
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json)
Hash identifier: MmaHm/R9rdv7E6qQbfvZszIfgcushCsabxLVDDDXO0w=
Subject key identifier: 32:FA:A7:47:89:BA:8A:FE:45:8A:01:49:0C:F6:FF:A4:E0:A1:9D:5F
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial: 0639
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
Manifest number: 0631
Signing time: Thu 26 Mar 2026 22:35:44 +0000
Manifest this update: Thu 26 Mar 2026 22:35:43 +0000
Manifest next update: Thu 02 Apr 2026 22:35:43 +0000
Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: mzpNyAAf6iiaZD6RaalszNXiCxGHkSAf40B1a6Ky6FI=)
2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: Tt66YBhWZceD9xi7CJ59HIwrlysDS4oNkVI5X7bqodQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Validity
Not Before: Mar 26 22:35:43 2026 GMT
Not After : Apr 2 22:35:43 2026 GMT
Subject: CN=69c5b4c0-b0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:21:77:21:f0:50:87:1e:66:e0:2f:71:92:
0d:a2:e8:c1:f0:4c:aa:0b:3b:f2:56:4a:d8:00:4b:
a9:94:69:07:39:f8:f5:8b:ff:64:18:f8:1a:ac:f4:
d7:1d:3c:56:5d:ce:c0:58:75:b6:36:9b:0a:92:f4:
ea:3a:9a:41:dc:87:a2:cb:4b:71:ac:54:ec:c8:c4:
02:2d:be:f5:45:7c:7c:33:c1:32:1a:f1:a0:70:aa:
b1:1a:f6:76:80:55:f4:31:42:d6:cf:a1:a2:0a:58:
9d:34:6b:ac:3b:9f:b1:21:ee:06:f4:06:d0:3f:4c:
c5:e4:f0:11:43:b1:9c:6b:47:a0:6c:e6:d7:6b:31:
ad:d9:d6:bf:00:ee:d6:58:51:3b:92:47:22:65:be:
9b:42:4b:8f:d6:57:83:3f:f8:68:77:df:24:7f:e0:
0b:2c:53:cb:1e:b2:32:d7:d6:80:ad:cf:16:e1:15:
78:bd:fc:88:f3:60:3e:9b:86:a3:06:c7:7f:9c:86:
1d:7e:d2:38:55:0b:c1:dc:86:2e:31:52:c8:ce:4e:
13:85:c0:37:bf:d2:60:cd:31:d0:be:8c:e2:29:fb:
50:a1:f0:bb:3b:95:32:17:4a:91:35:00:eb:81:4f:
a7:60:0f:73:55:56:11:63:f8:f2:a7:3c:cf:46:0d:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FA:A7:47:89:BA:8A:FE:45:8A:01:49:0C:F6:FF:A4:E0:A1:9D:5F
X509v3 Authority Key Identifier:
keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:4e:eb:63:51:01:30:d8:d2:23:70:ae:71:f2:6a:72:0d:40:
21:be:a8:cf:5e:f6:f5:dc:de:8b:f1:99:c7:9a:54:d0:20:a8:
a8:7b:fe:b2:08:34:f3:df:0a:a7:9b:76:18:9b:62:c9:a2:bf:
95:88:f2:a4:5c:fd:95:31:2e:aa:ec:62:ee:bf:bc:59:00:0f:
da:20:d3:45:1e:ec:a7:21:ee:b4:19:f5:81:16:5f:1d:0a:e9:
e0:d9:79:5b:99:cc:12:e8:f0:a3:dd:39:ce:17:2a:b4:0d:47:
9e:91:d2:ba:af:21:74:cf:28:ba:dc:01:62:7f:b5:d2:9c:fa:
f5:f4:28:f3:55:05:13:4f:b6:e6:20:b2:f0:cf:cf:20:58:32:
87:3d:e7:9b:fb:05:9f:6f:e1:46:31:76:db:26:eb:86:ae:e7:
8a:30:2f:0e:10:09:f0:89:f4:d5:5f:76:46:80:d8:90:31:38:
12:8b:c4:cb:32:a5:44:4a:ef:6d:7d:12:cd:08:52:51:c1:9c:
c8:a1:f6:97:73:81:6e:87:fd:7d:4d:94:d1:d3:00:bf:68:05:
8e:1c:ad:c2:1c:75:c6:e8:2e:e4:95:da:3c:96:c7:12:d4:1a:
97:e2:be:0f:14:47:7d:33:ce:63:2f:7b:cc:da:d0:a0:9b:4c:
2b:fb:b6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:09 2026 by rpki-client