
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
File: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft (raw, json)
Hash identifier: +eDsNmmHe29Z3PjSsH4Z3RjLeBgZ7+0In4YWWAMkKOg=
Subject key identifier: E3:89:FD:51:1A:57:00:A5:DB:3C:5B:51:5D:47:37:9C:5B:26:9F:3D
Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
Certificate issuer: /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Certificate serial: 096D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
Manifest number: 0964
Signing time: Tue 24 Mar 2026 19:52:46 +0000
Manifest this update: Tue 24 Mar 2026 19:52:46 +0000
Manifest next update: Tue 31 Mar 2026 19:52:46 +0000
Files and hashes: 1: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl (hash: h8wqPS5vRoJ/+ej2TcxnvMERUDNOnKSd33bLz4VMTQw=)
2: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (hash: jJBBqp0n1dcla2CfO5nioVw0ckuTS67twgXm6uBPlv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2413 (0x96d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E29, serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Validity
Not Before: Mar 24 19:52:46 2026 GMT
Not After : Mar 31 19:52:46 2026 GMT
Subject: CN=69c2eb8e-abcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:8b:e8:d2:cc:4e:1c:1a:df:02:60:27:8b:
1b:38:13:2e:fe:09:54:6e:2d:66:8f:69:a2:e6:15:
43:12:14:4e:6f:fe:33:9e:b8:d2:2d:0e:8b:6c:e5:
3c:0c:88:cc:e8:89:a4:36:ff:4d:3c:77:a6:63:92:
d7:a5:c3:aa:06:8f:88:18:98:a3:d1:fb:68:2d:75:
05:0d:f9:1d:57:b1:97:4b:fc:8b:6e:25:66:df:f9:
a8:5e:1e:58:76:7d:27:d7:7e:c6:19:10:7b:1d:7a:
8e:15:ee:8e:d9:95:7e:54:a7:21:6b:34:2f:67:1d:
f3:59:d7:f8:fa:b0:d6:2e:93:f2:6b:8d:9a:f5:88:
1d:63:b4:c1:61:c5:53:0d:77:75:ab:19:60:b3:be:
73:30:3a:97:12:fb:be:7c:44:97:a0:c2:35:25:2e:
f7:04:b6:21:b5:3d:93:5d:80:f8:d2:94:c4:85:e2:
88:d2:a6:44:7e:f5:cd:3a:01:26:94:63:6a:42:cc:
b5:c7:62:4c:d5:12:12:d3:bb:2f:ae:a4:01:3d:de:
a4:d6:5a:2f:3b:69:a8:11:34:b8:c4:ec:75:55:2e:
38:ad:5f:04:83:d1:8f:bf:6f:88:0c:c1:0f:69:ba:
78:19:17:bd:b7:94:29:5e:b0:01:17:d6:f5:1d:e7:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:89:FD:51:1A:57:00:A5:DB:3C:5B:51:5D:47:37:9C:5B:26:9F:3D
X509v3 Authority Key Identifier:
keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:88:ca:18:c1:51:ff:72:40:a8:20:ce:7d:6f:d6:a9:c0:28:
db:f1:53:8c:0a:14:8a:ba:83:54:d6:69:60:1c:29:e3:41:78:
bd:6c:80:60:61:cb:a3:bd:3f:d8:c7:81:fd:58:c7:91:a3:fe:
02:61:c6:89:8d:3e:f2:48:fa:87:bd:5d:65:d1:12:d5:e0:6c:
d5:30:50:de:29:d6:d4:ba:1a:dc:0d:51:00:91:e6:e3:13:74:
44:cb:3f:1a:1c:03:4a:85:a8:bf:a1:e8:0c:bd:e2:5e:2d:5e:
6d:e9:0b:3f:69:d0:86:41:c6:4e:65:99:20:29:b1:46:f1:1c:
2c:21:0d:c2:a2:fb:ee:9d:3e:c3:d1:9b:dc:1d:87:22:bd:1a:
b5:d9:3a:a7:b6:07:22:dc:fb:2a:c9:2c:fa:9f:a9:53:f0:85:
81:f5:f3:42:31:b3:7d:5c:76:13:dc:01:7a:0d:f8:b4:51:5a:
12:27:09:1c:1c:c4:0b:78:d5:cb:33:17:cf:62:25:2c:a5:6a:
e6:10:f7:2f:b8:18:10:0d:03:88:b8:77:2f:ae:8b:15:4f:2b:
24:a6:8e:68:43:ce:0c:52:c1:63:16:ae:fd:a5:b4:bd:08:34:
9a:e8:b9:f8:68:50:c4:fc:53:50:50:e8:e1:ac:0f:10:53:93:
a9:57:6f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:37 2026 by rpki-client