
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json)
Hash identifier: LtKc4DDmrd949trMpLjKMrGttkg13hmkFRrkHC22ZTk=
Subject key identifier: E1:DA:94:F3:0C:EB:CE:60:6C:02:92:7D:DB:29:99:E7:D5:84:DE:0A
Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43
Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643
Certificate serial: 0CDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
Manifest number: 0CB9
Signing time: Tue 12 May 2026 18:32:26 +0000
Manifest this update: Tue 12 May 2026 18:32:26 +0000
Manifest next update: Tue 19 May 2026 18:32:26 +0000
Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: 5E0L0SM0ywX5qct+4OplpPqJ/bQ+GdmrXT+JUY9ABYc=)
2: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: HZYyafIDcbCm3jYO+u2UG1J/QSznk0TLPVrt1UYauvc=)
3: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: Okct4v/9F3FMQPT9GrE+GqX5m6ZwHVEGNg/r2lmDu6k=)
4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: tnKzNTdY3kOa3JgIyvO979Ve1nnZLeLTMwODS3F4o5I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl
rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3290 (0xcda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643
Validity
Not Before: May 12 18:32:26 2026 GMT
Not After : May 19 18:32:26 2026 GMT
Subject: CN=6a03723a-db97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:2c:20:b7:c7:77:37:d1:f7:99:85:71:71:
f9:e4:30:9a:bc:66:b4:9a:54:57:87:b3:56:2e:c8:
6e:62:13:38:d2:31:40:5d:20:50:c4:65:cb:59:a7:
1c:d1:b4:ab:8a:87:75:d1:45:81:1a:af:e3:62:79:
da:ad:60:e4:d8:8e:05:aa:db:59:ae:25:f4:38:06:
53:b8:0c:97:6e:fa:30:0f:72:f9:3a:aa:ad:aa:59:
93:b7:ca:30:56:ba:ce:f3:c0:26:f8:1d:f5:22:7d:
e8:9f:54:bd:60:69:77:3a:dc:da:0e:91:40:df:23:
01:be:ac:54:49:a2:ce:fe:b0:17:dc:93:b1:2f:34:
e7:cc:bd:bf:f1:52:f3:00:96:32:d2:23:a2:84:fa:
70:40:3e:24:2b:11:d6:80:8e:1d:0a:66:37:58:49:
e6:c3:06:2e:b7:20:e6:39:4e:64:71:49:7f:77:81:
99:26:02:8f:35:51:77:6a:fb:37:dc:a0:c7:f5:f8:
2f:92:84:3d:a8:bd:7e:9f:8f:d5:47:d3:e5:32:46:
8b:63:cd:56:47:27:fc:5b:ac:95:5e:b6:2f:5c:62:
b3:e8:15:36:82:60:4d:c4:d0:1f:75:53:3a:8d:30:
19:05:51:9c:bc:81:ab:06:a8:aa:7c:db:bb:cf:6b:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DA:94:F3:0C:EB:CE:60:6C:02:92:7D:DB:29:99:E7:D5:84:DE:0A
X509v3 Authority Key Identifier:
keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5e:0c:8c:a4:5b:3d:c7:3b:e9:52:a2:29:c3:bc:ca:9d:56:
7f:e6:99:e7:95:11:9f:76:2f:ef:a7:01:85:00:1f:91:9e:c7:
27:22:8d:00:ce:66:1e:1d:ce:bc:24:72:ac:50:41:73:6b:ac:
68:cb:ea:7b:41:0a:69:63:63:7a:74:6e:7e:d3:88:56:06:e8:
df:3f:76:5b:d2:bf:e8:0f:e4:b3:4e:ca:57:de:80:27:e8:4b:
fa:89:45:45:49:17:37:7d:bd:d7:98:86:5c:20:e4:e7:d8:8f:
64:20:6b:c0:59:df:b7:f0:83:83:4b:68:d5:6e:7a:1c:53:53:
dc:6f:dd:2f:f4:be:0f:cf:dc:46:a4:f0:30:96:e2:47:0a:21:
7f:6a:6f:dd:66:0f:5e:9c:05:e7:51:2b:f7:c3:85:90:f0:95:
cb:b4:23:c3:82:dd:d9:cd:9a:78:76:b1:96:73:be:19:60:1c:
20:4c:a7:62:c5:d6:c7:3f:cd:69:26:e0:9c:b4:0f:5c:c4:d6:
f5:e9:3b:f7:53:de:c5:b4:dc:d4:2f:a5:66:e5:d6:c6:34:aa:
9a:01:9f:c3:5a:62:ca:f3:f7:b0:13:11:4b:0a:01:fe:56:f4:
73:86:ab:95:98:56:21:36:76:0c:5e:a7:1b:47:e5:1b:c5:4a:
c9:ce:1a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:35 2026 by rpki-client