
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
File: Wr7NjqrTfqV665OfLAsUKXSEH4o.mft (raw, json)
Hash identifier: rejp4wn/7dIVYxD4CiKHtGtgZ23qXCF7Xbw5R8hsfj8=
Subject key identifier: E4:91:B2:E3:AC:AB:33:C3:57:5E:67:21:D9:34:5F:8C:FB:59:C1:FA
Authority key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
Certificate issuer: /CN=A91A5A82/serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
Manifest number: 0125
Signing time: Tue 13 Oct 2026 06:27:26 +0000
Manifest this update: Tue 13 Oct 2026 06:27:26 +0000
Manifest next update: Tue 20 Oct 2026 06:27:26 +0000
Files and hashes: 1: Wr7NjqrTfqV665OfLAsUKXSEH4o.crl (hash: TUEMj8DwA+DoB3r3Y/XvGXihFzmB1Emzay3gIwq1bmM=)
2: D0B32912090911F0A5348F26C4F9AE02.roa (hash: 4Lyw/AU+Wk60oVjtMsai5M/XpQ4x8ZuW3TaDGBXdpZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 06:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Validity
Not Before: Oct 13 06:27:26 2026 GMT
Not After : Oct 20 06:27:26 2026 GMT
Subject: CN=6acdcf4e-66b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b0:22:3d:36:31:3a:41:22:34:de:cb:e5:b3:
84:e4:bb:59:26:34:fa:35:70:e9:0f:0b:b8:17:9e:
be:d5:30:30:88:09:69:b2:00:ee:9b:8b:d4:f3:3f:
4e:89:0d:ae:be:63:92:3b:3b:1f:c5:19:82:15:61:
a1:af:d0:6b:12:4a:54:cf:35:ce:3e:3f:d7:5d:ab:
50:1f:f1:41:a0:b6:f4:35:c0:bc:ec:cc:25:84:6f:
f1:ad:f7:d1:d0:03:22:16:61:42:64:d5:49:cf:b6:
7d:c1:63:c9:4e:94:ee:39:ce:07:d4:ef:a6:b0:9a:
ea:fd:3b:f8:91:75:3f:ca:15:fb:a5:ed:65:4d:eb:
ff:aa:85:31:71:b6:3a:e6:0d:a4:14:07:52:f8:cd:
12:28:4e:23:83:02:c7:f3:88:4c:71:6a:b4:92:43:
4c:71:28:b1:ba:c1:e4:c1:01:52:b0:8b:52:00:61:
b5:50:98:24:7b:f3:2b:22:aa:1f:8c:55:e7:4f:73:
bc:47:ca:c1:aa:5f:bc:10:ae:38:fb:e6:23:bb:db:
97:a7:08:6c:be:b8:10:90:c7:25:a1:2b:b6:1c:0c:
52:2e:9c:ef:b6:4b:53:e1:35:f4:cb:e9:d0:51:48:
92:cf:f0:11:25:17:30:60:18:7f:6c:0b:dc:6a:2d:
ad:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:91:B2:E3:AC:AB:33:C3:57:5E:67:21:D9:34:5F:8C:FB:59:C1:FA
X509v3 Authority Key Identifier:
keyid:5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:bc:d3:7b:15:c6:c2:70:79:e5:da:dc:12:75:3f:62:68:43:
04:cb:97:31:f9:fa:b0:bb:ff:f9:e0:f3:29:5f:61:c6:e0:be:
d3:30:62:c6:a9:b9:d3:52:d8:27:5a:aa:5f:98:5d:8a:1b:7b:
8d:9b:8c:62:7d:61:60:8c:a3:28:21:2d:13:33:1c:6b:c0:cf:
8d:6a:fd:84:70:8f:17:66:a4:c2:26:e2:4f:85:fe:06:7b:b2:
d5:7c:b8:aa:6a:27:e5:75:45:44:e1:db:49:8b:df:da:14:bc:
d5:b1:ad:a5:1c:27:e2:4a:e9:46:71:c2:2d:eb:33:d7:35:73:
af:aa:5f:bf:e5:f7:56:8b:cf:0c:a3:fb:e2:0d:81:0e:51:cb:
25:43:56:a7:a0:23:0b:34:30:cc:fb:6c:78:d0:3c:1a:25:1e:
99:ba:62:60:d8:c8:e6:51:bd:55:f6:4c:06:5f:96:8f:ca:83:
91:a1:10:08:18:1e:c1:76:08:ec:32:89:78:91:af:95:4e:49:
6b:71:5d:86:05:47:05:1d:1b:3e:89:e8:28:3f:b2:51:c9:25:
fd:9e:f1:d3:98:e8:9c:52:8e:14:9e:d1:bb:72:ac:47:86:1d:
d9:37:f1:87:2d:1f:84:d4:41:d5:ea:ae:a7:f3:e0:86:e4:23:
fb:f9:ec:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:14:59 2026 by rpki-client