
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json)
Hash identifier: r+GSoEbOHS9PEzj8y8nzfFKO1AEc2j7U0BfrLY9Qjjs=
Subject key identifier: 27:14:DF:DA:47:3D:BE:78:51:4D:BB:78:F7:FB:CD:C5:21:1A:FC:3A
Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7
Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
Certificate serial: 09DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
Manifest number: 09AE
Signing time: Tue 24 Mar 2026 19:43:41 +0000
Manifest this update: Tue 24 Mar 2026 19:43:41 +0000
Manifest next update: Tue 31 Mar 2026 19:43:41 +0000
Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: tzXdpcLwPUnXBs6g5s6cCqeUw1oNICwd3qLDwdaH6S8=)
2: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: +q1/Z0Gbv09SPM+cE3PEwTTEu2R3d9XHswraJOVO5w8=)
3: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: Fd1Tf/S90EhmoaFhI4h+ZhWQUJ40Q/83oW0JuW1LVTs=)
4: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: lwb4D6wTQBfjbmXTI8Z//lyrBHKyL8sazKScgUSsnjE=)
5: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: 86fiv+ToJ8E+95Mhatj4DQQCxzIT6kPR/i0pwYtFn6s=)
6: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: aGGIYu/7r8bbBJz8mmriyFLWLYpIceyB24QlB1GUQUo=)
7: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: RrvKz+k3BpE474LEsBiK8GJqBSWh6Od/xbLaF5t2LA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl
rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2526 (0x9de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
Validity
Not Before: Mar 24 19:43:41 2026 GMT
Not After : Mar 31 19:43:41 2026 GMT
Subject: CN=69c2e96d-a666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ba:e3:c6:de:b7:05:08:80:37:47:11:63:48:
d6:79:65:79:87:3e:db:92:cb:86:35:65:eb:07:c8:
ea:b4:e0:c7:1e:ec:db:a2:8a:42:9f:61:17:2c:b4:
62:74:98:75:1e:7e:25:30:d8:e3:8c:85:0f:a7:bc:
90:36:43:c8:fe:fb:55:61:d7:da:02:c7:b4:8c:fa:
ee:70:a1:da:25:99:5a:c7:53:c7:24:c1:e3:45:64:
ea:73:f0:3e:dd:6c:e7:ac:a2:22:55:2e:b9:de:5f:
dd:3e:54:54:9c:c8:3a:8e:be:a8:6e:63:4a:df:fe:
a9:68:1b:bb:b7:9d:ba:89:b1:b9:07:b6:f0:6a:57:
f9:fc:98:88:38:40:86:0e:ee:a1:c7:19:56:db:81:
1a:56:55:6d:51:6b:52:21:80:4a:6a:d9:00:70:ac:
66:2a:f6:61:d0:b7:d9:5f:d8:99:85:e4:b7:32:c3:
c0:82:f7:1e:33:2c:57:40:5f:61:64:9d:15:70:27:
1d:c3:36:fb:f2:62:e7:74:6f:47:89:7f:97:b0:08:
75:7b:11:51:7c:f0:98:c2:b6:bd:ca:05:69:36:8b:
91:53:6b:87:91:c6:3d:8b:aa:bb:8a:d4:df:a7:9b:
ca:e6:9d:84:81:2f:01:38:8e:5c:90:17:70:9d:40:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:14:DF:DA:47:3D:BE:78:51:4D:BB:78:F7:FB:CD:C5:21:1A:FC:3A
X509v3 Authority Key Identifier:
keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d8:b5:40:50:99:e5:d6:af:03:c2:c8:58:76:7d:ff:18:5b:
5c:92:42:cd:00:e1:56:6d:08:22:19:37:72:d9:b4:20:6f:18:
fb:93:3a:38:a5:9c:0d:e9:8c:8c:23:86:c0:cd:c9:a7:28:d9:
b8:5d:3d:e9:e2:9a:75:2f:36:04:fc:00:2b:b4:24:c9:9c:ec:
a8:88:da:57:cc:c7:34:d0:30:1b:d9:1f:20:2c:b2:e8:48:f0:
fe:ad:b1:de:29:9b:fd:3e:55:cc:6b:09:55:b1:5b:75:4f:da:
cd:74:08:27:9a:75:c9:71:e4:77:79:b4:bb:76:88:f5:60:b7:
28:10:02:a2:4d:39:55:8e:99:0a:36:1c:b5:aa:e5:05:3d:ca:
0c:30:cb:54:43:d0:d5:f7:6c:eb:d4:52:b9:f4:7d:62:59:90:
69:a8:31:dc:a6:b9:e7:5a:48:de:c8:7a:a8:ba:af:6f:00:e4:
4b:4f:d7:72:92:79:b2:24:0b:06:8a:08:68:1f:04:ce:d8:b7:
1e:7f:ba:f5:46:da:28:1d:c3:63:9f:7f:0b:a5:17:f9:94:6d:
ba:fb:b2:37:78:6b:1c:5d:15:c9:d1:6d:17:2e:37:3e:bf:67:
ca:db:36:e4:4b:0d:7e:29:a7:bd:87:36:3f:d3:c2:a1:b8:d4:
38:b7:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:24 2026 by rpki-client