
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
File: WWtkT4ORAfVZi9Egyt6VSFGgzko.mft (raw, json)
Hash identifier: QC/YIZn5LAt5tzr40C5FXiRR/qbe7V+Gru6sTp11d/Q=
Subject key identifier: C7:73:0B:26:46:D8:C8:04:F3:63:73:9C:0D:8A:F4:47:1F:06:68:77
Authority key identifier: 59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A
Certificate issuer: /CN=A91AC1CF/serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
Manifest number: 15
Signing time: Fri 17 Apr 2026 08:43:04 +0000
Manifest this update: Fri 17 Apr 2026 08:43:04 +0000
Manifest next update: Fri 24 Apr 2026 08:43:04 +0000
Files and hashes: 1: WWtkT4ORAfVZi9Egyt6VSFGgzko.crl (hash: jAOOG4gJ9rVCHxjnao8A/4NaNewVtqnow485MxZAd/Y=)
2: 840FB8CC1DAE11F1AA3EBAC03D3D8C67.roa (hash: r5BB+japYC6seEdkVZLK22Dexuxs6mCJDX2FzRf3yv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl
rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC1CF, serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
Validity
Not Before: Apr 17 08:43:04 2026 GMT
Not After : Apr 24 08:43:04 2026 GMT
Subject: CN=69e1f298-8f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:b1:53:89:5b:1c:0e:09:38:13:78:a7:57:
af:14:96:42:d2:bd:af:13:5f:45:f5:3f:01:b5:9a:
bd:3c:13:f8:7e:bb:a6:18:fe:a7:67:e9:74:c7:3f:
b3:96:7d:c0:11:21:bb:20:5d:10:57:e1:6c:b8:f2:
cb:5c:13:3b:3d:90:35:19:1d:82:46:91:37:5d:c0:
7a:7e:9b:9e:a2:5c:4d:0d:27:90:1c:2e:ca:c0:9b:
3a:10:1f:eb:d6:07:d4:af:9b:7e:1c:4a:4f:51:d4:
51:82:ce:e2:4d:5e:7b:c2:3a:d5:77:42:07:8c:8e:
8d:43:a7:78:18:da:3c:95:6c:f7:f6:2f:1d:7c:b7:
ac:ce:0a:49:30:b5:61:54:a5:71:84:92:18:96:6e:
5d:ff:f8:b7:26:1c:3d:d0:76:47:8e:71:31:08:23:
8f:46:07:d1:c7:78:cb:e1:ed:c8:e8:82:57:b5:6c:
e0:5b:f9:96:92:bb:78:af:fe:a8:44:7a:7e:8a:3a:
fa:59:ad:43:4a:11:e6:a2:55:32:96:61:1a:72:44:
5c:83:a5:fa:c0:4d:d1:24:49:e6:58:e8:a6:fe:6b:
e9:a4:54:d5:71:a9:31:b6:1b:b1:a8:5a:8c:8e:7d:
57:a9:f1:31:08:e4:04:0f:69:c2:41:1e:1b:28:1b:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:73:0B:26:46:D8:C8:04:F3:63:73:9C:0D:8A:F4:47:1F:06:68:77
X509v3 Authority Key Identifier:
keyid:59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:41:4a:41:88:37:c7:ce:42:9c:f2:46:2e:e9:ce:b5:a5:9a:
85:12:a7:6a:8d:8f:8a:7b:6c:44:4b:17:8a:7d:8d:52:dd:7e:
f2:51:32:41:cb:ac:f6:2d:04:9b:4c:03:6a:a9:a4:75:89:c9:
64:15:8e:ae:be:df:6d:8a:a8:4c:88:64:8d:ce:6c:f9:41:d8:
be:bc:79:d5:e7:a8:74:dd:c1:ab:27:db:9c:40:a2:5a:26:62:
6d:3e:a5:67:48:ad:c2:96:dd:c1:5e:5d:30:d0:1b:58:9b:b0:
da:d2:d7:00:ed:dd:5c:3a:93:e7:d5:48:cc:f1:2b:b8:1e:4f:
30:44:ee:bb:a9:4e:5b:b5:aa:fd:99:9b:5c:ed:33:4d:66:4e:
22:d3:cf:93:fb:e2:9e:41:c8:ee:16:72:83:51:56:86:a0:89:
0d:b1:7d:87:44:05:91:33:74:4c:14:a8:e7:f8:06:f5:d9:a4:
71:bd:2a:e2:4a:57:7e:45:68:f1:3f:12:06:bc:b1:05:de:ab:
94:be:85:6c:87:4b:ca:c0:cf:4f:3d:c0:5a:3d:b4:2c:b2:8a:
0a:e7:a6:09:bd:b4:d5:7c:80:d9:58:1a:a8:0b:13:b7:3a:ee:
21:49:b1:e0:2f:a2:dc:4f:a6:21:f0:94:a5:b1:72:66:2f:e8:
47:05:ad:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:14 2026 by rpki-client