
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
File: rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft (raw, json)
Hash identifier: dllgM//t6bwnmM8aIHjRxBQTbs6ghFGZhtr5pr8eFlw=
Subject key identifier: 35:55:D1:EA:25:7E:B6:CB:1D:C2:2E:78:45:CF:5D:26:94:B4:6B:29
Authority key identifier: AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF
Certificate issuer: /CN=A91A6A74/serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
Manifest number: 5E
Signing time: Wed 25 Mar 2026 07:15:41 +0000
Manifest this update: Wed 25 Mar 2026 07:15:40 +0000
Manifest next update: Wed 01 Apr 2026 07:15:40 +0000
Files and hashes: 1: rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl (hash: 7C8uXKVOzOpGwNdI7DEBzZ5gOnTI2ZqzzWWJ/tA+X5w=)
2: 285C90D49A8911F0B2115222C4F9AE02.roa (hash: EjiAl9+0BwALib/9Kby4PWLUhiyl1z8SqjQG2TlAJZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl
rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6A74, serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF
Validity
Not Before: Mar 25 07:15:40 2026 GMT
Not After : Apr 1 07:15:40 2026 GMT
Subject: CN=69c38b9c-5aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:ee:49:26:31:66:c2:4a:cb:aa:00:c0:4c:
29:aa:95:aa:56:1d:de:ce:f5:9c:91:75:38:ab:1b:
90:2a:b0:ad:4a:1b:1d:c1:1b:d8:af:cc:cb:79:69:
d0:ea:a0:cf:c4:06:8d:d4:d9:2f:de:a8:08:1f:06:
a2:39:af:ea:88:17:75:40:75:29:cc:c5:77:8a:7a:
ca:9a:86:0f:dd:24:a1:04:b0:a2:89:5b:02:63:ee:
a7:b5:6a:6c:e8:8c:1c:6a:17:0b:da:c1:d8:8b:09:
cd:45:02:4a:92:13:ec:0a:e6:f6:da:9a:fd:44:1c:
41:46:06:1c:3a:83:52:d7:94:d9:a7:07:6e:38:50:
26:5c:e2:7e:9a:e3:ee:c2:dc:94:70:dc:df:98:52:
7c:c8:e7:4d:42:8a:c5:fd:3d:fd:ee:80:26:33:18:
cd:a6:7b:df:a7:ab:eb:19:d2:fc:1e:dc:15:93:3c:
0d:b2:cc:a2:00:d8:07:a7:ac:c4:96:23:75:8a:38:
e3:54:23:50:52:f8:2a:8b:4a:1f:f5:f7:61:7b:59:
2d:56:fb:3a:de:e6:51:f9:dd:e4:84:bb:04:e9:d2:
4f:73:ff:67:b9:02:bb:2f:d5:97:30:fe:29:b8:5a:
3a:0e:ef:12:4c:0c:11:37:c4:c3:7c:de:ad:33:1a:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:55:D1:EA:25:7E:B6:CB:1D:C2:2E:78:45:CF:5D:26:94:B4:6B:29
X509v3 Authority Key Identifier:
keyid:AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:2d:cb:b2:5d:aa:74:98:ed:a1:dc:94:cb:d9:bc:a4:2a:55:
ae:20:05:cc:28:1f:fd:cf:57:92:9f:71:0e:fa:58:00:30:fa:
0b:b2:bb:e3:11:8d:00:13:ec:84:83:53:3e:5b:df:22:4b:a0:
cc:83:d2:68:b0:c3:12:8b:70:bf:5e:34:a2:27:63:e4:40:f6:
8b:b5:9e:e5:53:de:73:4c:50:03:0a:81:af:87:f1:1e:1e:d8:
19:30:66:06:8a:70:4b:7a:dc:b8:df:b9:f8:ad:61:cb:94:33:
fc:33:87:b4:aa:a9:66:31:1a:3b:a7:74:3f:7c:73:0c:c2:d4:
db:c4:46:10:1c:65:46:41:9f:f8:f3:47:c5:db:14:e5:31:11:
2c:35:cf:93:df:ec:7d:aa:00:43:a0:d5:26:f7:ff:88:b7:f9:
06:34:51:4b:88:f0:b9:18:63:a5:32:4a:1c:c4:80:72:cc:7a:
87:2e:78:30:ed:b1:07:85:80:20:cb:94:1b:1a:97:fd:e5:a6:
7a:d4:93:58:60:82:8a:a2:a9:84:48:34:d0:71:5b:48:49:45:
3e:12:17:42:06:08:86:75:d0:ca:7b:ae:9e:e3:5e:82:0a:1e:
92:f3:f7:7c:c8:cd:8b:71:f8:7d:21:68:ea:19:72:1c:2e:c9:
3f:61:1b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:36 2026 by rpki-client