
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json)
Hash identifier: G4Zd6MVASambpyXrz5jXsPSb2qSem4XfX6kIni3QtSQ=
Subject key identifier: 57:59:40:FC:38:02:ED:91:34:5C:25:EF:55:30:3E:71:F8:C1:43:60
Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Certificate serial: 0613
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
Manifest number: 060A
Signing time: Tue 24 Mar 2026 22:35:31 +0000
Manifest this update: Tue 24 Mar 2026 22:35:30 +0000
Manifest next update: Tue 31 Mar 2026 22:35:30 +0000
Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: cT/xRIH3Hm31kuN54bnx5Q46sgt1jZZCUAYtrat5fPs=)
2: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (hash: hM4BPVux9YYhFTFUn31M+wA3pgU5Mg1/NkcXZA6rsfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1555 (0x613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Validity
Not Before: Mar 24 22:35:30 2026 GMT
Not After : Mar 31 22:35:30 2026 GMT
Subject: CN=69c311b2-e635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:f1:b6:05:16:97:58:8e:d2:b9:e4:4b:34:
a6:6e:5b:f1:cd:85:ff:35:90:c3:74:2e:6e:45:65:
24:d0:c1:c1:84:ef:a9:45:e7:b4:16:30:f5:7f:22:
77:bc:c9:a6:00:b2:94:98:45:21:ce:e8:26:8c:08:
1a:68:d7:ae:4c:f3:1f:b2:7c:5b:87:25:ad:d8:01:
c8:e8:59:78:36:e5:30:58:26:4e:21:29:38:e6:30:
6d:47:d2:58:92:e3:35:e9:ce:9d:12:38:7e:f8:9b:
8b:be:83:a1:04:1b:bf:a9:40:f8:d2:3a:8c:71:df:
fa:74:b3:c7:1b:8f:e3:68:18:4d:fe:9c:3b:5d:3d:
53:5c:31:de:10:86:12:f1:69:a5:a0:f9:d1:4e:6d:
f2:25:a9:b0:87:95:4d:77:16:f5:0b:a0:e2:13:55:
6a:65:34:c5:af:cb:22:ea:15:37:52:de:5b:5c:29:
0c:a5:0e:39:56:87:b5:e7:22:de:de:2a:03:98:6c:
5e:db:e1:2b:a5:a7:1d:c3:84:81:5b:a4:cb:f6:2f:
54:8c:b4:e2:a4:21:9e:18:c3:35:6d:8e:5e:cd:0b:
38:ea:3c:50:3a:94:75:ec:44:e3:2f:ac:5c:16:0c:
5e:16:39:d9:c6:0e:a3:a6:8b:c4:12:ee:64:f9:ec:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:59:40:FC:38:02:ED:91:34:5C:25:EF:55:30:3E:71:F8:C1:43:60
X509v3 Authority Key Identifier:
keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:d3:77:37:e1:7d:2e:43:65:7e:9c:3b:f2:56:40:23:4d:af:
29:58:ee:2f:02:7b:3d:21:24:6c:8d:fb:07:a2:14:ef:c6:ee:
6d:db:ab:ea:8a:6e:70:c8:7b:02:24:e2:42:6b:0a:3b:6e:10:
b6:6b:af:f4:91:ff:07:99:88:5f:2b:21:5a:ec:ad:86:6a:18:
99:fb:68:7e:5b:e1:c5:26:a6:d1:1b:0b:7c:ab:74:71:d1:ee:
22:19:d8:ba:fe:e8:15:bd:41:58:47:2d:d5:61:26:fb:25:95:
d6:72:23:82:6e:65:28:e1:e0:eb:96:8f:8c:bd:e7:f7:0c:d7:
08:90:d9:4e:fc:41:5b:ff:85:d1:f7:c6:6a:4c:ef:36:e6:35:
1b:2d:e0:1c:f5:97:90:b1:86:65:4a:3a:63:44:74:5d:14:7e:
6e:99:1d:37:fd:f3:af:98:42:70:14:45:6c:d6:9a:b3:69:3c:
c5:39:6f:d7:8d:70:db:ba:80:74:7f:c9:5b:c3:33:18:81:cc:
64:8b:08:0c:75:26:da:4c:42:97:dc:be:b3:a2:47:be:64:2e:
69:c8:91:4e:32:88:07:6d:82:20:6a:a6:f9:61:4a:fc:4f:bb:
ce:cc:c5:e6:a4:b5:11:b3:2a:00:78:dd:e1:38:6e:73:02:da:
24:46:0e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:49 2026 by rpki-client