
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
File: WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json)
Hash identifier: HL1LyR/YjElBxP4xL3QTEhrtHxbdlCp54ZVjKzEKc2o=
Subject key identifier: CD:DF:0B:F3:BF:05:4C:76:77:5D:ED:50:6F:4F:AE:40:88:57:F7:06
Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
Certificate issuer: /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Certificate serial: 0751
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
Manifest number: 2D2C
Signing time: Mon 02 Mar 2026 01:12:26 +0000
Manifest this update: Mon 02 Mar 2026 01:12:25 +0000
Manifest next update: Mon 09 Mar 2026 01:12:25 +0000
Files and hashes: 1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: KVD6JFmQXH1ah8xpB8daJho9d3V/ObP84JB0Q/1nbog=)
2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: GUJd4j7G7L+UV5G9B1gdyKwwN/+3vzX5xi/seaK9GEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1873 (0x751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Validity
Not Before: Mar 2 01:12:25 2026 GMT
Not After : Mar 9 01:12:25 2026 GMT
Subject: CN=69a4e3fa-d906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:aa:1e:55:3d:b9:1c:71:67:28:18:ca:50:
df:40:17:1a:7b:86:8a:53:7f:44:12:19:e5:44:e8:
0a:26:8f:a7:bb:60:1b:68:8b:50:0d:78:9d:db:38:
5e:7d:f7:83:34:7e:7d:00:29:c9:48:ff:97:06:d8:
72:b5:55:79:e0:54:d8:db:c7:c1:15:34:68:16:55:
81:43:09:41:d5:dd:ac:bc:18:8a:93:9b:70:53:94:
8d:b6:7d:ec:44:36:c1:0a:8b:bb:78:65:22:fa:c7:
12:b7:23:7f:3a:c3:3f:f7:54:5d:a0:09:ba:4b:b0:
e6:b3:a3:26:d7:a3:af:0e:b5:bd:82:81:51:d9:b1:
f1:4a:d6:03:62:5c:1a:36:d2:83:56:aa:61:48:ab:
69:f0:c2:0e:f2:c2:dc:ca:68:b0:bb:14:7a:b9:21:
76:fd:91:09:c7:3b:77:b0:e0:2a:6c:e6:21:10:ec:
ae:d2:f9:42:8d:ad:f3:ec:f3:9c:26:8b:0b:14:58:
a9:dc:0a:6b:62:24:f4:32:7f:1b:ed:2b:39:fa:b5:
17:58:81:9b:65:e1:49:c3:95:da:5a:1b:a0:22:3b:
37:0b:a7:18:ad:bb:04:bb:16:c2:1b:5a:99:77:c5:
ee:13:5b:2f:66:e6:84:15:1b:d4:bc:3c:dd:a4:e9:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DF:0B:F3:BF:05:4C:76:77:5D:ED:50:6F:4F:AE:40:88:57:F7:06
X509v3 Authority Key Identifier:
keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:d6:12:a3:85:e9:ba:12:90:82:63:69:b0:19:31:14:41:f8:
8b:ea:d3:94:38:34:6d:46:1a:13:f3:fd:16:17:5a:50:01:f7:
0e:6d:8c:16:11:d9:aa:08:cc:81:1e:f3:75:08:49:49:1b:ac:
a9:f3:dd:b2:77:cb:9b:4c:fb:00:a6:d0:31:f0:36:9a:5a:25:
2f:fe:38:43:0b:24:e6:ad:95:c5:b0:77:8f:52:b2:61:81:fb:
ab:48:f6:52:ab:b8:ef:ee:01:e4:7a:11:3f:45:e6:73:64:19:
98:fb:d2:7c:1f:87:e9:9d:66:5e:1a:c8:29:6e:3c:84:1c:ac:
bc:07:71:77:7d:aa:f1:c8:86:71:41:f2:f2:c5:cc:ad:92:64:
c4:9d:05:41:24:3d:97:e2:de:29:c7:f5:41:8a:d9:d0:fe:16:
79:6c:83:69:c2:ef:af:bb:03:18:33:d6:bb:2a:ef:2b:52:f2:
02:99:65:ec:ad:18:6d:27:a2:45:3e:17:9c:67:01:49:bf:68:
a8:a5:52:51:f0:25:cf:cb:29:66:fc:54:67:c9:87:1e:65:10:
66:b4:43:a3:cd:c4:2b:dc:f7:84:6e:25:cd:fa:42:37:49:bd:
cb:64:fe:3b:59:cf:1a:51:a9:e4:e6:df:d5:5e:fe:c4:7c:23:
0a:d5:d4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:17 2026 by rpki-client