
$ rpki-client -vvf rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
File: wkxRvbArcTbA8lrxlbNwN5l7F-g.mft (raw, json)
Hash identifier: P8gLrykBGSnBZKlxgs7yLRyM+bEcLwcsbirZjciWYpA=
Subject key identifier: 8B:8C:CF:1A:44:27:C0:DF:3B:7F:FD:02:2D:73:37:FA:FB:35:81:36
Authority key identifier: C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8
Certificate issuer: /CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8
Certificate serial: 103C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
Manifest number: 1029
Signing time: Thu 16 Apr 2026 17:22:24 +0000
Manifest this update: Thu 16 Apr 2026 17:22:23 +0000
Manifest next update: Thu 23 Apr 2026 17:22:23 +0000
Files and hashes: 1: wkxRvbArcTbA8lrxlbNwN5l7F-g.crl (hash: LapDJBOXXCwT5Clvi1MONx2aozfoXIzVEdF5nZpaANE=)
2: D3378C20171D11EAAA15E818C4F9AE02.roa (hash: w6iMyuMBfPO7xrnEz0eJziDro4IN8ribezF+ecPYmqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl
rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4156 (0x103c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91816BD, serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8
Validity
Not Before: Apr 16 17:22:23 2026 GMT
Not After : Apr 23 17:22:23 2026 GMT
Subject: CN=69e11ad0-dd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:d2:ca:9f:01:ae:4c:f5:27:de:c8:1f:4a:
93:e5:e0:49:31:07:7b:1f:4b:8e:9f:c9:5f:d9:0e:
a6:7b:d9:33:f4:69:3d:f3:f2:28:49:e6:95:22:5f:
05:9e:03:20:0c:d2:d9:6c:4a:c5:05:03:76:1f:eb:
8f:36:4b:65:4c:0d:f5:d0:a0:0a:c2:d2:ea:d2:50:
fb:cb:d9:c9:db:73:df:bd:65:aa:65:3f:df:b3:16:
31:fc:3e:18:68:57:b5:00:52:49:59:76:ca:1b:48:
d4:d6:a9:7a:0d:4d:8a:ad:d1:e1:37:68:cc:3b:43:
98:3b:03:2b:71:c6:58:f4:59:5f:bd:cb:7d:18:e1:
49:61:fa:8c:75:46:70:47:c8:40:93:3c:45:6e:4e:
fd:ed:f8:55:b2:36:4d:a5:51:b9:6b:be:55:ae:fe:
a4:67:e7:95:d1:6a:5a:e2:df:73:1d:40:8c:a4:a4:
ad:3f:eb:1c:da:f1:de:04:df:b4:06:c7:f9:de:37:
e9:ff:6d:89:71:fc:54:e8:62:84:22:49:88:62:56:
f7:4b:94:34:dc:ec:a5:b6:81:d8:3c:d3:cb:00:bf:
ee:f0:c8:71:92:58:bb:e1:36:6f:27:a9:80:a5:92:
90:c0:73:54:97:0c:9f:1e:e3:68:83:16:ba:aa:27:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8C:CF:1A:44:27:C0:DF:3B:7F:FD:02:2D:73:37:FA:FB:35:81:36
X509v3 Authority Key Identifier:
keyid:C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:b6:e8:fb:31:ef:49:77:ec:be:67:6c:f8:bc:fb:79:cc:de:
b4:39:d4:3c:91:b9:71:58:02:d4:0d:7d:67:79:c3:90:83:a1:
57:09:fb:c2:15:72:88:3f:1d:1c:5f:56:c0:aa:41:ca:05:c5:
c8:fd:3b:2b:19:ab:c3:a6:4d:d9:84:ef:fb:c6:db:36:cf:93:
01:67:62:b3:2f:f5:f9:5f:96:10:5e:cf:d2:64:40:74:b1:21:
88:b2:9c:42:31:7a:be:09:35:db:ab:d8:3e:f8:ac:bb:97:09:
10:c8:0e:50:0d:ae:12:6d:f6:34:00:69:44:38:60:fb:7f:2a:
fa:39:04:92:c3:9b:ba:dd:04:b1:2a:4b:a0:11:7b:e5:66:da:
ef:b9:3e:da:a9:e7:50:44:19:1c:60:2a:2c:c2:e6:09:f1:a4:
b2:04:65:86:bf:fa:58:ee:6f:d1:b3:db:d9:44:cc:61:f7:dd:
15:06:73:18:f0:71:7e:27:cf:a9:7a:57:6a:bf:66:47:98:71:
06:40:0d:c2:b7:d4:28:7b:e7:22:78:a3:63:85:4b:77:36:72:
8e:25:ef:5a:15:32:83:dd:4b:f9:dc:62:57:54:19:6a:4e:f4:
ac:1f:f3:36:4e:c3:cf:cf:e1:1f:6a:6d:99:14:f0:58:c4:8a:
d8:4f:57:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:51 2026 by rpki-client