
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json)
Hash identifier: CPZdMGMeFXoNdwwq5OFk81U3qNdlBzWoiF3ZvaJ/2Vk=
Subject key identifier: DE:CB:1D:16:C4:68:F3:31:46:BB:53:90:E3:58:D7:4D:67:A0:99:C9
Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Certificate serial: 0C77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
Manifest number: 0C58
Signing time: Wed 22 Jul 2026 19:04:04 +0000
Manifest this update: Wed 22 Jul 2026 19:04:03 +0000
Manifest next update: Wed 29 Jul 2026 19:04:03 +0000
Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: kf6BjyqykQ+9X5m55gLGnHJsEkFjGQ5xzVLFlkB7iTM=)
2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: q0lqVS28SrU2+4MJeoLC9pzh7Qgf+qG7CEETocpWonk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3191 (0xc77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Validity
Not Before: Jul 22 19:04:03 2026 GMT
Not After : Jul 29 19:04:03 2026 GMT
Subject: CN=6a611424-b667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:ee:fb:ba:05:70:bd:0d:29:2c:6d:eb:23:
77:d6:f1:1f:76:24:05:ad:ad:e0:90:f0:a0:47:d1:
02:2b:fb:7c:ec:13:f0:5a:12:28:b1:02:52:5d:ff:
b1:42:81:d8:ca:f2:5b:bd:de:f9:63:e9:76:7e:1d:
9f:09:73:c5:0f:53:5b:9a:81:d0:ee:81:95:59:a1:
74:62:0e:f1:0b:7d:4f:77:99:9f:27:7d:0c:dc:e8:
e3:df:3e:94:bc:52:77:f8:25:05:2d:da:fd:04:87:
aa:9f:58:ca:8b:77:2f:2e:e5:92:98:d2:ab:71:d4:
5e:58:d6:ef:c9:20:65:95:f5:da:23:20:19:7b:ee:
f0:02:66:93:f3:37:80:e6:8d:78:9f:9a:24:27:40:
4b:f4:f4:5f:f6:65:a1:54:76:5a:1a:45:b7:24:9e:
02:dc:2f:6e:7a:e0:5f:f8:56:4b:cb:d2:24:06:60:
ee:6f:6f:12:0b:67:8c:5b:2c:53:0b:d9:da:ce:c5:
ea:eb:91:8c:69:41:cf:10:ee:ec:4e:af:24:9f:1b:
0a:73:41:4f:49:c5:43:05:49:c6:e4:e0:a3:4c:29:
3c:a1:1b:42:10:05:9b:21:cf:b4:69:f1:56:d4:82:
78:52:40:4e:f4:a0:c9:d8:b3:49:c7:50:97:c5:2f:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CB:1D:16:C4:68:F3:31:46:BB:53:90:E3:58:D7:4D:67:A0:99:C9
X509v3 Authority Key Identifier:
keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:38:17:9f:df:ce:ef:13:d1:b1:71:d8:63:7c:6b:11:0d:75:
f8:db:19:ba:f8:99:a5:84:2f:41:3c:7d:95:a7:fb:2d:f8:3d:
c1:9e:67:90:86:ce:10:82:68:30:d0:a7:02:77:63:b4:05:1f:
0a:e6:2a:47:8c:a1:2c:ad:6a:76:fd:cf:60:e9:2e:ff:28:47:
1f:94:a2:78:de:bd:44:fe:fb:c2:66:91:04:9f:eb:ef:7c:6f:
ae:b7:a4:39:87:ba:7f:85:1a:30:f6:e4:fa:b4:ac:19:ee:5e:
cd:02:57:a1:b7:99:8b:d7:a7:5f:95:41:44:bb:31:45:4e:e2:
2f:90:95:c6:f1:aa:03:9c:7c:5b:ca:8f:72:d0:75:19:1f:ad:
e4:27:ab:b3:fd:e6:93:2d:91:67:38:7b:7d:55:91:0f:80:89:
69:d6:fc:24:e2:25:6e:c5:d5:31:c0:44:87:e0:47:ed:08:4e:
d5:70:76:ae:7e:90:ae:86:5c:f0:a1:45:3a:00:77:43:00:a8:
83:d7:1d:0c:08:3a:fb:8a:81:52:c5:d7:e6:ca:dc:1f:46:64:
fa:a1:a3:09:33:99:89:81:71:a6:8c:27:78:0a:03:00:48:90:
fd:f2:5a:7a:ab:70:18:60:65:55:14:44:86:91:92:b1:af:59:
30:a1:c4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:09 2026 by rpki-client