
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft
File: wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft (raw, json)
Hash identifier: kV2Mx6fWsALKHfnyvM8l9YoDO9cAw4RKm/hiYNY0654=
Subject key identifier: 71:5E:AC:0F:F6:A2:67:C2:EB:73:39:41:E4:47:D0:96:F2:58:55:36
Authority key identifier: C0:57:E8:39:9F:35:16:06:2C:D2:B8:EC:6E:08:DC:2C:48:AC:31:34
Certificate issuer: /CN=A91C5911/serialNumber=C057E8399F3516062CD2B8EC6E08DC2C48AC3134
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFfoOZ81FgYs0rjsbgjcLEisMTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft
Manifest number: 4E
Signing time: Mon 21 Sep 2026 08:15:54 +0000
Manifest this update: Mon 21 Sep 2026 08:15:53 +0000
Manifest next update: Mon 28 Sep 2026 08:15:53 +0000
Files and hashes: 1: wFfoOZ81FgYs0rjsbgjcLEisMTQ.crl (hash: f1VhAyPKPcFQAoFbVCNoKSXQIpm2P/82T9ltvdj/+3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.crl
rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFfoOZ81FgYs0rjsbgjcLEisMTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5911, serialNumber=C057E8399F3516062CD2B8EC6E08DC2C48AC3134
Validity
Not Before: Sep 21 08:15:53 2026 GMT
Not After : Sep 28 08:15:53 2026 GMT
Subject: CN=6ab0e7ba-7ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:71:93:45:ea:e5:8f:84:34:c9:63:5a:1d:
2b:85:e5:59:69:3a:77:ce:12:e6:3d:87:5b:41:88:
e2:5c:aa:32:5c:95:e1:f3:3b:06:78:bd:d3:50:46:
dd:38:33:83:40:cf:49:ef:0a:67:83:e0:5f:0a:13:
5d:62:53:d6:7e:a8:51:26:0a:8b:05:39:03:9e:4f:
23:4a:cc:00:93:0c:d4:80:6e:58:b6:f0:46:69:ed:
ed:c3:92:95:45:28:22:7a:72:b5:5b:93:23:e4:ee:
d8:13:09:8f:3e:5e:77:5c:a3:60:94:65:0e:c7:cc:
4d:86:87:56:95:9e:58:f6:bc:f0:c6:e8:fa:aa:66:
b7:55:77:21:f2:7f:1d:44:8e:6b:52:d4:ae:c3:c4:
a3:29:85:27:a1:87:48:c4:d5:f0:56:85:93:ce:6e:
d8:d6:a9:a2:69:b2:e3:f7:b8:42:38:ba:62:15:6f:
eb:b8:c2:a9:eb:d5:f6:2f:a1:93:3c:f4:7f:31:70:
9f:75:4c:1f:1f:21:0f:f3:97:eb:07:dc:58:ca:4b:
81:1a:ad:55:ff:56:a0:9b:ea:0c:d8:33:70:0d:8c:
b5:23:b8:f8:07:d8:f7:fe:b4:3d:f2:7e:b5:59:2e:
e2:7b:2b:9c:6f:f0:30:67:2c:dd:e3:ba:9c:58:c1:
36:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5E:AC:0F:F6:A2:67:C2:EB:73:39:41:E4:47:D0:96:F2:58:55:36
X509v3 Authority Key Identifier:
keyid:C0:57:E8:39:9F:35:16:06:2C:D2:B8:EC:6E:08:DC:2C:48:AC:31:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFfoOZ81FgYs0rjsbgjcLEisMTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:a6:06:38:7d:83:b0:c1:0f:2a:9f:46:13:8e:64:bf:0b:70:
1b:fa:27:30:c0:dc:99:09:74:ec:7e:de:6d:ef:16:0b:69:7c:
e7:22:a3:72:02:f2:30:02:3f:e4:f8:5f:16:fc:3b:36:d9:1a:
a1:36:20:69:0c:58:e4:de:79:8c:cc:de:78:02:13:ff:d8:75:
0a:d9:76:23:93:de:9a:98:98:de:01:9e:b0:d8:9a:69:c9:61:
86:d8:46:50:7d:dd:76:d0:85:56:7e:94:09:c8:e3:6d:f4:89:
1d:79:e1:95:5e:96:5b:0a:f2:53:dc:b8:c3:7e:85:49:35:a6:
16:8e:0b:48:bf:97:be:b2:c2:3d:b2:05:88:8f:84:a4:2d:ae:
a9:5d:b1:f0:f9:40:02:3a:82:1e:94:71:78:3b:ad:d8:29:95:
57:72:52:d2:92:24:6d:60:6e:a0:e0:71:a1:7d:f6:01:a6:f5:
d2:d5:3c:f0:6b:bb:7f:a8:83:b5:65:a9:5c:5d:80:17:94:d9:
7a:f0:f5:15:d8:e4:aa:c9:7c:ef:7d:64:03:e9:1c:05:04:66:
5c:93:2d:79:75:6d:4d:3b:b7:0c:da:09:f0:42:b0:c3:eb:26:
a3:d8:aa:79:eb:7e:40:e6:7e:03:f7:7b:56:a1:aa:4e:b5:83:
c8:a5:a8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:45:38 2026 by rpki-client