:38:55:c4:02:72:c0:c0:27:80:a0:
33:87:2f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:26:31 2026 by rpki-client