
$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
File: WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json)
Hash identifier: 1ON95xRZmeXpN04sV1nfOS3kANWhqL5r4CFg4PZnb+U=
Subject key identifier: 86:1E:6E:62:F6:01:A8:09:84:C1:DD:E8:76:BC:FF:93:A1:FD:D9:35
Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
Certificate issuer: /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Certificate serial: 3511
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
Manifest number: 3511
Signing time: Sat 28 Feb 2026 14:55:12 +0000
Manifest this update: Sat 28 Feb 2026 14:55:12 +0000
Manifest next update: Sat 07 Mar 2026 14:55:12 +0000
Files and hashes: 1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: dKM26+jodr6pqhCQtvNUmc9VPCcWyKgKMTbQmPeCepI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13585 (0x3511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Validity
Not Before: Feb 28 14:55:12 2026 GMT
Not After : Mar 7 14:55:12 2026 GMT
Subject: CN=69a301d0-4979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:1d:44:63:3e:0e:46:18:0d:bb:2c:b9:61:
0d:dc:6a:a0:94:84:8e:80:9e:7f:d7:58:54:a2:2b:
fb:3d:97:77:da:7f:c5:ab:cc:2f:ba:63:ea:3b:a8:
4e:f2:1b:8f:e0:85:8e:41:c0:ea:03:d9:16:b9:3c:
31:0f:22:a1:66:4b:9f:4c:a0:8c:34:68:74:5c:3a:
11:69:c0:c3:c5:5d:af:f5:de:f8:84:fe:19:db:88:
f9:2a:17:ec:bc:a0:66:72:4f:65:48:ce:f0:f8:f7:
46:da:57:7c:da:36:f4:6d:da:73:cd:89:7e:aa:bb:
51:92:d2:33:b1:aa:fa:23:ba:ff:30:bd:5a:5a:7b:
d4:78:97:90:d8:7c:84:b7:4b:68:ed:50:fd:70:36:
c8:4a:49:21:72:0f:8f:3f:a2:ef:42:d0:bb:0b:cb:
d1:fe:3d:6c:f2:e8:ef:76:8e:fd:06:ff:d7:33:ff:
cb:93:a4:17:1a:3e:ad:c6:41:ed:dc:86:72:04:e2:
19:5f:ad:99:99:9b:51:8d:92:6a:76:df:3a:99:6b:
45:3a:b5:7e:39:ab:05:32:14:4e:a2:6f:89:9e:a6:
b3:7f:35:22:71:c4:f3:68:77:da:52:ff:b9:c9:3b:
c4:b2:5c:18:75:8f:1e:cd:e3:d3:b7:56:a6:cb:d9:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1E:6E:62:F6:01:A8:09:84:C1:DD:E8:76:BC:FF:93:A1:FD:D9:35
X509v3 Authority Key Identifier:
keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ca:96:e9:c3:ea:c1:8d:e6:bf:9e:dd:68:7c:80:91:c5:ba:
ad:dd:e9:9a:ba:a3:23:87:0c:f9:c0:24:c6:2f:af:8c:f8:d5:
60:c9:32:34:4d:85:82:fc:96:66:8d:75:00:73:4b:01:50:36:
bb:a5:4d:ce:f0:40:fb:1a:61:c3:96:9f:df:70:d6:12:25:af:
d8:8a:24:9b:3a:95:4a:83:02:b6:15:7b:5f:94:ac:35:1c:8a:
b9:84:c7:03:37:d2:bb:c3:97:d9:ca:1f:47:57:01:6d:fb:db:
c6:29:86:dc:26:34:ab:f0:70:20:c1:ab:ac:45:6d:77:e8:7b:
4c:96:1a:0f:d4:92:9b:30:11:df:e2:af:12:58:b1:a9:71:21:
f6:6f:0b:8f:58:80:1c:47:b0:72:c1:75:e8:0f:a8:c3:ea:ea:
21:3d:0a:fd:e0:a2:e4:09:ad:54:a5:65:18:fb:94:57:77:13:
11:91:6a:2d:ae:22:2b:10:97:76:48:b9:a3:96:85:fe:c9:d2:
79:56:73:d7:91:27:69:19:18:43:92:77:e8:0e:83:61:60:e0:
8a:59:3c:9a:7f:46:b0:5b:75:3b:ae:15:ee:ef:b6:66:0c:32:
9c:6c:e6:8e:0f:22:e3:83:f9:8b:1f:01:34:f2:7b:18:60:ac:
ce:5f:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:54 2026 by rpki-client