
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
File: W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json)
Hash identifier: BH0WzaESIxTIJRIOVGb0CAa3kKCftRc4dluOVLhBiWM=
Subject key identifier: 3B:38:FD:CC:16:81:E1:ED:22:8F:8D:93:D2:4F:DF:F0:0D:EB:50:7F
Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7
Certificate issuer: /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
Certificate serial: 0360
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
Manifest number: 0359
Signing time: Fri 25 Sep 2026 00:44:12 +0000
Manifest this update: Fri 25 Sep 2026 00:44:12 +0000
Manifest next update: Fri 02 Oct 2026 00:44:12 +0000
Files and hashes: 1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: vPYTnCfyd4aI60ThErBERRg5Bto+uCW+1zfqHfrjePw=)
2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: TnwXtb5MfhCK20XeLeq1l+qvHKIr2uVnJlZNM+FxEW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl
rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 864 (0x360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAB94, serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
Validity
Not Before: Sep 25 00:44:12 2026 GMT
Not After : Oct 2 00:44:12 2026 GMT
Subject: CN=6ab5c3dc-9162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:b1:fa:13:d3:a2:c6:58:8f:e8:2d:82:2c:
47:82:f4:8e:f9:83:02:45:66:14:4e:00:14:48:0e:
60:ac:03:b7:ae:08:1c:91:3f:91:ac:2a:18:57:4c:
a8:5b:f5:4a:8b:4d:cc:6a:a6:36:16:74:ec:36:e6:
70:49:c4:53:c8:bb:9b:77:73:22:d4:b2:e7:84:35:
63:03:90:76:df:eb:37:de:77:42:93:c2:87:45:8c:
30:a3:66:40:9c:5f:68:e2:66:d1:b1:6e:8f:8b:50:
7d:09:5e:b5:c5:90:00:9e:ab:73:65:8c:81:e6:83:
16:f0:76:72:e7:b1:fd:70:11:a5:a1:54:8f:00:c4:
e4:bf:3c:56:16:e9:b1:45:8b:0f:64:c4:df:a5:9e:
80:4d:b5:67:54:b5:d3:ee:91:18:ed:78:a1:7b:41:
28:71:25:d7:a3:db:ba:dd:cb:10:e9:4d:f9:43:5e:
a5:a6:a0:30:68:af:ba:dd:83:8c:e4:41:fc:e3:03:
07:2d:1f:6c:21:0c:15:ba:d0:26:fa:ab:97:e8:c7:
4d:b3:be:2f:d0:ee:35:5c:80:1e:4e:b4:af:d8:49:
23:a3:4f:3d:74:8e:d7:f3:eb:e1:6c:00:17:ca:fd:
42:4e:af:8c:92:a5:4f:97:ad:87:db:d0:0e:dc:9d:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:FD:CC:16:81:E1:ED:22:8F:8D:93:D2:4F:DF:F0:0D:EB:50:7F
X509v3 Authority Key Identifier:
keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:3d:1f:cc:c5:cd:de:a8:30:7a:77:3c:24:25:e6:ed:f2:8d:
73:e0:63:2b:4e:87:0a:6d:27:50:2d:2a:14:c1:9f:98:ab:1e:
65:13:78:db:15:38:e6:69:b0:97:45:ac:14:05:3c:20:c9:ee:
e4:20:74:03:b5:de:4d:ef:1c:3f:95:3c:a6:b7:1b:d5:d3:86:
ae:14:bd:47:ae:b5:64:fa:f2:8c:b1:dd:fe:a7:d9:b3:eb:a4:
34:fb:c2:9c:98:ab:51:e1:bb:03:37:0c:0d:1f:47:36:84:20:
eb:cb:0b:8d:a8:17:f0:55:19:32:68:60:40:6c:af:38:85:f3:
9a:10:e2:3f:7d:1d:fb:3f:31:45:31:f1:12:e0:7a:e5:42:49:
4b:1f:3b:a2:32:9a:a0:7d:8e:44:cb:87:6d:4a:06:61:d5:b0:
3d:f8:13:c7:e5:59:53:8d:d2:ed:c9:91:cd:ae:68:f1:00:b0:
e0:60:b6:ab:af:e5:ef:84:f8:b1:5d:45:8e:52:7a:6a:34:c1:
10:67:07:82:63:ce:be:91:76:34:e0:65:a2:f2:a5:6d:dd:e9:
f2:ab:78:01:89:c7:d1:36:b2:0e:e9:67:f5:e1:29:6a:fa:df:
78:a4:1c:9c:f0:58:42:73:2d:63:2c:a6:01:9c:86:c4:90:b6:
89:6b:2d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:01:55 2026 by rpki-client