
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json)
Hash identifier: nuDRtqqy3UKQ8O+RABpmd50ucJQueDi7J2201KGYrLM=
Subject key identifier: C0:47:2A:E8:3A:71:C2:06:ED:29:47:03:96:E2:15:2A:6C:6F:47:28
Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
Manifest number: B2
Signing time: Wed 13 May 2026 07:16:20 +0000
Manifest this update: Wed 13 May 2026 07:16:20 +0000
Manifest next update: Wed 20 May 2026 07:16:20 +0000
Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: OtszsGk+Z1sVlSvFelYz8ZHbjOL7foDewlRDk1eof1s=)
2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: azH5Q9viXquY/moxc/UZ4RwNqYyQHdR8aAwu/HmXV5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl
rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Validity
Not Before: May 13 07:16:20 2026 GMT
Not After : May 20 07:16:20 2026 GMT
Subject: CN=6a042544-0c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:8b:5c:1e:83:af:96:32:73:7a:90:de:f2:
6a:e0:0d:fd:28:93:8f:06:4a:05:0d:59:17:3d:2e:
33:c9:80:f9:44:3a:d2:b1:73:26:e0:74:82:de:fc:
c4:ac:1d:4f:d4:ff:11:cb:ed:15:79:91:d9:6a:db:
d8:1a:b2:db:e6:66:b9:70:d9:ce:b3:ed:41:bc:18:
df:e5:e3:b5:3d:f4:11:68:55:46:ba:d9:d6:9d:09:
44:a8:49:4d:5b:d8:ef:de:da:43:61:60:d4:31:0f:
90:ec:41:31:7e:dc:ea:84:d6:31:a5:4d:89:27:db:
4b:c9:86:db:0c:8f:13:9b:7a:ab:cd:d3:40:b2:a2:
8b:85:03:33:7f:96:93:28:c1:2e:41:8d:44:78:27:
3e:85:6f:f4:48:c7:dd:09:1c:a0:6d:d9:3b:00:83:
b0:88:d6:29:98:38:e9:c8:34:14:6c:13:fb:ba:b5:
e9:52:7c:85:13:86:a4:b6:bb:23:b7:9c:87:c5:b5:
55:0f:70:73:df:23:cb:9f:29:a3:8d:09:4d:3b:f9:
18:b6:cc:a8:20:7d:63:25:08:0e:36:0e:fc:36:00:
90:78:e3:ea:f8:bd:01:3b:84:fb:8f:4d:28:e1:c6:
20:be:83:cf:69:b3:8f:31:97:0b:5a:14:50:dd:03:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:47:2A:E8:3A:71:C2:06:ED:29:47:03:96:E2:15:2A:6C:6F:47:28
X509v3 Authority Key Identifier:
keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:53:e4:5d:fd:4b:53:c1:06:35:74:79:97:d6:50:3a:b4:51:
b8:af:fc:4c:2a:e9:25:4d:f6:8f:c6:16:3a:96:72:79:93:19:
2f:2b:0a:86:ee:f9:12:74:75:b7:c8:92:3a:14:ab:59:8a:fc:
92:b0:f1:f2:93:22:9f:8a:bb:3b:07:99:2f:2d:be:52:4f:73:
57:39:a4:3e:0c:2c:98:5a:91:2e:c5:66:e2:0b:ec:3f:bc:90:
83:91:a2:7c:38:b9:9c:90:62:0b:10:e7:e7:eb:2b:64:8f:d5:
f7:7a:38:02:81:52:d4:c7:7d:a1:12:eb:78:ff:05:dd:17:04:
f4:ff:86:d6:35:94:2c:0e:fa:5b:93:30:91:9e:3e:68:77:3b:
ef:ee:04:ed:15:17:c8:83:b9:21:04:73:51:4b:f4:1f:dc:93:
a1:ba:33:30:16:c2:5a:95:1d:c2:c1:18:0d:cb:c0:9e:ab:4b:
61:ba:95:81:1c:07:a9:4e:63:1e:92:09:aa:1a:80:4b:98:77:
7b:29:08:64:8b:49:a6:50:6b:7c:e1:de:2e:8e:41:ac:41:6b:
85:0d:84:18:fa:86:dd:c2:e2:9c:54:57:f0:ab:57:0e:b1:6d:
de:2e:fa:79:bb:02:99:46:3d:49:9d:0e:0f:91:69:9f:d3:2c:
d1:f0:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:07:49 2026 by rpki-client