
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
File: wG_wBd4dXvE7qPDCYOljA0paIso.mft (raw, json)
Hash identifier: mn+IlVhKVdpNqBYTOMsni+p7zXghGVFr7hZg7BWtvmg=
Subject key identifier: B8:0F:6F:EF:5B:81:C7:0C:68:9B:BC:05:31:56:F8:60:D8:F0:EC:C6
Authority key identifier: C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA
Certificate issuer: /CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
Manifest number: 023A
Signing time: Fri 17 Apr 2026 02:18:05 +0000
Manifest this update: Fri 17 Apr 2026 02:18:05 +0000
Manifest next update: Fri 24 Apr 2026 02:18:05 +0000
Files and hashes: 1: wG_wBd4dXvE7qPDCYOljA0paIso.crl (hash: svTbRGi3iK7Q3NZCnFVJHcmYecArqIQTVXVaHhsHxjA=)
2: 0D53ED80D2BA11ED8E06CC13C4F9AE02.roa (hash: inrK8OqEEdjI+824HmaDT3XyzEScsrEG2Pp9/A3OtMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl
rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0C5F, serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA
Validity
Not Before: Apr 17 02:18:05 2026 GMT
Not After : Apr 24 02:18:05 2026 GMT
Subject: CN=69e1985d-a2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:de:c6:d7:34:05:50:46:46:4d:98:06:b6:
6b:be:58:0f:38:32:73:c8:3a:9d:74:ca:a9:65:30:
5f:7f:e1:a9:3a:96:ad:ca:f2:15:d9:df:69:b6:45:
db:09:9a:15:43:29:76:c6:9c:ad:87:be:ef:0f:b9:
c8:91:99:35:29:8e:ed:58:7b:8b:be:e3:ec:0a:fb:
0d:61:84:5e:08:54:64:cb:8d:5e:b1:ae:99:d4:7f:
67:df:ac:7e:3f:25:b5:ff:3c:e8:49:ad:01:13:b6:
25:ac:ea:b3:37:7f:f2:86:95:fe:01:1f:da:52:1c:
df:ab:d2:5b:54:bd:8a:cd:95:5c:1f:45:0a:45:bf:
f7:05:42:a4:a9:cc:dd:6e:1c:7f:07:17:a0:e5:d5:
6c:c4:a0:14:d5:09:5f:1f:e1:12:b5:66:64:f5:67:
19:86:3d:6e:e7:97:15:3f:94:4a:ff:10:9e:85:5b:
d7:5a:92:6a:7f:14:b5:3d:cf:eb:60:40:9c:e6:ef:
f7:74:41:bf:fe:f6:0f:77:db:d5:02:d9:c2:3c:70:
ef:9f:eb:08:0b:f4:49:13:95:4a:c4:c4:b8:a4:ff:
dd:33:15:b3:4d:0c:34:a7:2d:1d:bf:80:24:23:94:
6f:de:37:cb:4a:f2:88:9e:47:aa:df:81:21:40:ba:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:6F:EF:5B:81:C7:0C:68:9B:BC:05:31:56:F8:60:D8:F0:EC:C6
X509v3 Authority Key Identifier:
keyid:C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:43:2f:94:c9:65:58:5e:31:c5:6e:76:b0:15:b3:fa:16:2f:
06:b2:00:98:64:7c:31:06:c1:7c:6e:6e:bb:11:eb:e7:c2:8e:
ee:c9:8a:c9:b7:c4:9f:b0:2c:8f:40:5c:48:e1:35:af:6d:55:
70:90:14:18:bc:44:52:01:16:e9:2e:8c:29:d3:28:99:52:4d:
bc:e1:3c:12:de:d8:36:76:a8:ee:52:34:36:dc:9d:e8:c2:60:
d2:3d:fd:c2:cb:b2:b1:59:74:44:c8:ee:a6:d3:a6:b8:07:ac:
e3:04:33:a3:15:8a:40:ab:4f:c7:ea:24:e6:9a:b3:ac:c1:76:
bc:e1:22:74:dd:ab:8f:35:04:8d:22:b8:9b:57:31:f0:28:6c:
22:06:00:de:b9:44:ae:63:b6:ed:43:10:58:f3:5c:cf:17:86:
2b:6b:6e:56:07:6b:49:1b:8d:f2:d7:bc:d1:a3:54:cc:2e:15:
18:3a:a8:7d:ed:d3:57:79:5a:2f:e4:79:4a:13:19:e6:a4:b4:
21:bc:3e:0c:06:eb:67:95:fd:ce:08:c4:bd:03:35:d9:32:6a:
6c:b9:6d:7d:d3:46:15:20:65:38:03:20:cc:27:23:9b:cb:b4:
c7:2a:89:3e:59:1b:cf:d9:40:e6:b2:da:2a:12:f9:b6:e4:27:
f8:96:fa:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBDNUYxMTAvBgNVBAUTKEMwNkZGMDA1REUxRDVFRjEzQkE4RjBDMjYwRTk2MzAz
NEE1QTIyQ0EwHhcNMjYwNDE3MDIxODA1WhcNMjYwNDI0MDIxODA1WjAYMRYwFAYD
VQQDEw02OWUxOTg1ZC1hMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtOHextc0BVBGRk2YBrZrvlgPODJzyDqddMqpZTBff+GpOpatyvIV2d9ptkXb
CZoVQyl2xpyth77vD7nIkZk1KY7tWHuLvuPsCvsNYYReCFRky41esa6Z1H9n36x+
PyW1/zzoSa0BE7YlrOqzN3/yhpX+AR/aUhzfq9JbVL2KzZVcH0UKRb/3BUKkqczd
bhx/Bxeg5dVsxKAU1QlfH+EStWZk9WcZhj1u55cVP5RK/xCehVvXWpJqfxS1Pc/r
YECc5u/3dEG//vYPd9vVAtnCPHDvn+sIC/RJE5VKxMS4pP/dMxWzTQw0py0dv4Ak
I5Rv3jfLSvKInkeq34EhQLqvZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLgPb+9b
gccMaJu8BTFW+GDY8OzGMB8GA1UdIwQYMBaAFMBv8AXeHV7xO6jwwmDpYwNKWiLK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1Ri9GNzQ1NUFBQUQy
QjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2RTdxUERDWU9sakEwcGFJ
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dHX3dCZDRkWHZFN3FQRENZT2xqQTBwYUlzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEM1Ri9GNzQ1NUFBQUQyQjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2
RTdxUERDWU9sakEwcGFJc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAREMvlMllWF4xxW52sBWz+hYvBrIAmGR8MQbBfG5uuxHr58KO7smKybfEn7As
j0BcSOE1r21VcJAUGLxEUgEW6S6MKdMomVJNvOE8Et7YNnao7lI0Ntyd6MJg0j39
wsuysVl0RMjuptOmuAes4wQzoxWKQKtPx+ok5pqzrMF2vOEidN2rjzUEjSK4m1cx
8ChsIgYA3rlErmO27UMQWPNczxeGK2tuVgdrSRuN8te80aNUzC4VGDqofe3TV3la
L+R5ShMZ5qS0Ibw+DAbrZ5X9zgjEvQM12TJqbLltfdNGFSBlOAMgzCcjm8u0xyqJ
Plkbz9lA5rLaKhL5tuQn+Jb60g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:31 2026 by rpki-client