
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
File: wuV00hDNcViHNr83nUfNEUasN7I.mft (raw, json)
Hash identifier: IAdisEELYE9hT+12EtnQbw2aQ/XzW+PE8PsGA7g6YeU=
Subject key identifier: 14:65:22:13:EA:A8:19:E3:4A:97:26:65:35:31:90:BC:71:AA:07:8B
Authority key identifier: C2:E5:74:D2:10:CD:71:58:87:36:BF:37:9D:47:CD:11:46:AC:37:B2
Certificate issuer: /CN=A91A9720/serialNumber=C2E574D210CD71588736BF379D47CD1146AC37B2
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
Manifest number: 96
Signing time: Fri 09 Oct 2026 08:10:11 +0000
Manifest this update: Fri 09 Oct 2026 08:10:11 +0000
Manifest next update: Fri 16 Oct 2026 08:10:11 +0000
Files and hashes: 1: wuV00hDNcViHNr83nUfNEUasN7I.crl (hash: irTA9Lj6vq8Ww4sRZCTXYFLaPsFQLnAj1TTYoEm6E20=)
2: 48A87092E55C11F0AC7781DC396F56BC.roa (hash: I0wBboWIudBQ7dYBJo2wUoCVtx7RIy0Rqyv4U3HVGRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.crl
rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9720, serialNumber=C2E574D210CD71588736BF379D47CD1146AC37B2
Validity
Not Before: Oct 9 08:10:11 2026 GMT
Not After : Oct 16 08:10:11 2026 GMT
Subject: CN=6ac8a163-133b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:46:a9:14:28:23:bd:7b:ee:9a:87:b2:bd:
2d:85:e3:44:8d:ac:39:b1:e2:e0:3d:1d:eb:43:56:
12:d2:e6:1c:20:f6:7f:d6:29:d7:fc:de:d1:de:22:
3f:d6:dd:a4:13:a9:d6:ce:0c:f9:f7:33:c1:8a:e5:
f5:28:81:b7:6f:13:45:30:c6:c9:c8:55:b7:19:1c:
d0:10:72:4d:56:93:62:b2:ea:e4:5a:c8:e1:71:1e:
f2:d8:ea:16:5b:23:db:60:25:0a:f4:01:e1:45:d3:
66:c7:18:30:53:8b:43:6f:e5:e0:96:60:2b:dd:93:
11:66:de:59:64:97:72:46:7a:46:27:90:ab:44:c9:
42:21:7d:80:ea:3e:0f:78:ba:55:e8:ca:2c:54:f9:
a2:53:1a:c7:ec:1c:57:a1:c7:20:be:d8:f4:c9:75:
83:ad:ff:db:10:3f:43:75:72:6f:28:fa:7d:f3:69:
00:aa:3c:0b:35:cd:3e:e4:f4:81:83:66:81:56:4b:
1b:c3:52:9c:2a:5a:2f:26:1a:fc:0b:56:e8:e7:95:
2c:ae:db:cb:b0:ca:ce:60:bf:59:9e:6f:11:94:64:
3e:49:bd:1c:23:ff:a9:0b:ca:32:ae:30:02:2e:ca:
c3:75:ff:2c:f5:e2:c0:6c:d5:77:d9:86:db:1d:8a:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:65:22:13:EA:A8:19:E3:4A:97:26:65:35:31:90:BC:71:AA:07:8B
X509v3 Authority Key Identifier:
keyid:C2:E5:74:D2:10:CD:71:58:87:36:BF:37:9D:47:CD:11:46:AC:37:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:7b:e4:c2:24:08:dc:bd:14:5c:a6:37:cc:7b:d5:a0:fd:99:
e3:1e:d1:2d:62:c3:93:5e:d5:4e:84:c6:2c:cb:4a:3b:29:07:
b3:e3:fc:ca:4c:50:c2:43:54:c8:09:e5:08:c8:ff:d5:fa:8a:
40:6a:27:1e:90:d4:aa:1f:1d:ed:d4:32:1e:6b:6e:d6:69:34:
ba:ba:4b:bb:db:ab:83:f4:04:b2:69:02:eb:1f:b9:c8:57:8d:
80:37:ac:23:f4:13:fe:ef:7f:ec:43:5d:b8:99:1d:dd:09:ce:
26:ee:68:2c:e8:79:cb:e7:1a:1f:89:f3:d8:bc:c0:0b:ab:3e:
b2:d1:2b:19:91:38:09:49:ac:78:6b:6a:2a:c2:d7:63:be:30:
a3:4d:2a:a3:7f:50:c2:d9:e5:e9:df:90:c4:ec:d7:2e:42:dc:
1b:34:f6:1c:44:98:af:89:68:d0:50:ec:93:d0:24:10:62:99:
c5:cf:e8:a0:89:6e:e4:95:83:67:d4:52:4f:48:f8:db:a6:80:
01:ea:73:36:31:c3:f8:67:eb:bf:ba:cf:b1:e4:56:4b:9e:f3:
30:dc:31:45:e9:ab:98:58:af:d1:8c:d5:2d:7c:63:3a:7e:a8:
a6:ed:20:87:c7:50:10:ba:48:c1:48:cc:6d:96:82:7c:9c:84:
b8:ee:4d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:15:04 2026 by rpki-client