
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
File: WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json)
Hash identifier: baSzwZKMrMJCUbsX/3/h8wj2yU3Qm5panZzXRyNyq/w=
Subject key identifier: 0E:B0:8A:23:9B:61:AE:3A:7E:AC:9B:2C:BC:A8:0C:4D:54:2D:A6:3C
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Certificate issuer: /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial: 01C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
Manifest number: 01B6
Signing time: Fri 27 Mar 2026 03:33:16 +0000
Manifest this update: Fri 27 Mar 2026 03:33:16 +0000
Manifest next update: Fri 03 Apr 2026 03:33:16 +0000
Files and hashes: 1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: sPzoOwGThuEDbV4YI7+YTfvHHeyJxs9mMfp2roW1u3Q=)
2: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: vuhGbAXmdFyZHU5zcn6qI6D4hSXtuQyTQbfw33B7PYM=)
3: 321296E212E711F1ABE68E4F0D3D8C67.roa (hash: fLV89AyiqIKtRsF5UkgoIwTy20rGQz1nx0VUvYpw5g0=)
4: 7CF0A45404DF11F0B877A115C4F9AE02.roa (hash: 3zvmMVyOd3Cbubn7cAeWSSyiDSHBJieehrUFUeq/rLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Validity
Not Before: Mar 27 03:33:16 2026 GMT
Not After : Apr 3 03:33:16 2026 GMT
Subject: CN=69c5fa7c-fb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:fd:81:1a:26:46:ab:02:20:c3:1b:fd:3d:
9a:67:3c:92:52:06:62:12:9a:9f:a2:26:cc:6c:2b:
a8:7e:a7:c3:9e:16:76:dd:e4:3e:0a:87:fe:de:22:
d7:79:c2:dc:8e:65:31:6b:d8:cc:d4:4a:6d:62:2d:
ca:6d:91:22:aa:02:e4:17:e8:36:f2:64:55:1c:39:
66:bd:3f:2b:57:01:1e:53:f4:56:29:2c:02:20:d2:
af:9e:ee:09:ce:50:15:c0:89:98:91:9f:a9:6c:24:
66:59:50:f6:7e:f6:48:9d:c7:53:46:e0:c5:4e:4f:
bf:31:0b:1d:ee:1b:9e:10:6b:84:5e:21:30:cb:41:
f7:91:9c:cc:90:cf:20:62:c3:39:bf:43:b0:63:36:
3e:94:29:72:c5:c5:58:4d:d3:11:7e:4c:2d:67:26:
08:4a:91:7c:90:0d:5e:1c:17:52:0a:e0:07:ab:16:
98:d7:c8:ea:0e:84:99:3c:b4:c6:e0:75:c7:0a:80:
e8:0c:1f:91:d0:35:8d:26:f1:99:1d:20:b7:3a:67:
3e:0d:bb:68:29:26:6b:f2:d4:b4:bb:0d:2c:e4:7c:
36:18:79:84:a2:af:e0:57:d9:6c:49:bf:e7:14:20:
e2:74:7d:8c:1c:cc:f2:63:49:92:4e:5a:19:f8:3b:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B0:8A:23:9B:61:AE:3A:7E:AC:9B:2C:BC:A8:0C:4D:54:2D:A6:3C
X509v3 Authority Key Identifier:
keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:7c:69:b1:c8:9c:a2:3b:e9:e2:58:2c:5f:ea:e3:f2:44:7a:
75:37:08:7a:34:a1:4d:dd:60:02:c2:48:19:da:b6:41:cc:b1:
34:73:ce:97:8b:26:4c:d8:ca:54:1e:ac:7e:aa:fc:ed:6f:f0:
36:fb:75:c8:a1:c6:a8:99:b8:33:ef:9d:81:ee:06:28:3b:c4:
3a:45:29:3c:a2:0c:78:df:73:e2:12:c7:1f:02:d8:01:e1:63:
9b:15:54:3b:42:7b:c2:ce:77:1d:fb:42:d5:4c:82:76:33:d9:
98:29:64:b6:e0:35:b1:0f:ce:9f:f2:5b:ed:f7:a6:2f:f7:d3:
2c:82:75:eb:10:3c:ca:32:57:bb:a0:69:4b:ca:db:20:ad:54:
c0:03:37:1f:b5:0a:e0:87:b2:d3:6a:d1:1e:37:c8:ba:26:d8:
e3:1c:32:f3:a1:7b:45:9b:44:40:9c:2d:8c:14:e3:8b:5a:d6:
4e:b1:51:5e:1f:a1:c1:a3:08:ec:62:33:d6:b6:06:37:4d:eb:
03:4a:6b:f8:a5:68:ea:3f:d1:b4:8a:25:1c:cf:27:f2:c2:82:
00:14:65:b5:91:ca:4d:39:ab:3a:93:b4:64:80:9f:02:11:46:
8b:7e:f2:b6:ef:e1:eb:89:fe:da:a3:0e:60:77:fc:56:3b:e2:
19:de:f4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:29 2026 by rpki-client