
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
File: wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft (raw, json)
Hash identifier: 9hZFegMULMpApLuxeZvS+vczxQdhXvASb4KahiwVark=
Subject key identifier: 2C:B0:56:1A:AE:7B:E6:9F:1A:41:6A:3F:52:85:37:55:4C:59:F7:D5
Authority key identifier: C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19
Certificate issuer: /CN=A91A445C/serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
Certificate serial: 308F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
Manifest number: 3083
Signing time: Sat 18 Apr 2026 15:24:57 +0000
Manifest this update: Sat 18 Apr 2026 15:24:57 +0000
Manifest next update: Sat 25 Apr 2026 15:24:57 +0000
Files and hashes: 1: wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl (hash: DmQkmfFYl/ahNzNNV1r9o+S7ISTbKZhjohc+pA+uHu8=)
2: 47A21580B6CC11EC98672826C4F9AE02.roa (hash: cztq4WM+cyh6Dv8KVPvE42rjfiHW8NZMn1s0RvbxLJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl
rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 15:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12431 (0x308f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A445C, serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
Validity
Not Before: Apr 18 15:24:57 2026 GMT
Not After : Apr 25 15:24:57 2026 GMT
Subject: CN=69e3a249-c82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:0f:f1:66:1c:ee:27:12:55:fe:71:ed:3e:
a1:a4:88:7a:83:6f:1f:0a:ea:a5:79:21:fd:c6:b3:
f1:25:1d:a4:69:62:39:54:be:c3:6c:1a:1e:63:49:
a2:bd:08:36:e4:1d:16:10:91:ce:f2:82:57:7a:38:
05:03:25:88:a5:3d:e2:91:78:6c:be:83:72:f5:cc:
21:49:e1:05:db:e1:d9:41:f8:8c:47:a0:2e:ad:43:
f3:0d:ca:a1:f3:45:1e:f2:6c:1a:5a:20:b9:de:64:
44:01:f5:c8:a1:8c:5d:3b:e6:21:e6:81:d5:0e:6a:
5b:43:56:f1:58:60:3b:d3:81:d5:8b:bc:7f:59:e7:
f3:6b:fc:0e:88:ea:71:e5:f8:e4:25:93:b7:6b:27:
6f:37:38:2e:dc:d5:f8:bd:95:52:a1:56:fb:83:f3:
e9:60:26:c4:89:36:6e:30:5b:40:30:8f:e7:f4:5b:
d4:2d:ed:e1:79:da:da:df:6a:32:c8:39:49:83:17:
bf:c5:cd:7f:37:fb:68:2b:cc:ba:72:9a:98:ab:c0:
c4:ba:3c:3f:33:a8:18:fd:86:6f:84:8f:4c:ee:41:
c0:49:c0:43:e3:2e:38:87:8c:a2:00:b9:69:e6:ca:
17:38:e8:88:37:af:e7:84:a8:5e:1f:5e:f2:06:22:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B0:56:1A:AE:7B:E6:9F:1A:41:6A:3F:52:85:37:55:4C:59:F7:D5
X509v3 Authority Key Identifier:
keyid:C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:f1:88:ad:c0:cb:c8:64:8c:0a:3e:ed:0c:0d:49:61:22:5e:
f9:01:30:07:75:22:9c:ef:b3:1c:df:82:05:f1:06:fb:e8:11:
42:ae:86:4a:a1:5a:57:b8:9e:5c:ec:5d:98:21:b1:3d:75:6a:
cd:1a:d0:5e:af:8d:50:8d:50:0f:00:1b:29:3d:19:e2:04:f9:
51:62:47:c9:52:7e:0d:94:8d:35:b8:2f:5e:ec:8c:30:e5:2d:
8a:56:5c:89:63:b9:71:0f:f2:67:1e:1d:aa:d3:e9:6e:83:0e:
f8:e2:8d:c9:57:d3:d3:93:87:9b:53:6b:fc:9f:42:5e:f3:5b:
6f:c9:b5:07:69:0b:b0:92:bc:2a:49:ce:0a:b8:21:72:6f:19:
a3:d4:b9:34:65:d1:d5:a0:51:f6:07:34:2e:78:80:1f:dd:bf:
19:79:fe:25:3b:a7:b0:68:93:72:f0:79:04:31:f7:50:e9:c8:
f0:ab:98:06:4b:31:b2:2b:0b:14:a3:50:03:75:92:32:c3:83:
38:9d:2a:1d:74:88:ae:59:3a:63:64:91:19:2b:b0:42:2f:d2:
e7:4c:7c:80:4a:a6:ce:f4:0c:de:0d:32:e8:1f:76:d6:2b:0c:
23:5e:cf:f3:ca:f9:11:f4:72:b9:c4:ea:c2:99:bd:6b:e1:61:
5a:93:ca:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:49 2026 by rpki-client