
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
File: WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json)
Hash identifier: S6HgyOPA6Au92yXfXicyWGXuYpw7oZGX2k17Uca4+HU=
Subject key identifier: 65:8A:D0:27:05:61:0C:CE:E6:9A:A2:21:20:87:8F:4F:CD:DF:75:6F
Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76
Certificate issuer: /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
Certificate serial: 024B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
Manifest number: 0247
Signing time: Sun 01 Mar 2026 03:07:38 +0000
Manifest this update: Sun 01 Mar 2026 03:07:37 +0000
Manifest next update: Sun 08 Mar 2026 03:07:37 +0000
Files and hashes: 1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: mtRYyW5WN5PFDFo2sIOC8CSJ/6HBuS5wO7OMw6UQ9AM=)
2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: nCaMshaYzARucZnqTuabnwfTPZAkwjDf8nbA20H9DqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl
rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 587 (0x24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275A6, serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
Validity
Not Before: Mar 1 03:07:37 2026 GMT
Not After : Mar 8 03:07:37 2026 GMT
Subject: CN=69a3ad7a-9c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3f:8a:07:60:dd:4e:a5:d0:e7:1d:88:d8:72:
32:ce:b0:0b:c9:c2:fc:fe:6e:bc:f3:b7:e2:2d:8c:
09:5a:80:29:7c:69:c3:04:a7:77:ed:31:d9:ef:da:
26:fe:54:2a:d2:c9:f5:e6:5a:84:20:06:7d:05:69:
cc:e3:f7:0e:cd:26:d4:b2:ce:26:0e:19:53:92:75:
62:1c:7a:d1:6c:7e:e2:46:ed:a5:7d:1b:cf:d2:38:
b4:1d:b1:5e:fb:a2:e6:ec:30:ee:fe:5a:39:45:f6:
a0:4c:7f:c1:4a:59:a1:32:e2:d4:cb:23:c2:97:70:
6b:28:0b:d0:1f:cc:40:90:26:64:7b:8f:52:30:d7:
17:23:af:80:b2:8d:97:96:80:04:51:4f:0d:1e:73:
28:62:c5:e7:2c:45:0a:f7:ab:4a:25:48:0b:66:db:
5c:a7:dd:a4:39:98:7a:f2:7d:c8:97:83:76:5f:1b:
60:fc:7b:41:19:ca:4e:41:c6:ef:af:83:34:07:4a:
3f:02:e8:a3:af:39:85:2f:f2:b7:37:d0:8b:be:b1:
56:ea:30:df:80:ff:44:51:72:8f:e4:2d:18:d6:a9:
2d:26:94:e4:10:56:9a:53:08:41:bd:bd:7a:63:80:
96:c1:78:5d:10:8e:58:0c:7d:38:fe:db:5d:e4:b9:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8A:D0:27:05:61:0C:CE:E6:9A:A2:21:20:87:8F:4F:CD:DF:75:6F
X509v3 Authority Key Identifier:
keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:53:14:99:e2:a7:cf:76:cb:f1:a4:3b:3d:d5:94:d4:7e:3c:
86:76:3e:24:b2:85:c9:6a:36:1c:91:67:55:78:39:80:ac:cf:
47:dd:2a:34:f4:f2:41:60:89:8e:51:c3:95:f0:6f:bf:c7:6b:
de:5e:62:08:2c:b7:6e:b5:58:eb:bd:da:71:9a:53:3e:ba:d7:
7b:bc:21:4b:af:96:a3:ae:9d:2d:08:f4:d8:65:84:18:e0:78:
37:8f:55:92:5c:cc:dd:6d:e1:7a:32:cd:42:aa:38:4c:54:73:
6e:dc:ff:53:05:3e:b4:2a:17:ed:21:a8:40:84:55:0f:52:df:
7b:f0:1f:59:71:85:9a:c3:2c:94:bc:96:2f:c9:75:4b:83:c2:
b1:51:9e:7e:33:d5:89:d1:2f:04:7f:c0:76:80:c5:cb:00:1c:
32:5c:5e:26:28:7b:75:07:d5:32:29:41:b4:f8:4d:ac:d9:95:
67:cb:cd:44:2c:c5:76:32:92:84:bc:96:0f:12:af:de:57:f3:
3b:dc:f3:14:7a:59:8b:66:12:06:c7:a7:ed:41:5a:59:7c:e3:
53:67:f0:97:2b:28:a5:81:ac:48:7c:1d:ac:01:19:3e:dd:10:
2a:2e:a7:b7:bd:5f:d3:c1:a5:cb:6f:8f:aa:fb:7e:12:4c:04:
89:b2:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:45 2026 by rpki-client