
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft
File: WOkI0McaSfSCp8fZVSozVZyuJkM.mft (raw, json)
Hash identifier: 7fQ1CWl/kMfTksO8XuKWYsNFesBicVr2ZVSFAef680Y=
Subject key identifier: C8:5F:95:8E:FC:63:11:84:FB:41:ED:72:BC:34:CC:C9:8C:47:FF:E6
Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43
Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643
Certificate serial: 0679
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft
Manifest number: 066A
Signing time: Tue 12 May 2026 22:42:16 +0000
Manifest this update: Tue 12 May 2026 22:42:15 +0000
Manifest next update: Tue 19 May 2026 22:42:15 +0000
Files and hashes: 1: WOkI0McaSfSCp8fZVSozVZyuJkM.crl (hash: b8X9SxRfa3UEdFBPfZ1u2TXRgzahX3p79Ct34MDgPvQ=)
2: F189CB86C81D11EBA4C0E321C4F9AE02.roa (hash: Vhxsq5oGsGnJdnu9k72YuMt3LNz1ibjMmsc3t9zhgQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl
rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643
Validity
Not Before: May 12 22:42:15 2026 GMT
Not After : May 19 22:42:15 2026 GMT
Subject: CN=6a03acc8-6dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:0a:f9:55:4a:e9:06:55:29:d0:70:7a:5e:
d2:02:5a:f4:fd:e0:08:a4:1d:cc:82:df:25:b0:ee:
7e:17:40:c0:d4:80:d9:07:4d:12:85:23:a5:3a:ed:
fc:67:3f:ac:dd:40:99:b6:c0:37:ac:3a:cf:c5:4b:
b9:a8:a8:e2:47:fe:43:7e:b3:da:a7:dd:2a:c0:6e:
d1:aa:b3:50:b4:f9:a2:66:73:81:06:29:24:75:a8:
39:a2:16:b2:0f:33:6b:07:04:c0:20:df:ee:6c:96:
6f:51:38:2c:8c:c3:8c:cb:0c:b1:c1:c6:76:75:e7:
4f:72:5f:e3:83:ce:32:a2:98:1f:16:d5:84:d8:07:
87:9d:07:f1:23:ea:f2:a4:2e:33:30:c5:64:d5:e5:
8b:df:42:7c:da:32:17:d9:78:2c:df:88:6a:ae:b4:
18:45:b8:39:86:3a:bb:6e:95:98:a7:42:ad:5f:05:
dc:a4:d6:e6:b7:4f:f0:93:e9:27:e5:c8:60:4e:d8:
2e:1a:3c:de:16:e9:bc:d3:71:82:30:db:b7:ed:f8:
e4:ca:66:7a:2c:67:24:12:1d:61:58:57:8a:38:02:
99:54:77:31:cd:9b:56:4b:ba:48:e9:70:70:54:00:
50:0d:af:88:4b:8e:f6:e4:b4:2b:de:cb:3e:24:a1:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5F:95:8E:FC:63:11:84:FB:41:ED:72:BC:34:CC:C9:8C:47:FF:E6
X509v3 Authority Key Identifier:
keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:91:1c:bc:9b:05:f2:8c:a2:04:53:41:2e:d9:ef:5a:be:bb:
31:fa:98:f4:02:a3:42:2b:48:ed:5f:0c:2a:13:9e:6a:a2:ae:
68:0a:2e:71:75:63:7b:9f:43:ec:e7:45:01:83:75:60:25:ab:
b4:75:e5:70:1a:2e:fc:0a:22:72:4c:3b:9f:20:6b:9c:d4:f4:
30:be:3b:c4:0c:4d:e9:8d:9a:71:32:38:d0:22:d2:e6:37:30:
b9:85:d8:b3:a9:bb:ad:0d:b9:6a:3a:40:af:9f:54:e2:a5:80:
5b:d6:75:95:e1:84:cb:f4:12:54:d8:f1:5d:65:92:de:84:b8:
bd:22:78:a0:4f:f1:ef:2a:6b:a0:d7:86:3f:ea:5c:93:a1:cd:
23:9a:bf:05:e1:34:d4:c6:68:61:bb:fb:9d:a5:31:02:59:76:
03:36:a0:58:e6:30:07:bb:ab:7b:3a:5e:a5:9e:47:6c:c6:22:
d1:b6:30:a4:56:87:6a:48:7b:2d:b9:98:53:a5:c0:09:64:40:
3c:70:6a:6a:97:5a:a4:1c:d9:14:e9:b6:21:ee:87:d9:fb:f6:
88:f0:b9:23:c7:b3:a4:b7:85:a9:70:6b:ed:59:e1:80:42:21:
86:92:3e:85:66:a0:85:05:79:0b:2c:2c:16:df:e9:e6:f7:dc:
d1:b1:f8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:32:45 2026 by rpki-client