
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
File: whcUQpGt4TEa-2LQLllQN8jatdw.mft (raw, json)
Hash identifier: vr5Isqc/n5JtU5oSFLq4ho/O7cqZ7bKM2E8uLS8IJnc=
Subject key identifier: 05:52:75:62:A7:71:C7:DA:73:CD:7B:F3:76:53:E9:6B:18:70:C1:64
Authority key identifier: C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC
Certificate issuer: /CN=A91E3E8B/serialNumber=C217144291ADE1311AFB62D02E595037C8DAB5DC
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
Manifest number: 83
Signing time: Thu 23 Jul 2026 09:29:28 +0000
Manifest this update: Thu 23 Jul 2026 09:29:28 +0000
Manifest next update: Thu 30 Jul 2026 09:29:28 +0000
Files and hashes: 1: whcUQpGt4TEa-2LQLllQN8jatdw.crl (hash: sVFyy1yh+94TeVtsQMFteQJwWouXSdXkPbdCrP9UJDY=)
2: 0359510CBE2711F08C3BFC4DC4F9AE02.roa (hash: bg9OdmypdtmkD01MhIR8EeLLWoS84maV/i45F72hbDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.crl
rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E8B, serialNumber=C217144291ADE1311AFB62D02E595037C8DAB5DC
Validity
Not Before: Jul 23 09:29:28 2026 GMT
Not After : Jul 30 09:29:28 2026 GMT
Subject: CN=6a61def8-e061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:51:db:02:b7:05:a3:3d:ca:2d:3b:a5:ff:
1d:4a:e4:1a:46:81:60:91:01:a5:3a:0d:c8:f3:d6:
81:75:a1:16:c9:21:2d:63:79:e8:56:bb:71:a9:e1:
10:39:cd:aa:7f:98:2a:28:f2:56:a7:05:89:9f:01:
45:c8:47:fa:ee:0f:f7:3c:d0:f7:a2:07:6c:63:ab:
b0:27:2c:e5:5b:c7:9e:80:73:02:68:fb:43:e9:0d:
b5:61:84:e8:d8:b8:f6:2c:70:0f:52:63:f0:0c:8e:
5e:f6:8f:20:1d:84:49:eb:58:53:aa:41:ff:87:e1:
39:71:b1:ba:24:d9:e3:4f:ec:7b:3c:dd:f4:92:01:
46:39:54:85:48:f6:27:11:b3:2b:44:13:e3:53:f0:
0a:d9:c6:cd:6f:7c:df:3c:9b:f9:60:b0:60:b8:ac:
a1:ac:93:2e:bf:cc:4d:7c:63:ef:70:02:f9:56:18:
87:1e:6d:7f:0f:2f:11:56:27:f8:68:00:c7:c8:81:
69:8f:5f:20:70:7f:0a:30:4a:08:84:26:2d:1b:e8:
f1:bb:bc:cb:87:f5:58:51:81:d2:06:72:fe:0d:c6:
4e:4e:73:69:d6:43:49:ca:c1:5c:f9:e1:07:98:52:
b4:23:24:78:81:cc:6e:20:2d:90:8f:df:f6:4e:a9:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:75:62:A7:71:C7:DA:73:CD:7B:F3:76:53:E9:6B:18:70:C1:64
X509v3 Authority Key Identifier:
keyid:C2:17:14:42:91:AD:E1:31:1A:FB:62:D0:2E:59:50:37:C8:DA:B5:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/whcUQpGt4TEa-2LQLllQN8jatdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/FC75386ABE2111F0AFD5B519C4F9AE02/whcUQpGt4TEa-2LQLllQN8jatdw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:00:48:fd:44:15:4d:a2:b0:12:b3:e5:ca:55:11:dd:09:2a:
25:04:4f:de:38:a0:81:bf:2c:f2:db:7e:d2:d7:fc:3e:e9:90:
92:a7:4f:4f:1a:c3:04:12:0c:1c:5d:5f:61:8d:19:1b:76:e2:
71:7f:2d:10:74:dd:c3:fd:6c:8f:0d:e2:26:c8:db:25:b4:8a:
0c:8e:53:f3:ee:d4:b0:b0:41:67:1b:d7:ba:fe:10:48:7e:70:
b6:b3:86:19:fc:56:4b:98:66:e1:c6:e3:51:ea:19:61:0b:ed:
36:78:56:b1:74:29:19:90:09:b5:8d:ab:77:81:1c:82:79:45:
e9:4d:28:5a:0c:08:c1:ef:bf:ef:ee:6e:91:5a:05:99:60:70:
99:05:3d:8d:12:9e:30:d5:cd:7c:aa:40:02:7a:84:ba:bd:14:
1b:d6:9a:da:b6:e7:83:55:69:8f:03:4d:f5:9d:23:a8:69:51:
2d:6a:d2:95:fa:1b:93:e9:3d:a9:68:eb:a3:d2:d3:2c:b2:8a:
f5:09:a3:6e:9a:f1:db:4d:42:29:b3:01:c7:b2:49:82:f6:41:
eb:f6:3d:36:85:81:0e:be:86:51:a5:c8:8e:71:76:0d:1b:bb:
f1:ac:71:50:4f:8a:4c:24:a6:c3:0e:f9:df:45:94:75:7d:69:
95:eb:ec:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:42 2026 by rpki-client