
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
File: We3oFpsKLDIUaf8RsWKL3gwfLEE.mft (raw, json)
Hash identifier: lrMeZ5klDCBuIs6A8dCSDV4TKlqpMIy11SKZPmOsIAU=
Subject key identifier: 9B:2F:18:AC:79:D6:BE:93:1C:2C:24:CD:62:5C:6D:D7:1E:A5:DA:13
Authority key identifier: 59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41
Certificate issuer: /CN=A91DEFAF/serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41
Certificate serial: 07A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
Manifest number: 079B
Signing time: Tue 24 Mar 2026 21:16:20 +0000
Manifest this update: Tue 24 Mar 2026 21:16:19 +0000
Manifest next update: Tue 31 Mar 2026 21:16:19 +0000
Files and hashes: 1: We3oFpsKLDIUaf8RsWKL3gwfLEE.crl (hash: WPgROoHnRGFQwG9K9iPmqUe3fkjUqB1yhayKvPODCDM=)
2: FD9457225B1011F0A31EF763C4F9AE02.roa (hash: DHCrD/BmJiwChnMZypQOoV/NKOdhW+NSK0er3Q/6jx8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl
rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEFAF, serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41
Validity
Not Before: Mar 24 21:16:19 2026 GMT
Not After : Mar 31 21:16:19 2026 GMT
Subject: CN=69c2ff24-cbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a9:a7:53:ef:a3:0d:85:44:55:a8:9e:38:df:
ac:64:ca:59:c6:41:28:4b:91:a9:50:fc:39:c1:2a:
ed:36:f4:b7:64:e0:d7:39:f6:81:24:d6:e7:52:1c:
45:b5:71:a9:b8:e2:63:cd:ca:9b:b1:a0:37:21:fb:
87:94:7d:94:48:81:dd:c5:38:86:4e:30:d4:04:ec:
42:0d:db:a8:bd:d5:d4:4d:41:87:a7:07:a5:e7:d5:
30:67:d7:2f:57:17:ba:7f:61:99:7c:09:19:d9:b2:
dc:3b:16:fa:3f:16:cc:e1:d4:c8:0b:1e:4c:ea:cf:
07:6c:2b:5d:85:10:cf:ba:25:e6:36:c9:c7:94:c9:
9f:dd:f6:1a:28:5a:37:fd:78:87:b8:58:6d:33:4a:
f3:47:1c:c6:9a:2b:9a:50:27:f2:07:ce:ef:6f:4a:
3d:8f:3c:3b:d5:24:ab:77:23:0b:73:f0:d4:9e:fa:
96:e1:69:1d:15:aa:7d:8a:0c:f7:8a:83:83:cb:d5:
50:3a:c4:92:ba:e5:8f:ac:a2:16:10:da:df:72:00:
cf:eb:d4:6a:fb:e0:23:55:e2:77:60:43:2f:14:ac:
de:d3:17:bf:cb:ad:56:e4:45:3f:01:a7:2e:78:45:
6e:11:9b:09:66:82:25:63:0e:1c:ac:e8:bd:16:8d:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2F:18:AC:79:D6:BE:93:1C:2C:24:CD:62:5C:6D:D7:1E:A5:DA:13
X509v3 Authority Key Identifier:
keyid:59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b1:b0:b0:13:42:ba:ce:64:f0:f2:dd:a2:22:8b:33:24:80:
63:d7:7b:5d:b1:73:ca:eb:4d:92:4d:fa:3a:79:15:7f:d7:03:
b5:f5:df:95:bc:a7:da:d2:66:04:fe:18:dd:93:72:4c:51:8e:
22:2f:62:a0:46:35:1e:26:33:53:47:60:5b:84:47:70:a1:c2:
b8:cc:da:78:c8:ef:28:0d:a3:7b:eb:38:1d:ec:58:47:2a:cd:
55:e1:35:d6:6e:19:53:1e:dd:dd:3c:2b:ba:1c:4b:dc:92:b5:
a2:88:4a:d7:bd:31:de:55:ef:e4:71:55:be:84:64:a6:ad:52:
7d:ca:6f:81:dd:ad:5e:a1:3c:32:cc:14:a9:9e:7b:49:3e:3d:
9e:76:f3:50:31:fd:20:68:31:f4:83:e5:f3:b2:32:2c:67:99:
25:f4:74:5c:20:5b:74:34:89:e9:a9:f5:0f:a4:da:8a:1b:7c:
3b:3b:d4:e9:84:ac:41:c6:74:cc:3b:39:c1:57:dc:d8:87:2e:
2e:c6:a5:6d:ff:3f:e4:e3:f6:a3:ad:b5:4e:6e:d5:58:e2:22:
fe:92:4d:ac:07:af:99:fa:7b:40:b4:8a:b2:92:e3:bc:3b:60:
e4:9b:04:fd:7b:a2:f4:70:7f:0a:4a:69:81:d6:da:4d:c1:b7:
c1:db:e0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:21 2026 by rpki-client