
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
File: wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json)
Hash identifier: DvbxkbkzESwiCwneQGUehJyMSGTUk3m8fy9S1gOUlRw=
Subject key identifier: B7:6A:21:78:EF:D9:19:26:71:C1:EE:20:75:82:C3:1D:5E:8A:74:45
Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
Certificate issuer: /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Certificate serial: 0868
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
Manifest number: 085F
Signing time: Tue 12 May 2026 20:51:09 +0000
Manifest this update: Tue 12 May 2026 20:51:08 +0000
Manifest next update: Tue 19 May 2026 20:51:08 +0000
Files and hashes: 1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: N07iUAlps4akrGh+KUrScNunWZ5hbUUlGTcAQfg1Jlk=)
2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: uWkp09s7yGSzXGuY3Dy3+U0rw2K9bYSVVtki+9GQvL0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:51:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2152 (0x868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Validity
Not Before: May 12 20:51:08 2026 GMT
Not After : May 19 20:51:08 2026 GMT
Subject: CN=6a0392bd-6576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:de:bb:21:0d:89:7e:bc:fa:5b:3a:57:7a:
96:74:94:d0:8a:6b:a7:2a:18:76:f0:84:dc:90:2e:
e3:0f:37:77:b8:29:ad:2a:49:d4:f9:3b:d0:96:68:
b8:78:92:0b:05:eb:86:c9:ab:33:3d:f3:b4:df:25:
ee:c3:26:23:eb:5b:d9:c6:e7:16:85:a6:89:d6:0a:
b8:72:1d:75:ed:53:f1:dc:f0:6c:e3:52:68:09:2d:
08:ed:3a:c4:a9:fe:c4:c8:4d:43:7f:65:51:8f:b9:
94:7e:79:d3:88:25:6b:9d:5f:12:e0:51:3c:53:19:
8d:c3:01:05:ec:23:ce:88:b8:3b:d1:f9:bd:ee:37:
39:b4:ca:87:4b:2b:eb:14:8c:c7:99:23:7a:46:9e:
b5:24:92:47:d9:41:31:e5:67:f4:83:19:33:d4:78:
56:18:35:e5:94:73:c2:90:1b:33:b3:ae:46:8d:7f:
aa:b8:ae:42:16:3f:dd:15:63:03:dd:6c:cc:90:bb:
2a:40:4f:be:db:11:4d:61:bf:e2:5b:07:71:b4:c2:
a3:05:bf:9a:89:62:6c:96:8c:01:2c:e1:a9:e6:26:
78:77:39:f4:7d:81:8b:be:1b:7e:4c:1c:f3:3a:5f:
a4:62:ec:db:66:a5:5e:bf:70:aa:bf:ac:eb:d0:e0:
50:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6A:21:78:EF:D9:19:26:71:C1:EE:20:75:82:C3:1D:5E:8A:74:45
X509v3 Authority Key Identifier:
keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f5:82:55:6a:8f:7f:ed:91:a6:0b:ec:86:84:2d:08:73:ce:
64:95:25:92:7e:b9:6b:61:14:1c:a6:1b:17:fc:d7:d4:66:91:
d2:75:3b:0d:8f:d7:45:0b:21:ea:9d:4a:a0:e3:11:96:28:0f:
a0:cf:01:80:0d:51:36:5a:75:81:1a:ef:30:83:1c:88:b6:d7:
3f:09:e0:92:7b:90:88:c7:42:80:66:5d:b5:40:73:6b:5e:d7:
73:3a:2e:4a:90:2f:55:ac:1c:9d:ae:a5:fb:9a:c7:64:b5:5f:
69:e5:00:c9:61:47:c9:56:3a:c3:a5:b8:6d:37:69:07:20:66:
0f:93:81:bd:4c:46:e1:b9:39:af:93:9f:ce:1d:f3:70:2b:5b:
89:0d:0c:89:4b:c7:78:fa:98:c5:10:b7:e6:31:a5:6e:d3:4c:
7a:0e:29:a9:33:45:7f:89:c9:29:c7:dd:3b:b7:88:a2:58:77:
42:77:b5:7a:89:f4:ad:95:b4:72:37:fe:d2:8e:76:54:86:92:
05:7a:d5:b4:96:9d:61:3a:c7:f1:d1:93:96:bb:e7:80:49:2f:
aa:74:d9:34:89:39:76:4c:b6:ca:14:d3:65:15:0d:78:bd:23:
de:91:7f:04:f1:4a:a6:31:36:c8:11:9e:1e:7e:8f:29:b3:cb:
e0:97:dc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:35:41 2026 by rpki-client