
$ rpki-client -vvf rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
File: WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft (raw, json)
Hash identifier: ypuCUSkGY02AUcv/q1UICCrTMTZ/8/WNcB25e8/qhGM=
Subject key identifier: F9:48:2D:F8:C7:F8:F1:CD:D4:51:DC:CC:36:73:6F:27:37:3E:76:BF
Authority key identifier: 59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53
Certificate issuer: /CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53
Certificate serial: 0FEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
Manifest number: 0FE1
Signing time: Sat 28 Feb 2026 17:34:38 +0000
Manifest this update: Sat 28 Feb 2026 17:34:37 +0000
Manifest next update: Sat 07 Mar 2026 17:34:37 +0000
Files and hashes: 1: WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl (hash: THTKe2ZT5pC9l1gHNtFpLy8TK05BGAWl3t0qNrhOiAo=)
2: 16FA72386A4E11E992F4832FC4F9AE02.roa (hash: JDJx+bW699vTjkG4SZTOilca+2ZG/Wo+x5hxTR1zUag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl
rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4074 (0xfea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91172C6, serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53
Validity
Not Before: Feb 28 17:34:37 2026 GMT
Not After : Mar 7 17:34:37 2026 GMT
Subject: CN=69a3272e-34bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:aa:a6:f8:0d:9d:1f:0c:71:73:03:76:38:
ff:09:73:a5:d4:32:43:c8:b3:ee:13:2b:cc:3b:d9:
c0:16:a5:61:7d:df:0c:73:bb:de:92:2c:f4:8b:f8:
65:ce:7d:be:34:c3:1c:9d:b8:2e:0b:4a:0d:76:03:
65:1e:2c:48:64:d2:c1:40:c4:13:7f:2c:64:0f:2a:
26:e0:41:8c:cd:d0:15:63:69:9d:d1:49:22:43:ad:
b2:d7:d2:1c:b3:85:11:07:22:f1:4b:d8:8e:04:7b:
cb:5f:00:d9:01:16:a7:38:ee:15:e7:14:89:ae:97:
f0:b7:97:ee:c8:56:87:7f:31:60:8c:25:99:c7:d6:
e8:d2:59:ab:a1:b3:c3:28:6c:bc:c8:9f:0a:ca:b6:
d0:52:e8:cd:47:d6:4b:ca:01:37:60:42:ee:87:fb:
67:85:b7:6d:68:fe:48:61:df:54:ac:93:86:a0:b5:
a5:9d:dd:e3:52:fc:b8:d4:04:1d:15:37:6b:9f:73:
ce:a2:72:e8:fc:59:0a:b4:d7:c8:a0:31:21:18:42:
61:31:67:fd:e5:b4:b0:3c:38:80:42:bc:8d:ee:bc:
ec:06:2f:1e:f6:2d:a7:55:96:3f:20:35:34:6a:50:
0e:8b:b3:3f:88:7b:7a:35:23:74:a2:aa:51:17:e7:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:48:2D:F8:C7:F8:F1:CD:D4:51:DC:CC:36:73:6F:27:37:3E:76:BF
X509v3 Authority Key Identifier:
keyid:59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:fe:27:7c:a0:49:19:2e:97:14:84:f3:e2:9d:9b:40:93:7f:
ed:e4:89:16:dc:1c:42:7e:d0:25:43:db:56:d6:e5:a1:71:7e:
6d:f1:22:8c:88:61:32:34:a9:f9:93:39:85:5a:60:28:aa:75:
6f:4f:e1:a4:9e:cb:05:ef:d3:3f:f6:0f:7e:6b:7c:3e:a9:8f:
2a:19:8b:0d:b6:5d:7a:5d:6b:ae:9a:07:c4:b5:b6:fb:2a:b3:
6d:73:de:8f:07:99:d8:4e:44:5f:97:40:01:66:82:b6:77:3f:
b7:4a:8b:3f:6b:e9:1e:ef:0d:27:30:ad:e7:b1:4a:1d:f7:b9:
af:f8:8a:2a:58:0f:06:dd:09:8c:16:1d:d9:a7:60:41:5e:ed:
e7:a7:3b:e3:a2:d4:1c:74:3f:e2:40:79:f4:3f:62:87:97:43:
0f:a8:87:25:a8:fb:49:05:2c:4b:8e:94:75:b3:47:cd:7c:a4:
54:1d:4b:8a:ff:f2:ec:54:f1:26:47:9e:f2:a4:cb:21:ed:67:
c7:6b:9d:c5:4e:25:49:f0:d2:96:47:53:19:f0:40:17:a5:a7:
d9:7a:76:c0:a3:31:75:61:c7:c6:0d:17:8b:be:eb:60:b0:0b:
31:fc:36:bf:46:08:38:3d:72:2e:4e:f8:a6:79:aa:ec:86:82:
ed:c9:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:15:42 2026 by rpki-client