
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
File: wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft (raw, json)
Hash identifier: DiiC+xD09+2Bvt1wTAwwYSQ/c+M6vqPKwlqZvaeoR8k=
Subject key identifier: CA:FC:48:0F:49:EC:90:25:D2:E3:04:8B:6A:A0:09:6C:E2:14:3E:16
Authority key identifier: C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19
Certificate issuer: /CN=A91A445C/serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
Certificate serial: 30EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
Manifest number: 30DE
Signing time: Thu 08 Oct 2026 15:28:38 +0000
Manifest this update: Thu 08 Oct 2026 15:28:38 +0000
Manifest next update: Thu 15 Oct 2026 15:28:38 +0000
Files and hashes: 1: wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl (hash: FFT7sxk5DsTwIy2XF+gIJ0Mh3kQS/L34HuQBmVTUkHM=)
2: 47A21580B6CC11EC98672826C4F9AE02.roa (hash: wtG9zcw24gOM5B08rJZr4FcF3LYoXdfgSkCeRx0p6Uo=)
3: dxLck8ENvqKCFCG48qm13E6NGtg.asa (hash: 3iWwpxG5FY4BuafGphXogA42l4X7bH7dzfmrbJ4oIhI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl
rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12524 (0x30ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A445C, serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
Validity
Not Before: Oct 8 15:28:38 2026 GMT
Not After : Oct 15 15:28:38 2026 GMT
Subject: CN=6ac7b6a6-6c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:a3:2f:07:e0:49:38:5a:e0:54:f9:5c:9f:
88:ff:c2:83:ad:c9:96:ee:ef:8b:8a:f8:d3:0d:02:
18:d6:e0:da:bf:4b:fa:4e:10:22:f5:22:ea:6b:0d:
cf:70:2d:01:7c:c0:41:22:90:b9:ba:fb:40:51:0a:
14:59:4e:37:b0:b8:26:35:f4:a5:f9:09:61:a1:e4:
2a:30:59:78:21:0c:bb:8c:e4:1a:24:96:95:98:ab:
73:92:39:89:a2:f6:1a:a1:6b:39:7d:d6:5e:23:8d:
e5:8e:f3:10:4f:74:f4:e7:46:e7:b4:09:68:80:73:
a4:96:b3:6f:66:14:ac:2b:2a:52:35:78:a6:45:f5:
1d:a5:37:37:c4:5a:40:19:78:f8:4b:32:26:86:7b:
86:7a:5d:78:39:f9:88:4b:59:57:fd:8a:d1:50:4c:
01:8f:71:fe:5f:3f:70:72:43:cf:d2:19:8e:6a:56:
41:a9:54:9a:c3:e7:7e:c4:68:00:27:15:2e:50:a9:
b8:d1:62:36:88:2f:c5:6e:8d:06:2e:c1:94:cf:df:
c0:cf:4d:3d:27:06:32:e8:f4:06:da:88:31:41:93:
2a:c8:be:7b:f6:cc:c9:07:74:bf:c6:7f:b5:78:50:
27:fb:6f:44:91:e1:e2:3c:01:cd:e4:c8:b0:5f:6e:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FC:48:0F:49:EC:90:25:D2:E3:04:8B:6A:A0:09:6C:E2:14:3E:16
X509v3 Authority Key Identifier:
keyid:C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:11:c8:18:0c:e2:78:61:b4:c9:7b:e1:ef:70:f8:0c:70:c2:
60:a1:3b:85:b8:75:09:9a:d4:94:cd:b8:0b:c2:44:fd:97:11:
3b:34:17:9c:e4:c1:20:bf:49:9f:3c:39:1d:72:90:bc:93:91:
c2:45:e3:37:00:c1:36:65:c4:c4:53:27:50:d4:c8:ca:1f:6c:
67:13:58:71:85:ea:5b:bd:f3:07:6f:e8:08:1c:fa:68:9c:0b:
a9:67:4a:26:5d:0d:34:fe:3d:1e:d3:9c:70:98:65:97:f4:64:
88:a5:22:29:46:f6:70:86:2c:46:58:51:94:3e:52:95:e3:fc:
09:db:15:96:79:76:dd:2d:be:05:cb:be:cb:91:a9:0e:79:08:
31:81:fb:c6:de:61:ac:15:3a:d9:3c:20:8a:1d:dc:26:71:87:
96:5a:d9:03:ca:2d:23:36:2b:0c:ed:a1:48:f9:a9:59:76:86:
ae:fc:ea:67:96:c2:62:97:78:cd:f6:8a:f6:d3:5d:96:73:bf:
ba:34:ed:ca:e5:b5:a3:1c:1e:67:20:00:3f:90:27:0e:a2:a3:
64:79:c5:82:64:8d:31:e0:35:57:02:38:47:91:a8:d7:05:ca:
1f:71:02:94:c3:a2:0a:a8:6b:bf:9e:9a:96:34:36:62:0d:6d:
bb:3c:66:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:27:19 2026 by rpki-client