
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
File: woYQciwbyJvjK01LiizCHeZxfMg.mft (raw, json)
Hash identifier: qp5UgQqo1FVPqBnRQkCo/KA4EN74Xz94DyvUtP5b9l8=
Subject key identifier: 1B:FD:6A:F5:C5:AA:45:6B:60:54:58:6A:BA:AA:C4:4C:28:7E:5D:E5
Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
Certificate issuer: /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Certificate serial: 0337
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
Manifest number: 032E
Signing time: Wed 25 Mar 2026 00:44:07 +0000
Manifest this update: Wed 25 Mar 2026 00:44:06 +0000
Manifest next update: Wed 01 Apr 2026 00:44:06 +0000
Files and hashes: 1: woYQciwbyJvjK01LiizCHeZxfMg.crl (hash: yLo0toSoKP1OF1r6IWDDcacB7hF+OP6az8bdCyofnn4=)
2: 782DB69017A911F192949DC6333D8C67.roa (hash: Mv+E4tW4XYVYr1mpUCzDscto72w/c2g7B6/yB5ClYE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 823 (0x337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11D6, serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Validity
Not Before: Mar 25 00:44:06 2026 GMT
Not After : Apr 1 00:44:06 2026 GMT
Subject: CN=69c32fd6-1af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:24:f8:0e:1d:d1:1d:cd:82:49:fe:c5:51:23:
f1:a2:f0:2a:94:12:95:0c:fe:89:d1:0c:13:35:68:
7c:c0:e5:bc:03:3b:b5:02:71:a5:e3:59:67:63:28:
42:bd:4f:f7:bd:22:d6:55:20:40:4d:36:62:6a:a5:
7c:b5:1d:6a:c8:16:17:b8:01:bd:5f:8c:54:1c:4e:
12:2c:4c:7d:9a:e1:2e:23:82:63:0d:ef:c1:ce:f0:
26:99:12:e2:a7:d4:0b:f3:9e:74:68:fc:a7:91:23:
be:cf:d1:93:cc:9b:b8:0e:c6:95:81:dd:f5:e3:7a:
d4:a5:48:c0:c7:5f:41:3a:f3:2b:cc:b2:7b:dd:95:
0f:29:32:cd:76:60:69:77:13:32:56:fd:e4:04:0c:
c0:42:b8:18:01:a3:16:ec:01:b0:60:62:29:3a:de:
5e:77:03:86:91:de:1f:03:b1:e9:8b:c9:22:0c:f7:
a6:e9:49:dd:84:bb:9b:c9:c8:13:3d:97:9c:07:a5:
e6:2b:d4:f8:21:cc:e0:a4:bd:a0:a9:37:ef:47:42:
21:f5:4c:74:e1:81:47:0b:42:0d:8c:16:9a:5a:1d:
d3:55:e7:7a:7a:e4:e1:9e:80:e0:ea:61:9d:0e:fb:
88:a7:d1:6b:09:a2:1d:8a:31:0d:2e:c9:2b:a0:10:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FD:6A:F5:C5:AA:45:6B:60:54:58:6A:BA:AA:C4:4C:28:7E:5D:E5
X509v3 Authority Key Identifier:
keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:12:63:8d:22:ec:98:1f:80:a1:33:f8:f4:68:41:c9:42:8a:
69:db:0d:cf:d5:b6:ba:16:a4:07:f3:6c:cb:69:a2:86:b5:fd:
12:4e:11:bf:3d:3d:c8:8f:f1:e9:31:a8:f2:d3:6c:ff:9a:eb:
44:39:10:2e:9b:e0:13:a3:95:11:00:3e:2c:06:87:c3:00:b8:
2d:3c:d2:71:54:f8:34:68:38:74:78:9e:60:9a:9f:dd:09:e7:
28:f7:39:2c:95:ff:a2:fc:07:0b:84:50:d1:d9:54:33:c3:5a:
b5:08:77:6e:ef:19:9f:af:b9:9f:ad:d0:f5:32:24:25:b1:3c:
80:17:59:d8:f7:b4:5a:29:26:4e:94:93:1b:27:62:eb:75:e4:
bc:2f:3b:87:f6:1e:01:20:11:74:3b:e1:c3:d9:de:0e:00:76:
45:41:d4:ef:df:df:ec:61:3d:26:2e:b2:cc:f3:5f:4c:34:28:
27:09:78:a8:8e:0d:26:86:a1:82:cb:c1:87:95:0f:e4:de:90:
82:e8:37:dc:86:97:2a:de:1c:ca:66:c9:d9:64:be:08:9b:8e:
cc:74:e6:81:d2:da:b0:42:6a:7a:55:5a:13:ff:c8:88:e0:83:
80:02:ff:1a:46:c1:64:aa:a1:69:d4:b5:cb:ae:f0:ed:ef:4c:
ed:37:76:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:56 2026 by rpki-client