
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
File: wuV00hDNcViHNr83nUfNEUasN7I.mft (raw, json)
Hash identifier: ejVICCsJ7eUwJNflyTPbU1rtBQ0xffSOWAOnktSd+F4=
Subject key identifier: A3:40:1A:AD:2A:B8:65:BC:BF:01:B3:A1:BD:19:03:4F:B6:BC:A2:85
Authority key identifier: C2:E5:74:D2:10:CD:71:58:87:36:BF:37:9D:47:CD:11:46:AC:37:B2
Certificate issuer: /CN=A91A9720/serialNumber=C2E574D210CD71588736BF379D47CD1146AC37B2
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
Manifest number: 98
Signing time: Tue 13 Oct 2026 08:07:57 +0000
Manifest this update: Tue 13 Oct 2026 08:07:56 +0000
Manifest next update: Tue 20 Oct 2026 08:07:56 +0000
Files and hashes: 1: wuV00hDNcViHNr83nUfNEUasN7I.crl (hash: Zg1l9egQES/6YHf3a2PVY92Gm8gMFmWBAFzeosP57fM=)
2: 48A87092E55C11F0AC7781DC396F56BC.roa (hash: I0wBboWIudBQ7dYBJo2wUoCVtx7RIy0Rqyv4U3HVGRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.crl
rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 08:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9720, serialNumber=C2E574D210CD71588736BF379D47CD1146AC37B2
Validity
Not Before: Oct 13 08:07:56 2026 GMT
Not After : Oct 20 08:07:56 2026 GMT
Subject: CN=6acde6dd-c5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:11:7a:f1:86:25:0b:62:7f:19:a8:a7:b9:
ed:c0:0a:ca:6b:49:d2:6a:45:6b:f7:96:2d:44:22:
ab:3c:ad:33:6f:45:9f:5b:68:6b:40:0b:78:e3:a8:
b0:f9:74:98:99:a8:7d:52:4c:57:47:70:60:df:9e:
8b:52:46:dc:82:ea:4b:62:94:8f:5c:ab:d8:6b:f6:
86:55:28:0b:87:b7:c5:bd:4a:e9:98:e2:5a:f9:69:
76:e9:21:cc:33:f4:25:94:c6:83:38:5d:31:56:40:
18:9c:8f:2e:d1:50:8a:9c:90:e3:eb:53:87:6b:bc:
0e:63:e4:e6:48:46:80:bd:1e:ef:cc:0d:2b:dd:cb:
4b:7c:c3:2f:44:d8:f3:64:7d:bf:9a:32:40:f2:3a:
c3:31:5c:6e:75:cf:fb:39:36:b6:7b:97:e5:12:62:
d6:09:0d:00:b0:14:f6:f4:c6:79:c2:e6:f7:91:8f:
2c:30:b8:89:20:d8:37:d5:a2:2c:53:e6:69:15:6e:
3c:57:df:b3:ee:af:d9:a6:9e:cf:d1:b7:30:3c:db:
39:09:96:0e:75:d4:a3:9f:13:c5:7c:91:cb:85:5d:
2e:87:c8:75:e0:8e:16:cb:69:ec:ab:38:5b:25:d1:
ef:11:b4:bd:a6:e0:cb:40:d2:70:69:09:84:77:77:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:40:1A:AD:2A:B8:65:BC:BF:01:B3:A1:BD:19:03:4F:B6:BC:A2:85
X509v3 Authority Key Identifier:
keyid:C2:E5:74:D2:10:CD:71:58:87:36:BF:37:9D:47:CD:11:46:AC:37:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:06:5c:58:5f:38:33:3e:15:b3:57:5b:1a:e0:a2:4a:e7:44:
bc:c1:10:c0:cd:a0:cf:b2:1f:79:ed:7c:6e:f3:f3:58:4f:c5:
1e:67:0d:99:5a:65:84:c5:1b:df:ec:8d:58:1a:8a:97:4c:23:
cc:27:0b:0e:2d:0e:92:31:cb:24:94:6c:8b:87:d3:0f:b7:a6:
ce:4e:4a:c7:19:f3:ff:f9:09:e8:6b:21:2d:c2:17:a4:52:39:
e7:5e:c0:e2:bb:ed:41:da:f9:4e:d9:aa:ca:9a:d8:90:31:7a:
ea:f1:0e:d2:50:5a:40:5d:82:d3:52:c7:a7:1a:2f:60:ee:70:
ca:98:12:6d:55:9f:10:e0:bf:e7:86:21:81:b4:eb:37:d2:af:
e8:d3:c9:eb:86:85:06:76:a7:0b:60:f3:4d:3e:99:d5:61:25:
13:9f:95:ec:a3:e9:16:ee:a7:53:d5:4b:e2:20:be:4e:01:2a:
7d:77:ce:39:b8:4f:fd:88:25:22:5a:56:b0:db:a2:5a:0f:ad:
f6:92:fd:4e:4e:98:06:dd:8b:53:85:97:97:12:f6:18:db:ca:
7c:20:96:b0:d1:6c:5c:e0:a8:96:98:50:12:59:59:d9:72:c1:
fa:78:fc:c9:fc:86:96:b5:ed:20:26:0b:48:b5:7e:cc:a6:47:
aa:74:c0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:27:12 2026 by rpki-client