
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
File: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft (raw, json)
Hash identifier: QU/NR2fLZsvHNEEjkjn7Fz+hYrvV7xK66tuRpKTPWRo=
Subject key identifier: D3:AC:44:AE:F2:87:F8:FF:D7:70:9E:5B:FF:34:3D:CE:58:71:7B:CD
Authority key identifier: C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD
Certificate issuer: /CN=A91A839E/serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
Manifest number: AC
Signing time: Fri 17 Apr 2026 06:52:33 +0000
Manifest this update: Fri 17 Apr 2026 06:52:32 +0000
Manifest next update: Fri 24 Apr 2026 06:52:32 +0000
Files and hashes: 1: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl (hash: jbdkxwICtlkrklcy6hpjwR9O9EeXPZQurVUDCziyVIU=)
2: C317D9BA341A11F0B6835730C4F9AE02.roa (hash: XkHC8IfLahC3QlH1b+920w4LrDSkz3dxnoxC4nAJaWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl
rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A839E, serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD
Validity
Not Before: Apr 17 06:52:32 2026 GMT
Not After : Apr 24 06:52:32 2026 GMT
Subject: CN=69e1d8b1-2891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:09:87:52:78:35:8e:7a:29:cd:9f:90:21:71:
b1:7c:d4:2b:44:3b:23:fa:55:88:70:34:36:78:20:
4e:48:49:48:09:e4:b1:7d:30:78:96:58:91:90:1c:
ed:e6:40:6b:f6:0f:1d:24:39:5b:1d:f2:f0:bd:a8:
57:a9:50:72:35:a3:78:db:c4:8f:f6:09:85:f9:9b:
a7:75:4c:b7:e6:2b:1b:0a:6f:f0:45:8e:0a:ba:52:
62:75:7e:2b:72:4f:07:53:a0:a2:40:b0:ee:4f:74:
37:c8:f7:d3:aa:84:ef:ea:73:48:1c:25:c9:1d:33:
2c:b7:c3:a9:cd:e6:86:1c:34:83:76:7d:ea:4c:d6:
a5:76:1b:30:d8:16:15:ab:ea:21:61:ec:f9:2e:ff:
34:13:d9:85:e8:db:cf:00:7c:82:e8:01:50:63:1e:
b6:6e:b5:a0:e4:9a:8d:36:b9:a6:f5:28:d1:2e:0f:
b2:d3:b8:3e:0d:d2:40:65:b1:8e:8e:fd:04:6c:1f:
f9:52:ee:6a:c3:35:a8:b5:29:17:df:14:a8:7f:9a:
5e:46:e8:25:ff:5c:cb:91:96:2a:29:c8:1a:cd:da:
d4:c4:5b:b2:38:b2:81:ec:4b:7f:eb:1c:70:4e:8f:
17:ae:b7:98:26:17:dd:85:aa:0d:00:67:46:3b:dc:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AC:44:AE:F2:87:F8:FF:D7:70:9E:5B:FF:34:3D:CE:58:71:7B:CD
X509v3 Authority Key Identifier:
keyid:C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:db:bd:03:51:a4:17:95:b0:7a:3c:6a:b6:03:12:fa:3a:ad:
5a:a4:af:9a:46:70:31:a9:b5:f9:d2:21:1c:d9:6a:53:2e:a0:
5e:d9:dd:8f:1c:87:80:8b:fe:a6:b8:1d:47:29:4b:c3:af:12:
ea:15:df:4d:54:62:56:7a:68:4f:3b:1e:85:87:37:fe:f7:4a:
f6:d1:cb:d7:c2:dd:ff:f5:6e:05:38:8c:2f:cf:26:18:a1:2b:
a7:c5:21:30:e0:ff:db:a9:b3:e8:5f:f3:d1:df:8e:37:38:de:
4c:b7:22:02:1e:0e:71:ad:fb:2e:4f:9d:d2:c2:b3:a3:2d:08:
3c:67:da:27:e4:0d:1a:2e:b9:f4:c4:9f:ff:77:7f:4f:14:a9:
98:81:01:34:12:65:b9:49:c8:49:03:0f:95:8f:87:31:ab:d5:
15:81:f1:39:10:93:93:34:cd:3b:46:22:d0:f3:2b:ee:35:3a:
dc:46:3e:11:99:d6:41:93:52:d0:6a:9d:fa:22:51:56:31:db:
9d:d4:e0:c0:51:a6:0f:8f:d2:14:c3:d5:ca:1e:68:30:25:3a:
a0:79:88:c2:cd:ad:cd:7b:91:9d:62:d8:3e:9e:f8:8f:fa:86:
37:a8:85:09:40:f3:ca:ba:5f:27:50:bc:8e:f9:a8:2a:ba:f9:
48:d8:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:40:31 2026 by rpki-client