
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
File: WU96C6m9HBOGhHzoljlj_k5xY2w.mft (raw, json)
Hash identifier: s4B+dOXxBnZAcpYgcuRp9Ppl7Zawb8iXQQk8ltjzlaM=
Subject key identifier: A8:91:7B:A4:34:76:A6:6C:55:8A:C3:2A:D5:40:95:05:99:A5:C8:93
Authority key identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C
Certificate issuer: /CN=A91FFEDB/serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C
Certificate serial: 02A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
Manifest number: 029F
Signing time: Wed 13 May 2026 01:41:39 +0000
Manifest this update: Wed 13 May 2026 01:41:38 +0000
Manifest next update: Wed 20 May 2026 01:41:38 +0000
Files and hashes: 1: WU96C6m9HBOGhHzoljlj_k5xY2w.crl (hash: kDTjpeMrnxRgXdzge9MKckQfNwQQe4gFUtqhabxrSfk=)
2: 3CE5C23A550611ED96C8F350C4F9AE02.roa (hash: Q0Na7uz+8/SY8dENTuHd10OmIdY+SANtmNHmLdr0v6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl
rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFEDB, serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C
Validity
Not Before: May 13 01:41:38 2026 GMT
Not After : May 20 01:41:38 2026 GMT
Subject: CN=6a03d6d3-d4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8b:3e:24:1d:b9:72:15:74:d3:93:07:d1:2d:
78:2f:9e:42:6c:04:86:a8:22:33:29:12:a9:75:91:
3e:d6:47:dc:a7:1e:47:e7:a5:db:fc:55:a4:ec:e0:
ca:44:18:c2:ca:1b:56:7a:d8:19:b2:a0:a0:2f:ac:
bf:6a:8c:e5:9a:4a:17:62:12:d2:27:3a:05:02:be:
b6:ac:6a:fe:3a:b6:48:a1:90:53:c6:54:c5:bc:dd:
f2:aa:09:55:f1:75:6a:1d:36:1d:06:80:f2:63:ba:
6f:99:73:2d:1e:5b:ab:67:b1:40:b8:49:71:e2:6b:
e9:67:b8:a2:eb:a0:b3:8d:5c:e5:e3:90:b5:ec:7f:
63:65:f9:84:77:8f:b1:dc:f3:f6:40:ea:be:f0:e7:
0f:1f:11:e2:68:21:af:98:f2:a4:1d:6c:21:f2:43:
e7:6f:79:1f:ae:5b:c4:15:fc:27:17:ee:23:d0:65:
d5:c1:80:64:2f:a9:05:6f:6e:08:bc:9b:5a:9d:8a:
95:7e:63:c1:09:32:3f:fb:72:f0:22:84:c8:01:00:
ea:4e:2d:50:84:5c:ea:83:6c:2d:0a:90:3b:6a:02:
b1:86:47:d8:d0:9e:66:c3:40:97:13:c6:9a:d7:00:
2d:4e:ea:3c:5e:7e:71:84:1f:9c:31:63:03:3a:ae:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:91:7B:A4:34:76:A6:6C:55:8A:C3:2A:D5:40:95:05:99:A5:C8:93
X509v3 Authority Key Identifier:
keyid:59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1f:07:72:f0:e7:77:dc:c0:ec:f3:26:47:34:df:c3:d6:0d:
da:c2:d2:6c:7a:8d:8f:9d:4a:0b:1a:1b:9f:44:2c:ff:01:56:
b7:42:b3:ee:6b:06:26:a0:cc:36:a3:18:21:3f:bc:93:f8:bc:
e5:c7:cd:ec:62:a1:ec:ac:90:b1:14:79:3d:72:ac:87:75:0d:
60:e1:a0:29:48:50:31:e3:2e:b4:96:6b:ce:7a:ab:95:c1:4f:
38:4d:f0:cd:f0:8a:67:8b:a7:73:ad:a5:50:d2:9d:8e:28:eb:
11:f3:c4:f6:0c:9a:70:8f:6d:bc:b6:77:0c:a6:dd:73:fe:fd:
20:25:d3:72:8f:1d:43:c5:0d:4b:59:1c:58:84:42:d4:7b:b6:
fd:c4:cf:6a:3c:f9:64:3b:8f:9b:84:3e:21:7f:cf:a7:cb:d7:
2f:57:cc:4b:61:6b:75:f2:98:31:66:d6:f6:d4:84:0a:a7:e7:
e2:3d:3c:23:21:32:dc:42:0d:90:88:4c:e9:36:e0:4c:b8:58:
10:00:60:0c:bb:04:85:0e:32:c4:42:61:cc:07:10:21:83:dd:
e5:6c:03:0f:fe:bf:1c:7e:6b:20:16:3f:72:d9:e2:04:fc:32:
7e:27:9e:82:d8:0a:0e:ab:5b:3e:e1:c9:1b:8e:ae:55:a2:65:
22:7f:5d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:46 2026 by rpki-client