
$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
File: W9l8Mex4xvFX13LBu1drgCSCtyg.mft (raw, json)
Hash identifier: bnWXjyEWMQ2L/uxioFtbb2tTEabsi/j1ZMBtl4pDU04=
Subject key identifier: 46:F3:D0:98:27:60:C1:11:1F:75:9F:7C:FC:76:CA:BC:79:40:1A:64
Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28
Certificate issuer: /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
Certificate serial: 0CE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
Manifest number: 0CD9
Signing time: Mon 02 Mar 2026 02:21:53 +0000
Manifest this update: Mon 02 Mar 2026 02:21:49 +0000
Manifest next update: Mon 09 Mar 2026 02:21:49 +0000
Files and hashes: 1: W9l8Mex4xvFX13LBu1drgCSCtyg.crl (hash: rj9Ol8tg+GoYaRxHjyZHpfi7MMtMmS50p0eVkWNtmuw=)
2: 753703FE045C11EAB8BF0932C4F9AE02.roa (hash: q50wzpuKp2/XOfQFTtCqUx6pSJaLEnYn8T7ElxcuFQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl
rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3302 (0xce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728
Validity
Not Before: Mar 2 02:21:49 2026 GMT
Not After : Mar 9 02:21:49 2026 GMT
Subject: CN=69a4f440-727e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:ec:fa:5f:de:32:48:dd:23:30:da:c8:1e:
be:0e:6b:35:e0:83:a9:8e:83:54:11:f0:59:e2:63:
8c:ec:8c:3b:fe:54:0f:df:1e:50:a0:59:98:af:cd:
cf:64:57:56:6e:3b:1f:b1:fc:06:11:54:1c:e1:1c:
15:74:79:18:57:a2:e4:9a:61:32:a6:1b:26:c8:cb:
24:ea:30:9b:e7:25:52:ae:56:c5:78:b4:fa:48:51:
f3:60:8d:51:46:07:fe:c0:3a:d3:4a:7d:09:c7:c7:
c4:7e:4f:c5:e7:1e:79:00:da:d9:80:a5:6f:46:1e:
73:e9:9a:3c:ee:ec:88:44:d1:12:8b:fe:71:21:8a:
93:58:17:32:be:83:54:72:c2:04:5a:c5:19:82:61:
42:b8:5e:13:df:e3:2a:69:ee:05:6d:76:4f:8a:23:
49:74:b4:be:28:7c:56:e0:df:77:89:80:a7:2c:03:
5a:c7:a9:b5:d7:ea:34:48:fd:3d:16:f6:35:f8:7f:
72:ed:d5:af:92:db:0c:3d:d8:51:57:ce:6f:27:a4:
e4:d4:82:14:bf:26:3d:5f:b6:bd:d5:e2:30:6f:fe:
94:b9:13:d5:e1:52:b9:b1:a9:24:88:51:b1:38:93:
ce:80:a4:03:e5:0b:64:29:cd:27:c3:1d:43:93:13:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F3:D0:98:27:60:C1:11:1F:75:9F:7C:FC:76:CA:BC:79:40:1A:64
X509v3 Authority Key Identifier:
keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:4e:73:f1:f6:4d:d6:91:23:4b:00:ed:9a:30:a0:0f:de:59:
cd:2a:8e:57:fd:eb:f5:e4:ab:03:46:ce:21:0b:f0:18:83:0d:
57:f4:3e:e8:42:57:2d:20:1d:cd:aa:98:8f:3c:e2:fb:e3:0c:
fa:07:14:61:24:d7:3c:f5:d1:a2:6f:2e:34:10:58:10:25:1d:
34:ff:0c:20:e1:e1:2a:87:19:3a:80:18:b6:55:03:82:30:3e:
c6:d4:05:3a:38:d7:72:83:15:71:ff:9c:53:8c:20:a9:21:d6:
f6:97:35:82:34:ac:b7:29:7c:9b:11:a3:47:78:0f:92:46:07:
99:2c:ff:50:8a:e0:65:7e:d1:db:dd:ca:c9:31:df:13:54:98:
00:4f:16:99:d1:27:50:c7:da:65:35:03:18:db:c4:54:cf:f1:
17:3e:c4:a0:ec:77:dd:2f:72:c9:20:0a:0a:a1:4e:58:6e:db:
d7:c8:c9:9a:a7:d2:8f:85:41:82:27:2f:5a:6a:d6:77:e9:e6:
ac:4c:ae:2a:c2:e5:e8:96:78:1e:a3:ec:11:8d:90:1d:56:61:
c1:91:1e:75:58:75:1f:96:80:88:28:69:44:91:61:3c:18:6d:
d6:5c:89:5c:75:ad:3d:3a:f1:02:fe:c5:e1:74:39:e2:3e:70:
79:15:fa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:48 2026 by rpki-client