
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
File: WTnpc8iL_GpBqjWondhG-w0Wi8w.mft (raw, json)
Hash identifier: d0TfDSjUuysFZWBVZrFW4XO4zC/aKrGljbaTFIC/s00=
Subject key identifier: 05:68:49:38:62:D3:F6:63:24:F6:2C:CC:37:D0:81:CB:38:A4:EB:4B
Authority key identifier: 59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC
Certificate issuer: /CN=A91E6776/serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC
Certificate serial: 0F66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
Manifest number: 0F5E
Signing time: Tue 24 Mar 2026 17:25:57 +0000
Manifest this update: Tue 24 Mar 2026 17:25:57 +0000
Manifest next update: Tue 31 Mar 2026 17:25:57 +0000
Files and hashes: 1: WTnpc8iL_GpBqjWondhG-w0Wi8w.crl (hash: V/Elnls38yy7Vi/FD1LIdxPhk8EfhBNm+9Mgd58z5IY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl
rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3942 (0xf66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6776, serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC
Validity
Not Before: Mar 24 17:25:57 2026 GMT
Not After : Mar 31 17:25:57 2026 GMT
Subject: CN=69c2c925-d9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:c0:51:81:2b:fb:60:3b:bf:64:57:29:72:
18:59:57:6a:6f:3a:f0:2a:a0:c5:7a:b1:2e:8e:94:
bf:83:13:29:96:f6:b0:4c:6e:32:e7:93:41:a1:de:
f6:56:84:7d:54:6e:42:07:ef:85:b6:2d:0c:86:63:
91:bd:dd:87:d4:91:b7:15:2a:06:d6:f3:fa:09:dd:
10:51:52:3a:35:41:9d:6d:61:ad:40:ed:15:91:02:
de:55:80:16:cd:e3:cb:aa:fb:22:7d:10:21:f5:00:
21:4f:c1:cd:fb:4f:88:7f:bd:eb:7d:ce:15:74:b7:
a9:88:cf:8d:13:c0:99:0d:ef:f4:29:19:2e:e1:3d:
48:3f:4d:52:2c:fc:27:31:82:21:29:ca:07:ab:05:
79:be:77:85:42:5e:33:0f:60:6e:a0:08:62:34:fc:
7a:06:88:c5:60:4d:75:5a:ca:1a:84:dd:25:ea:af:
38:a5:33:bc:d6:64:1c:5c:df:a4:a2:4c:2e:03:4a:
63:c4:27:b7:cf:f1:51:24:40:cd:50:aa:64:3e:74:
59:92:56:8f:96:2d:df:92:a5:53:a3:fa:ed:04:f4:
3c:08:27:77:a1:8b:7e:0c:85:b2:3c:ac:10:c4:f0:
e6:5b:0a:7d:ce:9c:39:f2:9f:08:9d:ce:fc:57:4b:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:68:49:38:62:D3:F6:63:24:F6:2C:CC:37:D0:81:CB:38:A4:EB:4B
X509v3 Authority Key Identifier:
keyid:59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:f6:d3:9a:ad:cd:fd:c2:f7:27:60:9d:33:e3:1d:2f:41:e3:
d8:6d:75:7e:42:e3:4b:81:a7:b9:63:75:31:d4:95:65:2e:9e:
00:d1:4a:f8:0b:97:2d:51:50:48:a9:fa:48:19:de:71:b4:3c:
35:a6:df:59:fd:ac:aa:dd:03:b3:22:42:7f:67:30:e1:aa:13:
61:dd:f6:d9:bd:a2:9e:25:35:8c:75:ba:b3:86:fe:7f:bc:b3:
f6:c8:80:c3:31:ae:c3:ef:d9:a0:34:fc:9e:2e:0d:1d:f7:5f:
83:19:c4:9a:9b:77:cc:d3:8d:db:8e:b7:25:f1:6f:0b:6f:64:
fb:6d:c9:ab:1f:b1:8b:0b:2d:3c:85:a5:17:74:90:47:63:28:
ba:a1:24:e5:b6:c2:a4:f7:82:ca:e2:45:6a:17:b9:36:5d:bb:
dd:52:01:f6:2d:e5:51:96:5f:04:81:b1:26:21:f2:77:10:8b:
48:cc:94:82:8e:67:cd:e7:70:b4:6d:9f:bf:cb:0c:3b:5d:3a:
b0:74:d0:f3:53:e5:bd:1e:07:52:84:39:5a:ff:5b:31:d7:c0:
91:b4:d2:73:08:4c:1a:50:94:9e:4f:e1:33:c4:20:60:77:d0:
30:39:dc:79:eb:a4:ee:38:0e:2e:86:51:04:29:0d:87:9d:d3:
0d:fb:4a:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTY3NzYxMTAvBgNVBAUTKDU5MzlFOTczQzg4QkZDNkE0MUFBMzVBODlERDg0NkZC
MEQxNjhCQ0MwHhcNMjYwMzI0MTcyNTU3WhcNMjYwMzMxMTcyNTU3WjAYMRYwFAYD
VQQDEw02OWMyYzkyNS1kOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmyzAUYEr+2A7v2RXKXIYWVdqbzrwKqDFerEujpS/gxMplvawTG4y55NBod72
VoR9VG5CB++Fti0MhmORvd2H1JG3FSoG1vP6Cd0QUVI6NUGdbWGtQO0VkQLeVYAW
zePLqvsifRAh9QAhT8HN+0+If73rfc4VdLepiM+NE8CZDe/0KRku4T1IP01SLPwn
MYIhKcoHqwV5vneFQl4zD2BuoAhiNPx6BojFYE11WsoahN0l6q84pTO81mQcXN+k
okwuA0pjxCe3z/FRJEDNUKpkPnRZklaPli3fkqVTo/rtBPQ8CCd3oYt+DIWyPKwQ
xPDmWwp9zpw58p8Inc78V0sYvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVoSThi
0/ZjJPYszDfQgcs4pOtLMB8GA1UdIwQYMBaAFFk56XPIi/xqQao1qJ3YRvsNFovM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjc3Ni8zRTExNzQ4NDg4
MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9HcEJxaldvbmRoRy13MFdp
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dUbnBjOGlMX0dwQnFqV29uZGhHLXcwV2k4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Njc3Ni8zRTExNzQ4NDg4MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9H
cEJxaldvbmRoRy13MFdpOHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc/bTmq3N/cL3J2CdM+MdL0Hj2G11fkLjS4GnuWN1MdSVZS6eANFK+AuXLVFQ
SKn6SBnecbQ8NabfWf2sqt0DsyJCf2cw4aoTYd322b2iniU1jHW6s4b+f7yz9siA
wzGuw+/ZoDT8ni4NHfdfgxnEmpt3zNON2463JfFvC29k+23Jqx+xiwstPIWlF3SQ
R2MouqEk5bbCpPeCyuJFahe5Nl273VIB9i3lUZZfBIGxJiHydxCLSMyUgo5nzedw
tG2fv8sMO106sHTQ81PlvR4HUoQ5Wv9bMdfAkbTScwhMGlCUnk/hM8QgYHfQMDnc
eeuk7jgOLoZRBCkNh53TDftKZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:43:52 2026 by rpki-client