
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/WitzJi4KG4Slqp07Tj3yNWXIHd0.mft
File: WitzJi4KG4Slqp07Tj3yNWXIHd0.mft (raw, json)
Hash identifier: ocucefeLqA4Q3PTyZ+/1LqdZRmb0DDBCCJVl59bZo5Q=
Subject key identifier: 4C:8B:67:B9:A3:F9:EE:6C:A7:1A:C7:5F:08:CF:DC:32:30:2D:FB:84
Authority key identifier: 5A:2B:73:26:2E:0A:1B:84:A5:AA:9D:3B:4E:3D:F2:35:65:C8:1D:DD
Certificate issuer: /CN=A91AF9EC/serialNumber=5A2B73262E0A1B84A5AA9D3B4E3DF23565C81DDD
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WitzJi4KG4Slqp07Tj3yNWXIHd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/WitzJi4KG4Slqp07Tj3yNWXIHd0.mft
Manifest number: 3C
Signing time: Mon 21 Sep 2026 08:32:19 +0000
Manifest this update: Mon 21 Sep 2026 08:32:18 +0000
Manifest next update: Mon 28 Sep 2026 08:32:18 +0000
Files and hashes: 1: WitzJi4KG4Slqp07Tj3yNWXIHd0.crl (hash: 5p+rM+vO06Z6S1qvFuiYyA/jfwUwgJ4vQ8bFKo7GcZc=)
2: FCD9067E5B8311F1B70F511BA8833773.roa (hash: cgYr+kfxAyhZ9VoWZROtLJpf9z2ifbMSdJfhGqrR9IA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/WitzJi4KG4Slqp07Tj3yNWXIHd0.crl
rsync://rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/WitzJi4KG4Slqp07Tj3yNWXIHd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WitzJi4KG4Slqp07Tj3yNWXIHd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF9EC, serialNumber=5A2B73262E0A1B84A5AA9D3B4E3DF23565C81DDD
Validity
Not Before: Sep 21 08:32:18 2026 GMT
Not After : Sep 28 08:32:18 2026 GMT
Subject: CN=6ab0eb93-ed8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:dd:80:ed:65:e7:39:46:05:06:6f:c6:bb:
21:25:4e:7c:0e:3b:06:0f:1a:87:32:43:81:70:96:
8c:78:0d:5b:19:5a:ea:60:8f:bf:aa:a8:89:1f:cd:
b2:74:a1:0f:96:c2:9f:15:bb:ce:45:60:37:2b:57:
18:d6:df:e9:65:24:6f:d6:b1:55:60:ef:08:02:a7:
58:4a:3e:b0:eb:56:54:49:60:cc:7d:af:33:a3:93:
bd:0f:e0:81:c2:89:e7:59:f0:5c:24:a0:86:9c:3c:
4a:8e:8c:7f:d6:54:57:52:38:5b:b1:b8:79:80:ba:
ac:ad:c7:a7:1f:85:ba:11:c7:9a:68:fd:0c:72:0f:
11:c2:a8:82:99:07:78:21:78:ee:f1:6c:99:1a:7a:
2f:86:6d:4e:7b:2e:91:64:7d:7d:4d:cc:d4:09:c3:
46:be:ca:6e:b1:e1:6c:f6:bc:bc:a8:d6:d8:79:99:
57:cd:8e:d3:1a:47:18:8c:e1:57:d2:04:97:d3:f1:
2b:e7:2b:1e:48:7a:93:9c:ef:36:e6:1b:8b:b4:b7:
5d:37:56:2d:3c:89:4e:66:c0:40:d4:e9:39:7e:ab:
2b:39:c0:ef:c3:67:5c:58:da:91:ca:fd:af:f7:f9:
24:b0:f7:21:c6:91:f8:74:81:4a:b9:2e:12:f0:75:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8B:67:B9:A3:F9:EE:6C:A7:1A:C7:5F:08:CF:DC:32:30:2D:FB:84
X509v3 Authority Key Identifier:
keyid:5A:2B:73:26:2E:0A:1B:84:A5:AA:9D:3B:4E:3D:F2:35:65:C8:1D:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/WitzJi4KG4Slqp07Tj3yNWXIHd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WitzJi4KG4Slqp07Tj3yNWXIHd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/WitzJi4KG4Slqp07Tj3yNWXIHd0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:bc:ad:de:ac:79:ce:75:11:6b:01:38:da:79:7a:ac:8b:74:
7d:83:bb:6e:6f:14:a4:12:5a:7b:50:6f:97:f7:f8:4c:81:75:
00:54:9a:f7:11:3c:46:54:f5:ba:7d:1d:62:b0:ff:55:57:69:
33:e1:b2:d7:c8:f8:f6:1b:5f:41:8d:a6:e2:c7:2e:61:0b:09:
df:16:97:04:3c:57:15:96:7d:e6:2e:2c:cf:13:38:ca:e7:cf:
3a:44:c9:38:fc:1c:79:24:fa:b1:5b:91:7f:96:02:63:04:21:
78:a8:98:5a:47:ab:4a:58:81:45:3d:fe:34:b4:fe:6f:f0:18:
3d:52:b7:2b:e6:4b:5d:e4:b0:c7:5a:7a:ea:87:9f:44:54:40:
26:25:ac:aa:05:21:9a:cd:a8:5a:b5:ce:a7:ff:2c:33:fd:86:
5e:27:d6:de:25:10:8d:84:03:f7:fe:a9:47:7a:de:3a:fa:1b:
0f:df:ac:61:19:b7:ee:35:26:84:11:0b:0e:11:65:e5:4c:f9:
6f:27:78:de:a2:53:4f:d7:11:ea:71:b3:fd:8b:6e:44:3a:82:
76:7c:16:8f:54:5f:f4:f2:c0:1b:97:53:64:97:0a:31:af:4e:
82:7c:62:5c:66:14:cc:9b:f5:c0:53:6b:ef:d9:c3:ed:89:41:
c6:ff:a6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:12:07 2026 by rpki-client