
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
File: Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft (raw, json)
Hash identifier: ow/OCqJei68UNR59cAFqKGimnu9TSitcCrA7coqVcVc=
Subject key identifier: 98:8E:79:77:04:67:C5:01:38:61:1D:16:9D:D3:D8:30:51:3B:93:57
Authority key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43
Certificate issuer: /CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
Certificate serial: 0293
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
Manifest number: 0279
Signing time: Wed 25 Mar 2026 01:29:31 +0000
Manifest this update: Wed 25 Mar 2026 01:29:31 +0000
Manifest next update: Wed 01 Apr 2026 01:29:31 +0000
Files and hashes: 1: Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl (hash: 3iVoeF6ZgRNAfQRTVH/JBT5XqJGRoapOJkWTfBNRhu0=)
2: FA05DFF47F4911ED847FF862C4F9AE02.roa (hash: Xinoh9viRvWKVFQ3xI51CltzIw6uHtVQBHvt6HCcLWg=)
3: 538172167F5211ED8A16EF81C4F9AE02.roa (hash: KIKf8R0HDmyLNLiZYE65M+EAfNwk/uckevwRRUo2IAI=)
4: E6EB68347F4F11EDBD813D85C4F9AE02.roa (hash: l8Cn707HnZZXGvH6lMNg8CFMv+Nat+iUyjqMlGj3kZg=)
5: F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa (hash: WV/lokkjJOrc/8Hu723Amhj+4YSlygr8XGUh7Ag3jKw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl
rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659 (0x293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3E3F, serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43
Validity
Not Before: Mar 25 01:29:31 2026 GMT
Not After : Apr 1 01:29:31 2026 GMT
Subject: CN=69c33a7b-7fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:48:e0:18:5e:df:0d:d8:d8:13:3a:e0:60:
5f:78:9b:c7:0c:08:8a:17:b2:d1:26:65:29:56:3d:
c5:39:d1:ee:fe:67:a1:1b:bb:e4:80:9e:30:2b:3b:
5c:2b:5a:78:3c:a8:e3:85:bb:d3:22:bf:42:3b:21:
b0:b1:db:40:1d:7f:10:c4:38:5f:d0:17:c1:20:44:
40:74:1f:14:d0:90:f6:d0:d9:86:f7:52:ab:b7:8c:
5e:2a:32:5a:12:b5:4b:3b:66:fe:e5:66:99:ff:54:
67:75:b9:15:37:ca:85:04:20:96:46:9f:eb:a5:61:
54:61:76:4b:87:7d:df:29:a7:74:ba:64:a9:91:36:
a9:75:89:ed:e3:e9:e2:b0:3e:2e:04:a3:7a:5a:ad:
35:33:7f:0e:f5:70:f2:5f:f7:d4:a8:36:d5:9d:6e:
23:c7:b6:85:6c:1d:92:75:18:5b:1e:90:66:24:fc:
fa:0a:d7:c3:ac:20:53:8a:35:b6:77:6c:98:eb:16:
1b:2f:23:e9:c7:84:ac:6b:3f:ae:80:f3:4a:f5:bf:
d0:1d:0c:be:e6:c7:99:3c:e2:d0:4a:3d:54:f6:88:
9c:b6:61:8f:a6:88:95:58:87:59:58:f2:3a:a3:19:
81:ca:5a:41:a7:3b:ea:ac:8c:8d:19:b0:5f:a1:17:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8E:79:77:04:67:C5:01:38:61:1D:16:9D:D3:D8:30:51:3B:93:57
X509v3 Authority Key Identifier:
keyid:59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:34:1c:a0:8b:a0:2e:a0:79:88:6a:8d:d9:a3:f2:87:5e:2d:
54:d8:55:5e:6d:18:23:fe:16:b8:d0:35:d2:02:ea:a7:33:a7:
eb:e8:c3:7f:f6:c0:18:3b:ba:27:85:36:af:be:62:a4:2f:4e:
95:49:cb:53:2a:e4:3c:c6:9b:f3:1a:b3:4f:de:3f:8e:80:08:
02:2d:c7:ed:8a:ec:29:46:dd:01:aa:17:9e:4d:a5:3e:40:c2:
60:8a:b6:46:cd:10:17:39:3c:1c:8b:a6:65:bd:6c:06:3f:ad:
a7:9f:e0:eb:45:ef:c2:83:4d:ce:1a:36:0b:d4:3f:6d:68:a8:
c6:b2:04:5f:91:19:40:2c:b9:26:14:40:08:83:2a:aa:57:4d:
fa:9f:40:a6:65:5f:b1:8c:fb:25:e6:8a:07:6c:c8:ec:90:90:
6e:67:a1:23:08:85:14:0a:b2:b8:c6:9f:4e:ab:4b:ca:49:0e:
1e:88:64:fc:61:b3:40:71:53:e6:d6:86:7e:f6:9e:62:34:a5:
f2:ea:0e:f2:0e:b0:c0:56:49:1e:fb:3d:f3:0c:9d:ce:36:e4:
dc:91:3f:43:8c:b8:78:59:2a:ce:45:fa:a2:63:ce:b3:9b:49:
64:34:0d:26:33:fc:00:66:4d:01:a2:22:2e:10:65:e5:9a:48:
80:b6:0c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:39 2026 by rpki-client