
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
File: WdWIElpxZphzjR0enm2KaNdAmyc.mft (raw, json)
Hash identifier: 418veQjGTng6m3niw+LnnSo4FdoAJb8wiEPAUbl0nzI=
Subject key identifier: 58:33:74:B6:B2:E0:24:90:91:5B:AB:F4:DA:1E:F2:27:56:F5:B9:3F
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Certificate issuer: /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial: 021C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
Manifest number: 0202
Signing time: Sun 01 Mar 2026 04:09:06 +0000
Manifest this update: Sun 01 Mar 2026 04:09:06 +0000
Manifest next update: Sun 08 Mar 2026 04:09:06 +0000
Files and hashes: 1: WdWIElpxZphzjR0enm2KaNdAmyc.crl (hash: DjO4S7GiSxY58qVCvwdW6Y1BaglUh6gfrEX+ad+/pzw=)
2: 74444F50490E11EFA7EAAA70C4F9AE02.roa (hash: kcHTFnzLikXn0NjPuVY7G48i03xbByG7UkZ4K1tljPg=)
3: BCB9064CF93C11F090318BAB3D6F56BC.roa (hash: kOHPO0wJJEaJGUGpMv73CUEBEHEVxcUh+ZTknPWZYFE=)
4: 6A9F1EFECC1211EEAA175022C4F9AE02.roa (hash: FaE6XXkxjwj2xUfh7JuSDMTkitv7rRXPaw2a3g64mao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Validity
Not Before: Mar 1 04:09:06 2026 GMT
Not After : Mar 8 04:09:06 2026 GMT
Subject: CN=69a3bbe2-15b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:6e:3a:43:52:3a:1a:f1:59:4a:d3:9e:db:
97:c8:09:f0:34:b8:67:71:24:d4:c0:b4:ca:9b:c9:
fc:eb:d2:99:9e:ba:1d:02:0f:df:66:fc:6d:1a:63:
2d:0c:e7:c0:6d:a8:51:46:e4:76:03:c3:d2:e0:29:
23:08:8d:5c:95:c9:f0:9a:6a:3d:d8:f9:a9:af:af:
9b:0f:af:48:6c:01:7a:88:0a:d0:47:7c:d9:c5:18:
a3:6b:9d:47:55:61:64:cf:64:e7:26:46:31:4e:a0:
88:7e:c6:0a:57:df:11:24:6d:75:92:d8:a3:a2:49:
de:51:35:c2:e4:e2:b0:0e:cd:8b:ea:08:a2:39:c3:
fa:6c:40:40:7b:b0:82:10:f2:42:f8:d0:94:af:54:
72:0a:07:7f:03:50:b1:c7:8a:45:59:79:98:9d:8b:
f3:bc:f0:db:d7:e2:16:d4:18:db:18:d6:74:d8:e0:
2a:19:55:82:78:56:05:6b:21:14:55:11:a3:9b:df:
41:23:47:31:e6:42:63:5f:6c:2e:8f:10:de:1d:be:
05:90:3e:48:35:6f:31:57:9c:84:0f:c0:91:b3:86:
69:f9:81:e5:86:9f:22:7d:5a:58:78:31:42:e6:a1:
60:d6:94:4a:07:da:56:a0:dc:31:2e:05:2e:14:5b:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:33:74:B6:B2:E0:24:90:91:5B:AB:F4:DA:1E:F2:27:56:F5:B9:3F
X509v3 Authority Key Identifier:
keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:21:a3:2d:d3:4e:e7:91:33:68:96:13:ea:98:db:38:ff:38:
41:a1:ec:af:e8:8a:58:5c:ab:84:f6:8e:a7:56:03:05:7c:75:
05:ef:da:5a:09:d2:eb:9d:36:d6:ec:3e:c7:a9:25:82:b7:25:
21:6a:c6:f2:ff:81:ce:3b:12:14:14:2a:79:c4:a9:c9:41:c6:
71:3b:ff:d3:d2:bf:23:60:10:45:ca:31:9d:18:af:89:ed:4e:
db:64:32:47:78:3f:e4:99:93:e8:97:01:5c:46:df:d6:59:0e:
13:27:b5:ed:21:9b:70:68:f7:51:c9:48:71:47:17:c6:6a:ce:
5d:10:11:c0:96:35:06:6c:da:d9:6c:db:ef:a3:87:e3:46:76:
68:6d:b5:06:bd:e4:08:9e:e1:00:32:c2:7a:f0:85:78:56:b9:
cb:7c:69:61:65:8b:d1:f9:c7:56:f7:cb:f7:33:4c:2e:9a:7c:
32:d4:cd:45:b4:5d:34:48:d8:49:ed:da:04:7c:cf:f4:c9:b2:
2f:3b:e8:e7:81:1d:79:5d:60:3f:4f:8d:06:6a:6f:20:48:c3:
54:78:e1:ca:34:22:29:2f:0a:43:1d:67:c8:68:11:f0:28:d5:
ce:e0:e6:73:12:dc:96:dc:29:c1:7c:e9:47:4d:5b:88:23:03:
48:25:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:45 2026 by rpki-client