
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
File: wUIqDEz_JI1Rc1jr33tOgCuswOc.mft (raw, json)
Hash identifier: xzzE89LY8GDBZwRSCOMDtyp8/RXGXwnROp2nNLmM7Uo=
Subject key identifier: E8:54:D6:DB:ED:C9:76:2B:87:B8:AC:BF:AC:44:AA:5D:26:02:28:B1
Authority key identifier: C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7
Certificate issuer: /CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
Certificate serial: 3538
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
Manifest number: 352B
Signing time: Tue 24 Mar 2026 15:02:37 +0000
Manifest this update: Tue 24 Mar 2026 15:02:36 +0000
Manifest next update: Tue 31 Mar 2026 15:02:36 +0000
Files and hashes: 1: wUIqDEz_JI1Rc1jr33tOgCuswOc.crl (hash: ZvvAMj2lN/Qy4t6NBRsNmjse63CAfSEpQPiG43Pke/Y=)
2: 17BB4C20F17E11EAA3CC597BC4F9AE02.roa (hash: 19iYpTQxec7phX7aSuAR7eVYx46KurWTZFsnfBvWqQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl
rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13624 (0x3538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB45A, serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7
Validity
Not Before: Mar 24 15:02:36 2026 GMT
Not After : Mar 31 15:02:36 2026 GMT
Subject: CN=69c2a78d-d12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:a5:98:be:0b:cf:ad:de:f1:03:8a:25:bb:
d1:e5:e1:59:2e:1a:49:27:61:76:ae:78:17:43:4a:
77:62:b2:af:f4:ff:7e:6a:c4:04:75:cb:73:b8:d9:
4e:ce:41:3a:4a:7a:7e:84:58:0b:b5:5c:70:a1:fd:
c7:f1:fa:a7:05:3d:bd:4c:f5:a8:43:32:1a:58:2d:
e0:1a:ed:d3:34:87:2a:83:f1:92:45:a9:42:17:09:
db:a8:c3:a9:6e:82:53:70:2a:f6:73:e3:1c:a1:3f:
15:d6:20:f7:66:ed:51:cb:5b:6f:91:28:ad:a4:4b:
79:a0:37:68:18:35:8a:dc:31:50:2f:cc:0d:ee:a8:
d1:e9:59:31:83:d0:ae:c3:d5:b8:11:12:9f:4f:df:
4c:9d:e1:31:15:c6:49:89:53:1d:eb:a9:e4:97:0d:
4f:98:d7:ad:a2:32:d8:a4:92:d1:b6:d5:7e:32:56:
3f:d9:9a:47:5b:32:a1:92:c3:de:83:3e:17:f6:10:
8a:95:46:c0:32:1e:54:87:9f:1e:2c:0a:8f:f0:05:
ed:12:d1:f1:70:a0:65:9a:e6:a0:18:96:0d:b0:ab:
9d:13:38:3e:7f:dd:8b:52:cf:e3:40:e0:a6:58:48:
33:a3:5c:ff:60:f0:5a:5e:34:d0:ea:ba:cc:cb:75:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:54:D6:DB:ED:C9:76:2B:87:B8:AC:BF:AC:44:AA:5D:26:02:28:B1
X509v3 Authority Key Identifier:
keyid:C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:01:41:5d:ae:8b:a4:64:b1:99:39:1a:aa:51:9e:3d:07:8c:
10:42:10:37:ac:04:dc:50:52:a7:2b:fe:45:48:63:04:ed:ae:
11:d8:97:38:c2:c1:db:15:6d:ef:10:de:d9:ce:10:20:95:8d:
e7:55:a1:f3:e2:38:18:be:14:78:57:67:5a:c0:e7:ab:33:3f:
32:32:27:fd:9b:b9:8d:ff:10:19:a9:59:b9:83:6d:b0:b5:68:
54:f1:e0:8c:68:5d:ba:e5:8c:54:9f:f2:1d:ad:f7:0f:4c:03:
ea:ab:46:d7:8c:7a:7d:78:2a:c2:67:bd:a9:87:33:00:d5:34:
8b:42:f3:a4:ef:78:50:27:46:8c:3f:ab:5e:26:f8:57:42:33:
e7:22:21:4e:4b:eb:44:3a:e2:50:97:bc:49:c8:54:1d:57:dd:
08:92:e9:29:75:e0:78:0c:e1:47:1f:d5:6d:8c:d6:bb:c4:01:
84:e7:f8:3f:21:73:ce:8c:9e:03:d0:2b:d6:ad:3b:ed:2c:5f:
80:f9:12:7e:bf:3e:ae:cb:40:d1:7b:87:53:c9:e0:da:72:8a:
e4:e8:b4:e3:67:4b:ef:46:85:79:64:17:b5:13:95:af:62:1c:
50:ee:c6:eb:1b:ab:5b:de:02:84:11:ec:10:3f:54:ce:db:da:
72:b9:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:45:42 2026 by rpki-client