
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json)
Hash identifier: hmtYOK9WZDLgRUytTWbPrVNZsC1FTBhzvTkbsrVH/oY=
Subject key identifier: 4C:70:2C:11:9A:4C:52:16:6E:4D:63:35:82:94:03:F7:02:96:EF:9B
Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
Manifest number: C8
Signing time: Wed 25 Mar 2026 06:07:07 +0000
Manifest this update: Wed 25 Mar 2026 06:07:06 +0000
Manifest next update: Wed 01 Apr 2026 06:07:06 +0000
Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: GLKD+ZtrxznFGwlksx3qCeAyO8PfC+R35ZHb3h7EXps=)
2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: e1prpIYuDZ5J7mrkW/azLYwyJt2qyvzcK3j1tu4Uieg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Validity
Not Before: Mar 25 06:07:06 2026 GMT
Not After : Apr 1 06:07:06 2026 GMT
Subject: CN=69c37b8b-f789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:24:32:b2:f3:74:8e:5a:03:c9:97:fb:39:
1d:86:93:d5:32:ef:42:34:41:a4:55:e8:f0:d7:ef:
ef:fa:6c:37:29:d0:93:9f:ca:ad:80:eb:df:83:16:
9e:75:cf:05:e3:c9:08:53:84:c6:d5:8e:f9:5b:26:
ee:c9:fb:16:3d:24:b1:89:f0:66:c3:b6:4b:2d:9d:
98:47:5f:19:ec:a3:2d:1c:48:3f:4f:08:c2:30:08:
4a:89:cd:be:2f:8c:3a:18:b6:b8:c0:7d:d1:84:42:
1d:61:a4:f0:40:2f:ed:a6:6f:28:17:16:27:d5:40:
f0:e8:e1:e4:97:5d:e1:c4:6a:d1:aa:8c:67:72:90:
b9:89:01:32:da:cd:7a:0d:a7:4d:7d:11:cb:84:59:
23:c7:d8:f9:af:00:4a:35:1a:e9:5a:d1:8b:7a:d2:
2f:34:a4:63:57:6b:1d:09:26:8f:78:91:cf:20:a3:
0d:2a:16:0d:2d:9c:d2:0c:52:82:cf:52:e4:90:c2:
55:02:3d:7b:c6:20:a6:08:c1:46:98:a8:a5:92:5d:
8f:a6:86:ce:51:78:5a:18:69:e0:5b:59:52:08:9c:
29:35:26:82:aa:e0:0a:7f:5a:9c:a2:a7:0a:b0:1e:
06:a0:49:4c:dc:f4:1c:d3:83:be:fc:ed:59:c2:a0:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:70:2C:11:9A:4C:52:16:6E:4D:63:35:82:94:03:F7:02:96:EF:9B
X509v3 Authority Key Identifier:
keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:a6:35:14:3a:2c:9e:25:ec:2b:e7:d5:82:79:a6:21:96:94:
72:98:0b:67:92:6c:c1:d3:7c:88:0a:40:10:9d:3d:23:09:cb:
c5:b4:20:02:6f:05:45:08:bb:ff:2e:44:88:b8:b1:7f:e6:af:
b9:a7:c3:b3:65:0a:c9:d5:c6:77:d5:86:3c:1e:aa:e2:d4:d2:
09:41:ee:6e:3f:14:94:c9:f8:42:1d:6c:2d:fc:6a:20:42:8f:
aa:b6:a6:98:20:ef:d9:26:59:30:0c:f7:4a:2d:d3:0d:d8:e0:
75:a3:09:71:f8:50:20:87:df:2b:f4:2c:5d:0a:71:f9:de:78:
04:23:e2:ad:39:0d:be:7a:42:dd:b9:df:bd:64:af:9b:c4:00:
71:e1:db:cc:c2:08:6b:16:c0:3b:2d:4b:6e:f4:cb:09:0e:71:
1c:23:8d:d6:5c:1c:30:20:f2:51:a5:be:6a:a1:e5:c7:0d:54:
46:a3:8c:39:9e:44:11:00:da:68:de:02:06:f8:90:a1:ff:b4:
3c:1d:90:a2:1f:f3:40:1c:0c:e6:8e:07:bd:5d:cd:ff:73:76:
f7:5b:6b:b3:09:89:71:14:06:1e:c0:05:e2:bb:67:bc:a7:4a:
74:aa:11:ba:ae:ec:73:c9:e0:06:64:1c:b0:20:3d:b1:62:c9:
8f:18:97:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:28:48 2026 by rpki-client