
$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier: Vez7CtgNgjAwwBND0JpdJc8O+6T2SLoYzgmpKHpu+9A=
Subject key identifier: 06:67:25:25:C5:6F:5D:CB:9C:DB:CF:A2:DA:9D:67:4C:32:B8:55:EF
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial: 1840
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number: 1803
Signing time: Thu 16 Apr 2026 16:29:48 +0000
Manifest this update: Thu 16 Apr 2026 16:29:48 +0000
Manifest next update: Thu 23 Apr 2026 16:29:48 +0000
Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: 57Mpwt9q1a2LkPi5bbTEIhgp7Uobz5NMjPAFKI9cshE=)
2: 047C0BCC373211F1887E264A90833773.roa (hash: LWhnCQp9VfJYhsJdhzflBR7RBHFtlmggsyH3Tj4cj0M=)
3: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: t9gfSRrRBhg5aKee6bLsa2HCvO/wXMYsjYUGDi3D7i0=)
4: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: n1u9iSyb9bdQc1QOK/WYlhLEbmOoYxOlffVDVXq1fW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6208 (0x1840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Validity
Not Before: Apr 16 16:29:48 2026 GMT
Not After : Apr 23 16:29:48 2026 GMT
Subject: CN=69e10e7c-4955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:fd:be:0d:c8:45:58:0d:4d:9e:aa:ce:f2:
ea:bf:29:09:f5:a6:ed:a8:72:ba:10:4b:f9:de:60:
f6:e0:bd:6d:ca:ac:a8:1b:f8:7d:7a:29:4c:ba:0e:
1d:9a:dd:f6:22:f5:c4:f7:3e:97:91:35:c3:64:46:
94:a2:74:2f:14:f5:0e:98:0a:a3:21:ba:41:13:de:
cb:1f:82:99:8a:94:88:7c:b0:14:ec:bc:fc:bf:08:
b6:28:de:11:0d:55:2b:d9:44:0e:6f:fe:7a:67:7f:
0b:d6:68:c7:9d:c8:27:ae:aa:03:d1:69:a6:91:f1:
e2:dc:80:ad:b5:35:bd:4b:e8:b2:c8:94:89:cc:66:
e8:d5:7b:1a:cd:a6:e5:df:b8:26:ad:25:be:70:37:
48:e9:d8:06:ad:ac:a3:e3:82:5e:de:b1:10:09:6f:
04:bd:ae:90:69:c0:83:80:c6:b4:71:17:cc:59:19:
53:eb:0b:90:a0:1a:f1:d7:66:64:9a:c2:17:86:12:
4c:cc:f8:60:a8:b5:0c:a1:d4:a1:9b:3a:d6:d7:4a:
8b:48:8e:a3:d6:f8:5e:11:79:4a:68:ec:e2:72:66:
b0:58:64:92:c6:f5:f0:2b:87:fd:e1:ee:e3:02:8e:
06:5b:0e:8a:93:17:65:c5:d4:5b:5c:59:70:37:65:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:67:25:25:C5:6F:5D:CB:9C:DB:CF:A2:DA:9D:67:4C:32:B8:55:EF
X509v3 Authority Key Identifier:
keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:a8:e4:7a:de:bc:8c:fc:4e:70:b9:1a:17:57:57:e0:52:b5:
c3:73:46:ae:64:03:32:27:35:32:15:71:a4:27:42:24:ad:61:
3c:1b:95:e4:3e:1f:83:b0:f9:27:3d:32:8b:05:d9:ff:96:e3:
69:2e:94:45:98:60:d5:01:6a:85:28:96:b0:45:5b:9a:29:c2:
3e:6c:93:05:4f:d8:95:d8:e2:52:4c:d0:ce:ef:08:24:08:5b:
f4:be:9b:fc:40:7e:99:2f:2c:fc:8c:c0:1b:7d:1e:b4:09:3e:
16:38:56:9b:29:09:85:9c:72:17:57:18:b2:a5:93:77:ab:fb:
1d:6c:62:03:84:61:b0:19:da:3f:9e:57:56:dd:9b:02:28:a1:
7f:3c:8e:bd:56:93:10:44:8b:62:b1:cb:99:03:39:2d:ac:e1:
c1:dd:73:98:0d:af:ea:e5:13:b5:8d:7a:53:d1:89:6b:31:27:
04:c2:7d:3b:d5:20:7e:0b:6d:4b:9b:33:2a:ba:af:a5:4a:be:
e2:de:76:53:2f:15:23:3d:89:6f:7b:6a:9c:08:1e:9a:21:5e:
c4:5f:b0:8b:03:72:bb:73:8f:2c:b4:f4:c6:59:99:03:78:3e:
b7:d7:f9:75:6b:0e:fb:6b:1b:75:30:0d:d0:14:bf:2b:ac:f5:
59:fd:8e:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4RTIxMTAvBgNVBAUTKEMxNDg1M0Q5QkQzRjc4RjY0ODBDNjMzNTIwNzY5NDNC
Qzc5QjlGQzIwHhcNMjYwNDE2MTYyOTQ4WhcNMjYwNDIzMTYyOTQ4WjAYMRYwFAYD
VQQDEw02OWUxMGU3Yy00OTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt0X9vg3IRVgNTZ6qzvLqvykJ9abtqHK6EEv53mD24L1tyqyoG/h9eilMug4d
mt32IvXE9z6XkTXDZEaUonQvFPUOmAqjIbpBE97LH4KZipSIfLAU7Lz8vwi2KN4R
DVUr2UQOb/56Z38L1mjHncgnrqoD0WmmkfHi3ICttTW9S+iyyJSJzGbo1Xsazabl
37gmrSW+cDdI6dgGrayj44Je3rEQCW8Eva6QacCDgMa0cRfMWRlT6wuQoBrx12Zk
msIXhhJMzPhgqLUModShmzrW10qLSI6j1vheEXlKaOzicmawWGSSxvXwK4f94e7j
Ao4GWw6KkxdlxdRbXFlwN2X+DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZnJSXF
b13LnNvPotqdZ0wyuFXvMB8GA1UdIwQYMBaAFMFIU9m9P3j2SAxjNSB2lDvHm5/C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhFMi80QzkwOEEyMkUw
QjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQWklER00xSUhhVU84ZWJu
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dVaFQyYjBfZVBaSURHTTFJSGFVTzhlYm44SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzhFMi80QzkwOEEyMkUwQjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQ
WklER00xSUhhVU84ZWJuOEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhqjket68jPxOcLkaF1dX4FK1w3NGrmQDMic1MhVxpCdCJK1hPBuV5D4fg7D5
Jz0yiwXZ/5bjaS6URZhg1QFqhSiWsEVbminCPmyTBU/YldjiUkzQzu8IJAhb9L6b
/EB+mS8s/IzAG30etAk+FjhWmykJhZxyF1cYsqWTd6v7HWxiA4RhsBnaP55XVt2b
AiihfzyOvVaTEESLYrHLmQM5Lazhwd1zmA2v6uUTtY16U9GJazEnBMJ9O9Ugfgtt
S5szKrqvpUq+4t52Uy8VIz2Jb3tqnAgemiFexF+wiwNyu3OPLLT0xlmZA3g+t9f5
dWsO+2sbdTAN0BS/K6z1Wf2Oow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:37 2026 by rpki-client