
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json)
Hash identifier: hEwj6cKIS3QO7PGsRau2OfEuXVZGPrEnWppUzJE+iiY=
Subject key identifier: ED:D2:C1:A5:D6:FF:FC:AE:32:2C:7B:89:FC:82:4B:ED:AC:0F:B2:50
Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66
Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66
Certificate serial: 02A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
Manifest number: 0293
Signing time: Wed 25 Mar 2026 01:12:40 +0000
Manifest this update: Wed 25 Mar 2026 01:12:39 +0000
Manifest next update: Wed 01 Apr 2026 01:12:39 +0000
Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: RXlxuLQ0hExqlQ6pkS6MCqnT4l058wun/mqNgLA+MQs=)
2: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: 5RaPjFBnhiFZyA3PtlxXYhV1TZyEd5Mgtbgk5McoTSs=)
3: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: TRXYmyqIh38BJQpPjdJnxxRS6yMm2jbuDarUopXUSZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl
rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66
Validity
Not Before: Mar 25 01:12:39 2026 GMT
Not After : Apr 1 01:12:39 2026 GMT
Subject: CN=69c33688-89ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:e3:ed:5d:2e:0b:bf:8a:2c:55:6b:e3:20:
62:b0:60:8a:60:d0:68:64:f1:71:b5:19:e5:cd:71:
de:b8:42:7a:84:88:df:04:9d:b2:72:87:c9:ec:a4:
08:05:80:1b:b5:a9:98:c3:69:1f:a9:c3:bf:30:e6:
ff:c2:ed:b7:d7:ab:e4:94:24:8f:f5:01:49:91:4a:
f4:5c:9d:ae:f8:30:65:ed:ed:df:4b:e9:a7:66:ed:
87:b0:9f:66:39:66:2c:24:53:73:ae:35:e3:62:88:
f0:37:17:75:9f:9f:b2:43:97:2e:20:f3:a4:c9:aa:
7b:66:95:2b:a0:76:d2:85:16:8a:16:5d:86:7e:5a:
88:18:b5:39:5b:08:ca:f8:c3:a4:18:9b:17:78:6c:
c3:26:4d:01:24:93:7c:ab:af:91:e1:dc:58:94:1b:
1e:15:11:f8:a6:04:1f:23:43:ac:4f:c9:19:ce:44:
bb:d2:60:98:58:e6:d6:d9:db:e2:fb:fd:be:ea:2a:
a8:11:e6:07:3e:a5:7c:60:bf:72:13:52:84:25:25:
0e:27:59:5d:a5:17:a8:0e:47:3f:2e:a7:81:c3:64:
8c:f7:bd:70:a1:09:ac:cc:51:52:ef:7b:23:63:3d:
cb:7b:b7:53:f6:11:5c:b7:fa:d2:5a:05:36:d4:b5:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D2:C1:A5:D6:FF:FC:AE:32:2C:7B:89:FC:82:4B:ED:AC:0F:B2:50
X509v3 Authority Key Identifier:
keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:5e:09:f8:4e:8a:15:37:12:70:29:a8:64:43:6c:cd:cb:93:
24:e0:f7:24:f4:66:b7:49:b4:97:a2:3d:1c:db:fa:c2:92:07:
e9:79:d0:7f:d9:80:dd:85:6a:d7:47:12:dd:b8:95:64:4c:d4:
da:80:b1:e7:b4:89:7f:35:66:64:ca:a1:63:99:56:f7:e1:14:
25:af:e9:8d:7d:ea:b3:99:15:84:2c:ad:88:eb:38:6b:e4:f1:
4a:73:92:5a:63:b9:2b:2e:ea:26:67:9a:48:2f:b6:46:f7:32:
f0:90:d1:2d:c0:e6:57:f6:49:e5:94:f6:c7:70:2a:05:36:e3:
79:27:3b:6c:09:1c:c2:4e:84:fd:e5:b3:2d:a9:c3:e0:b0:74:
6c:78:af:99:30:c2:35:6f:8c:da:f2:37:38:2e:10:e8:58:27:
3c:90:25:84:fa:d7:ef:5c:e6:5b:54:77:f9:f8:14:89:8b:3f:
61:51:31:7f:12:be:49:dd:9f:7c:d0:11:49:d0:ba:d3:59:d9:
df:7a:7c:b8:99:80:fb:53:d4:5d:17:d5:6e:f0:f1:64:ef:f4:
88:c0:78:b3:91:8b:21:7b:45:0c:21:94:a1:2f:bb:1a:41:4a:
4c:54:f6:8a:0f:57:a8:35:a8:78:4b:03:fc:2e:19:3d:52:57:
32:f5:5d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:27 2026 by rpki-client