
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
File: Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json)
Hash identifier: BBscizSYwzdkkbv7AtfAvGlOZk3JZZfQABHjgBwi1CM=
Subject key identifier: AB:00:D4:21:A1:4A:04:CC:AB:90:7F:75:D2:0F:75:17:B8:23:FA:AC
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Certificate issuer: /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial: 0745
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
Manifest number: 072E
Signing time: Tue 24 Mar 2026 21:32:29 +0000
Manifest this update: Tue 24 Mar 2026 21:32:29 +0000
Manifest next update: Tue 31 Mar 2026 21:32:29 +0000
Files and hashes: 1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: 5hf+yAkKBNb2QRZq32Q/2LgY9vcp1sHtExvnn+ZF0XE=)
2: C5058712A3B911EC9709462AC4F9AE02.roa (hash: TbGbT+LPow5rz8JGgfsHT1Q0vL5d/bm4eFUkOIio6DA=)
3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: cxuC5mt/lZwqNGffF4CA11kwoRK1UHDLlLVN+mB5XQU=)
4: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: 7rQsxODOe8S8wCpj2cJIytKVy/MVPp6W4O54/79yfuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1861 (0x745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Validity
Not Before: Mar 24 21:32:29 2026 GMT
Not After : Mar 31 21:32:29 2026 GMT
Subject: CN=69c302ed-24c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:c8:db:b4:a7:7d:b9:da:29:73:d8:e2:5c:
2d:b9:b5:71:84:41:e7:ef:a9:0e:09:e0:4e:f6:3a:
7a:86:11:f8:1f:fb:07:af:7f:a0:c1:1f:45:c8:94:
59:01:67:24:e4:1d:57:ed:d3:db:0e:b9:66:50:3f:
0c:d8:2a:01:f8:5d:56:da:90:32:cc:d5:8a:02:20:
7a:9f:86:e9:af:e2:1e:9b:43:9b:57:4d:7b:f9:51:
23:e5:a3:5e:c8:42:3e:56:65:3c:f0:db:4a:4c:c0:
f1:c0:da:2b:55:21:35:50:00:81:0d:d5:b9:dd:1a:
dc:c5:ec:4e:cc:dc:d5:56:95:60:0c:50:61:3e:cb:
fc:37:6a:0d:d5:e1:83:75:05:16:22:83:2c:5b:95:
fc:03:84:ae:bd:9d:55:83:a9:2b:88:c4:23:be:06:
38:74:9e:e2:9a:fc:69:8c:81:6a:c8:7b:3b:04:b1:
04:28:cc:c0:b5:f2:92:e5:00:c5:23:66:8e:f5:fb:
3a:1d:df:3f:f9:b8:aa:c1:1c:b2:81:fb:c7:05:a5:
af:4a:a6:f0:c8:c1:85:2e:eb:9d:71:53:6b:43:37:
f3:77:e8:06:11:a0:f4:b4:cf:1d:f0:87:80:49:51:
58:1a:ec:52:b9:7a:e1:95:4b:7d:99:f6:56:de:1a:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:00:D4:21:A1:4A:04:CC:AB:90:7F:75:D2:0F:75:17:B8:23:FA:AC
X509v3 Authority Key Identifier:
keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:72:7a:68:f5:40:31:62:79:f3:4c:53:55:99:6d:b6:09:ca:
80:18:4c:fd:4c:f9:d7:d8:36:b0:7a:82:3e:e5:72:39:1d:7a:
2d:55:3b:3b:30:6c:2d:52:f0:79:5e:ba:6c:58:4c:c0:74:2a:
de:2c:49:26:63:fe:72:3f:44:cb:14:ca:ec:35:b8:a7:61:62:
ab:a6:63:91:1f:88:58:14:2b:a6:7d:67:dd:fe:eb:d7:0c:03:
fd:26:c3:a9:55:7f:e8:c0:16:06:f3:6b:1e:a2:bf:70:36:86:
7c:b2:42:91:48:7f:b6:df:27:6a:9e:73:b4:76:bf:2a:ad:d1:
71:21:4b:b4:ba:80:6c:84:9e:ea:19:76:de:9c:ab:4d:7b:9a:
8d:f0:e5:9e:34:f0:a0:74:99:64:d2:02:d8:9c:1e:41:87:84:
a1:67:39:58:bc:47:68:5e:ea:d3:a4:a3:c7:a6:89:40:21:c2:
96:38:71:9c:ec:6c:86:e1:41:57:83:e0:8d:00:72:4c:da:ef:
af:61:ae:e8:75:17:02:4c:20:96:09:13:2e:98:a0:33:c5:28:
3d:6b:54:59:2a:a0:d6:57:25:ea:c3:d9:48:70:50:37:b8:b3:
e7:c8:91:be:3c:73:c8:ca:fe:b5:d8:2e:93:3b:ea:a3:86:b3:
90:e4:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:05 2026 by rpki-client