
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
File: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft (raw, json)
Hash identifier: ZbKUFvX0DOxFGXBeSkpR4a+EEpEhmxsGPmzl4Iircnc=
Subject key identifier: 5A:A9:DF:B9:E2:8F:4C:4C:54:79:DB:92:78:F4:87:96:3F:38:E8:B9
Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59
Certificate issuer: /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
Certificate serial: 059A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
Manifest number: 0586
Signing time: Tue 24 Mar 2026 22:57:36 +0000
Manifest this update: Tue 24 Mar 2026 22:57:36 +0000
Manifest next update: Tue 31 Mar 2026 22:57:36 +0000
Files and hashes: 1: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl (hash: T4p6YGyzuRAXv9MGBTQFIDOzLNX0iOJg2pMJIdqTjcg=)
2: 7273624619B511EC98D2A883C4F9AE02.roa (hash: FBbiY2Z7A2gvB+/P385wAa7i305YOeNtcXS/9FCiDPc=)
3: 387C18C819B811EC841B010DC4F9AE02.roa (hash: cO+o3Y1UXcuuxZYV6QVRRJQ+0dW/JHVUCXusTAIueTk=)
4: 7EE93AAC893111EF824EA948C4F9AE02.roa (hash: PJ438y1c6II0FXqv0r3FpWjrqzyZo7X27AzYDDSNdT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl
rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1434 (0x59a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED931, serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
Validity
Not Before: Mar 24 22:57:36 2026 GMT
Not After : Mar 31 22:57:36 2026 GMT
Subject: CN=69c316e0-8e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6b:dd:90:1e:ad:4e:f8:a1:9c:0b:68:c8:5e:
06:8a:4e:6b:19:53:2f:85:96:05:e4:45:9c:12:78:
ea:70:33:40:57:27:96:83:8e:27:73:c7:17:da:99:
3c:25:99:06:b4:a5:20:38:a6:20:4a:1b:2e:39:0a:
79:45:90:f5:de:73:9b:25:24:3e:ba:8e:6a:a2:c5:
c4:cd:d2:43:e9:76:38:35:d4:cf:17:f7:40:fa:cd:
27:d9:f8:36:62:67:8e:43:7c:b3:af:fd:b8:0a:0e:
f3:48:dc:25:44:1e:a9:fe:7c:56:ff:21:5d:55:a4:
45:44:bc:ed:5a:ff:b6:7e:32:23:0c:70:1d:73:46:
0c:74:12:25:99:6a:7e:48:df:48:e8:8b:21:22:77:
9a:04:ba:67:98:e6:bf:c9:1f:b0:2d:ea:f3:40:29:
18:56:f7:14:a3:b0:5b:84:59:88:92:d8:f1:cf:f7:
5e:48:26:68:33:06:fa:d7:32:f3:97:b3:54:c7:94:
b0:cb:86:a8:ce:e3:9b:12:4e:3c:a9:ab:31:93:7b:
00:e2:3c:98:f5:51:bf:50:b0:fb:d8:b5:02:f6:97:
56:df:3c:1d:4c:da:0e:23:6a:7f:ed:3c:47:f5:9c:
26:81:47:62:2e:20:d5:99:a1:49:6c:e6:81:cb:63:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A9:DF:B9:E2:8F:4C:4C:54:79:DB:92:78:F4:87:96:3F:38:E8:B9
X509v3 Authority Key Identifier:
keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b2:3c:85:d6:cc:ed:41:2b:3f:32:50:66:bf:14:ad:3f:71:
d9:49:84:20:77:6b:2c:9e:66:af:2d:e9:be:b9:fe:bf:24:e9:
38:12:c5:f5:63:a4:34:8b:13:ba:53:55:c1:81:90:f8:76:08:
0b:df:ca:51:d3:21:c5:b3:6b:3c:9c:80:f7:77:fc:cd:27:71:
da:66:1f:9f:44:97:38:f5:c2:7b:82:90:4a:5f:4c:e3:23:5b:
43:1a:c1:85:a1:d9:e7:b1:29:55:79:c8:87:76:58:09:4d:96:
50:14:2c:10:87:57:99:a5:bf:d0:b8:2e:11:68:be:22:af:69:
8b:45:89:03:83:90:55:67:a9:17:5e:f8:43:34:7a:7f:c1:60:
ad:38:e5:e3:22:e8:d7:fe:e7:3e:97:2f:e2:7c:42:bc:85:72:
42:bc:d7:91:e3:bc:06:81:49:e5:f2:ee:3e:0a:b7:7a:7e:0a:
69:50:09:13:fd:a4:b3:be:1b:b3:13:99:e5:41:c8:63:84:1f:
21:09:8c:8b:36:8a:f8:99:85:71:b1:7a:b6:f2:d6:d7:2a:51:
0f:69:34:4d:9f:e9:0a:d8:45:06:48:6f:c6:cf:4b:d9:ee:a8:
91:ac:96:2e:9a:67:73:00:00:8a:3e:db:bb:4d:29:7e:d9:0f:
c6:1d:40:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ5MzExMTAvBgNVBAUTKEMwMzU0NTBCRDFBMkQ0NEIxNTFFRTM4QzA4OTg4OEE1
QUY0QjgwNTkwHhcNMjYwMzI0MjI1NzM2WhcNMjYwMzMxMjI1NzM2WjAYMRYwFAYD
VQQDEw02OWMzMTZlMC04ZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+mvdkB6tTvihnAtoyF4Gik5rGVMvhZYF5EWcEnjqcDNAVyeWg44nc8cX2pk8
JZkGtKUgOKYgShsuOQp5RZD13nObJSQ+uo5qosXEzdJD6XY4NdTPF/dA+s0n2fg2
YmeOQ3yzr/24Cg7zSNwlRB6p/nxW/yFdVaRFRLztWv+2fjIjDHAdc0YMdBIlmWp+
SN9I6IshIneaBLpnmOa/yR+wLerzQCkYVvcUo7BbhFmIktjxz/deSCZoMwb61zLz
l7NUx5Swy4aozuObEk48qasxk3sA4jyY9VG/ULD72LUC9pdW3zwdTNoOI2p/7TxH
9ZwmgUdiLiDVmaFJbOaBy2M2iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqp37ni
j0xMVHnbknj0h5Y/OOi5MB8GA1UdIwQYMBaAFMA1RQvRotRLFR7jjAiYiKWvS4BZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDkzMS9EMUQzMkI2RTE5
QUYxMUVDQUY4NENENzZDNEY5QUUwMi93RFZGQzlHaTFFc1ZIdU9NQ0ppSXBhOUxn
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dEVkZDOUdpMUVzVkh1T01DSmlJcGE5TGdGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDkzMS9EMUQzMkI2RTE5QUYxMUVDQUY4NENENzZDNEY5QUUwMi93RFZGQzlHaTFF
c1ZIdU9NQ0ppSXBhOUxnRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuLI8hdbM7UErPzJQZr8UrT9x2UmEIHdrLJ5mry3pvrn+vyTpOBLF9WOkNIsT
ulNVwYGQ+HYIC9/KUdMhxbNrPJyA93f8zSdx2mYfn0SXOPXCe4KQSl9M4yNbQxrB
haHZ57EpVXnIh3ZYCU2WUBQsEIdXmaW/0LguEWi+Iq9pi0WJA4OQVWepF174QzR6
f8FgrTjl4yLo1/7nPpcv4nxCvIVyQrzXkeO8BoFJ5fLuPgq3en4KaVAJE/2ks74b
sxOZ5UHIY4QfIQmMizaK+JmFcbF6tvLW1ypRD2k0TZ/pCthFBkhvxs9L2e6okayW
LppncwAAij7bu00pftkPxh1AQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:40 2026 by rpki-client