
$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json)
Hash identifier: FLNneWc/t/QnK+8j0ndAfbNvbV7S+oXgnqYm4BFMx6Q=
Subject key identifier: FD:93:69:13:B2:BF:EC:A2:71:A8:CD:58:44:63:49:F5:80:4C:A6:3F
Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE
Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE
Certificate serial: 354E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
Manifest number: 3535
Signing time: Sat 28 Feb 2026 15:12:50 +0000
Manifest this update: Sat 28 Feb 2026 15:12:49 +0000
Manifest next update: Sat 07 Mar 2026 15:12:49 +0000
Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: 4y3zhkmqKTYIDuQmReagEM9wdQfPQ16Pk42V8MGarVA=)
2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: aOytWg2FwJS1l+7KIT64oIXAEUwTgWxFpLSXtg4UFSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl
rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13646 (0x354e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB, serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE
Validity
Not Before: Feb 28 15:12:49 2026 GMT
Not After : Mar 7 15:12:49 2026 GMT
Subject: CN=69a305f2-620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:8d:c7:e0:08:98:2b:35:be:04:be:00:12:
c9:a3:65:c9:b0:b7:c4:82:23:d7:94:1d:3b:a3:c0:
53:22:f6:73:30:c8:33:ef:1c:2c:29:40:5d:9b:e1:
c5:9b:9d:8c:af:eb:f3:ff:76:e7:96:6c:b2:f4:d5:
97:ec:5b:4c:90:27:c4:4e:6c:b8:35:e5:aa:ef:3c:
0b:79:87:aa:fd:35:0d:2e:ba:73:c4:d8:63:7e:9a:
02:ff:cc:60:fb:82:0b:92:35:37:4b:c7:ef:7d:9b:
69:7f:b8:d4:14:b3:e6:5a:9f:c0:b4:6c:e2:fa:34:
54:a1:0c:97:f6:28:84:b3:e0:09:51:0b:6c:42:bf:
e7:39:c9:99:26:84:95:08:f8:88:72:ec:b8:59:08:
34:65:be:3a:f1:91:e8:a1:b4:b9:23:93:7d:f1:f3:
55:fa:1e:52:7e:71:86:85:95:79:56:61:4b:70:9c:
0a:96:43:37:48:81:14:78:b6:a5:06:f9:a7:68:58:
11:dd:a0:c7:40:fc:ed:97:87:42:cf:e7:57:45:3a:
ee:a3:fc:bd:3e:ac:e4:62:83:3d:cc:fc:f8:84:1f:
ae:34:67:f8:db:bd:fc:c6:67:45:ec:71:ff:ce:0e:
21:fb:aa:1d:00:f1:64:50:56:78:62:c6:1f:17:20:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:93:69:13:B2:BF:EC:A2:71:A8:CD:58:44:63:49:F5:80:4C:A6:3F
X509v3 Authority Key Identifier:
keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:91:6d:89:bb:28:64:67:de:96:74:28:2f:ab:67:da:cb:bb:
94:f7:c2:8e:ee:8e:79:9b:13:a9:b2:7a:3a:af:13:41:a6:a4:
61:37:82:f0:49:af:c2:99:fd:0f:e7:93:a5:f3:e4:f8:b7:a6:
8d:cc:78:9a:a8:24:77:c9:d7:4f:ed:51:15:20:20:51:61:d2:
33:74:d4:50:91:de:ee:aa:db:88:36:eb:e6:f2:b2:b1:a3:15:
98:f7:c8:74:0b:a6:37:82:2d:70:b3:1e:90:f8:be:26:e3:63:
e2:59:d6:50:28:12:cf:ce:18:38:79:bd:0f:36:4f:15:9b:18:
89:89:ca:45:13:89:97:8e:46:e4:e8:40:16:15:83:3a:5e:4e:
4e:1b:b0:d0:54:3b:5b:ec:a6:31:b7:7d:fe:57:e1:61:a1:f0:
70:4f:80:3a:77:d2:e4:ac:df:ed:e7:97:bc:f1:7e:63:1a:91:
8b:31:9f:5f:e9:4e:98:fb:3d:29:16:d7:56:70:05:e8:31:7c:
48:6f:43:db:c6:2f:49:b1:ef:3d:e1:c9:e9:63:36:3c:f4:f5:
8c:de:15:9f:c8:bc:ff:b8:b5:d7:24:a8:be:b5:f1:45:91:f5:
5e:a9:e4:51:a9:8d:81:6f:b8:90:55:51:11:17:d9:72:35:1f:
09:11:e7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:28 2026 by rpki-client