
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
File: wG_wBd4dXvE7qPDCYOljA0paIso.mft (raw, json)
Hash identifier: BAf7v0ip54OWoSaDr75FmSjSldMDTEKGpnxoXr6RVAY=
Subject key identifier: 00:62:EF:87:C1:6A:19:3C:F2:CB:DE:2D:20:C6:D6:1B:F7:6F:C1:CA
Authority key identifier: C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA
Certificate issuer: /CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA
Certificate serial: 0233
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
Manifest number: 022F
Signing time: Fri 27 Mar 2026 02:10:15 +0000
Manifest this update: Fri 27 Mar 2026 02:10:15 +0000
Manifest next update: Fri 03 Apr 2026 02:10:15 +0000
Files and hashes: 1: wG_wBd4dXvE7qPDCYOljA0paIso.crl (hash: aCqhyUbElk/MeadSrMRgfRqrj44Thd1hbGzNumMuKns=)
2: 0D53ED80D2BA11ED8E06CC13C4F9AE02.roa (hash: inrK8OqEEdjI+824HmaDT3XyzEScsrEG2Pp9/A3OtMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl
rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0C5F, serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA
Validity
Not Before: Mar 27 02:10:15 2026 GMT
Not After : Apr 3 02:10:15 2026 GMT
Subject: CN=69c5e707-234b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:01:06:9b:42:fe:13:2a:0e:8c:74:13:3f:
f6:42:f3:25:bb:04:5f:39:db:97:08:8b:ef:e7:18:
11:03:97:68:cc:28:96:25:25:67:ab:2a:f3:23:35:
f1:22:f6:a4:80:2a:c9:b0:a7:09:3a:96:6e:8c:4e:
eb:20:0e:dd:60:b7:68:10:44:b1:43:43:3f:78:83:
31:09:ac:1e:3e:c1:e5:dd:4f:ac:63:d7:9e:9e:9f:
b0:32:df:07:d4:5e:ee:58:5c:a4:b1:44:5e:1b:8c:
e6:3d:0b:53:17:9d:fc:ff:90:89:d6:64:06:87:d0:
59:cc:08:b3:63:f3:06:d1:ed:12:8e:0b:24:10:54:
2a:9e:14:73:c3:0a:fc:d2:b3:f0:ba:cb:87:06:86:
b1:6f:d2:27:05:d2:9b:38:4c:97:1c:6e:60:b7:1f:
71:9b:00:c0:bc:e1:06:4c:92:58:7f:a8:52:fe:ab:
16:b9:bf:31:f4:91:4f:22:21:04:c4:47:1b:48:8e:
95:73:13:88:2d:4a:53:46:c5:cd:6d:bd:1d:bb:7d:
81:97:f6:a2:9e:5e:56:ed:bb:d4:33:75:62:67:ec:
90:5c:51:78:d4:cf:08:84:bb:6a:d1:43:9e:7f:b4:
06:cb:01:ee:1e:76:74:e2:fa:89:a1:c0:d0:f1:5e:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:62:EF:87:C1:6A:19:3C:F2:CB:DE:2D:20:C6:D6:1B:F7:6F:C1:CA
X509v3 Authority Key Identifier:
keyid:C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:50:1e:65:88:e9:c1:fc:fd:c9:39:32:fd:b5:73:94:a6:36:
f1:ee:b3:e3:35:e4:c7:6d:aa:9f:33:bf:fd:0d:1a:d2:9a:46:
19:c9:4b:8e:a0:b1:48:27:e1:2b:b2:fd:5d:f6:b3:3c:d5:1f:
84:3e:b7:63:29:0b:5c:f9:f0:fd:65:bd:b1:18:74:da:79:e4:
66:4b:12:72:ce:09:ad:45:49:e8:c0:d3:69:15:ad:45:3a:2d:
9a:13:c7:1e:c2:44:fb:d7:64:b9:8e:be:b8:30:dc:e3:0f:57:
43:b5:81:38:f0:05:89:ca:e4:ab:3f:66:cf:73:bc:82:49:1d:
50:5c:f6:89:1b:ae:fd:41:19:31:2b:f0:11:82:89:47:d1:2d:
24:05:03:3f:4b:84:52:35:60:ae:f9:ec:0d:b5:fd:22:2a:2c:
91:fd:77:c2:c1:54:df:c0:6a:bb:47:ec:6c:15:4e:fa:f1:7f:
b5:5b:50:38:92:e9:d3:77:1d:7a:4d:66:dd:94:f3:a3:72:62:
db:88:f4:a0:f8:50:9d:39:6c:b5:4b:e7:35:af:1a:d7:5d:ec:
cf:74:03:ef:f3:bd:48:b3:54:f9:bc:f5:5f:54:13:34:dc:67:
19:15:55:61:2f:93:04:ff:d0:c7:44:f3:82:44:5d:67:ea:77:
b4:35:45:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBDNUYxMTAvBgNVBAUTKEMwNkZGMDA1REUxRDVFRjEzQkE4RjBDMjYwRTk2MzAz
NEE1QTIyQ0EwHhcNMjYwMzI3MDIxMDE1WhcNMjYwNDAzMDIxMDE1WjAYMRYwFAYD
VQQDEw02OWM1ZTcwNy0yMzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu2oBBptC/hMqDox0Ez/2QvMluwRfOduXCIvv5xgRA5dozCiWJSVnqyrzIzXx
IvakgCrJsKcJOpZujE7rIA7dYLdoEESxQ0M/eIMxCawePsHl3U+sY9eenp+wMt8H
1F7uWFyksUReG4zmPQtTF538/5CJ1mQGh9BZzAizY/MG0e0SjgskEFQqnhRzwwr8
0rPwusuHBoaxb9InBdKbOEyXHG5gtx9xmwDAvOEGTJJYf6hS/qsWub8x9JFPIiEE
xEcbSI6VcxOILUpTRsXNbb0du32Bl/ainl5W7bvUM3ViZ+yQXFF41M8IhLtq0UOe
f7QGywHuHnZ04vqJocDQ8V6gbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABi74fB
ahk88sveLSDG1hv3b8HKMB8GA1UdIwQYMBaAFMBv8AXeHV7xO6jwwmDpYwNKWiLK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1Ri9GNzQ1NUFBQUQy
QjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2RTdxUERDWU9sakEwcGFJ
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dHX3dCZDRkWHZFN3FQRENZT2xqQTBwYUlzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEM1Ri9GNzQ1NUFBQUQyQjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2
RTdxUERDWU9sakEwcGFJc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZVAeZYjpwfz9yTky/bVzlKY28e6z4zXkx22qnzO//Q0a0ppGGclLjqCxSCfh
K7L9XfazPNUfhD63YykLXPnw/WW9sRh02nnkZksScs4JrUVJ6MDTaRWtRTotmhPH
HsJE+9dkuY6+uDDc4w9XQ7WBOPAFicrkqz9mz3O8gkkdUFz2iRuu/UEZMSvwEYKJ
R9EtJAUDP0uEUjVgrvnsDbX9Iioskf13wsFU38Bqu0fsbBVO+vF/tVtQOJLp03cd
ek1m3ZTzo3Ji24j0oPhQnTlstUvnNa8a113sz3QD7/O9SLNU+bz1X1QTNNxnGRVV
YS+TBP/Qx0TzgkRdZ+p3tDVFkA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:20 2026 by rpki-client