
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
File: WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json)
Hash identifier: F/9mr1SXBSQJEHm+cJQcnDB8cs2KltdIf8qc3tZsEnY=
Subject key identifier: FB:93:97:01:66:69:4C:08:99:2A:2E:A6:73:51:19:3C:61:82:1E:1E
Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Certificate serial: 0A7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
Manifest number: 0A47
Signing time: Thu 16 Apr 2026 19:38:43 +0000
Manifest this update: Thu 16 Apr 2026 19:38:43 +0000
Manifest next update: Thu 23 Apr 2026 19:38:43 +0000
Files and hashes: 1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: VngtEAVsQFQJV2PgJcwGfHriSLM5WpuDDBmMp2hMgAc=)
2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: ycxHwEtoW9Hd3U6Gq2/EVboRJUU4xpiOdn0yTd0tHRM=)
3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: IVLj0WeJAsKNyITHuDeBc1Jwj1H2yGwi+BTH30ak3Wk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2685 (0xa7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Validity
Not Before: Apr 16 19:38:43 2026 GMT
Not After : Apr 23 19:38:43 2026 GMT
Subject: CN=69e13ac3-7071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:4a:9a:14:58:81:8f:73:4e:ab:01:1d:ff:
24:27:a6:c7:60:43:77:ed:37:a2:b1:26:99:3f:95:
59:20:da:41:eb:1e:1a:d8:0a:fd:d1:79:26:48:6a:
8b:57:e7:88:0f:6a:74:4f:e5:49:cf:b0:82:81:dd:
b1:88:70:24:11:87:56:14:73:17:62:2f:71:62:4d:
e3:fe:67:a1:af:e9:53:b7:03:05:6e:8e:32:64:25:
9f:2d:25:83:c9:38:01:58:5a:64:bd:2d:db:b6:6b:
26:e8:46:3c:59:4f:d2:4e:fe:ad:5a:b0:df:de:96:
3d:f2:8b:57:1e:80:c2:a6:9b:e5:4f:cb:75:c6:de:
65:58:e0:0e:73:9a:2c:97:9c:04:43:62:e6:96:4f:
12:1c:14:5d:d2:84:2f:58:0f:a1:e8:09:3c:a8:70:
85:75:e8:4a:9f:9a:bd:df:32:80:86:64:30:99:dc:
9e:95:fe:a4:b9:1e:a9:56:48:db:0a:7d:91:e3:26:
fa:00:5e:24:83:fe:7b:a8:aa:b3:cd:26:c8:a1:82:
df:8e:ec:11:e1:c1:e4:8a:9d:f5:8c:32:13:48:76:
82:05:dd:46:dc:9a:f8:fd:c9:87:20:0e:4c:0a:8f:
cc:33:78:df:b4:16:49:c8:5a:11:03:ef:f8:5d:df:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:93:97:01:66:69:4C:08:99:2A:2E:A6:73:51:19:3C:61:82:1E:1E
X509v3 Authority Key Identifier:
keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:12:49:74:d7:be:af:ba:dc:84:a6:5e:fd:e1:9c:15:23:4a:
96:0e:1f:13:ba:b1:e4:67:ee:e9:39:97:cf:3f:91:a1:75:80:
60:1d:48:42:8a:d2:87:c5:b2:ec:2b:ad:b2:09:8e:ce:36:88:
6d:ee:a3:44:46:ef:41:d5:48:13:66:eb:b6:03:d1:be:23:84:
9c:b9:69:25:09:e3:f7:f5:36:7b:d1:33:c7:33:85:4e:7e:14:
62:8c:45:85:0a:c1:f0:23:35:55:13:6d:d2:aa:06:7f:21:8f:
fa:04:f2:f0:ad:32:75:a1:bb:94:9d:8a:d4:42:b4:d9:df:a9:
d1:f4:be:b7:9a:83:a5:ee:99:b4:be:d3:6b:06:74:91:cd:9e:
54:d9:b1:7b:f9:0b:12:5b:63:ba:19:65:d3:8d:67:36:94:c6:
9c:82:e9:de:85:c4:63:48:fa:b6:f6:5b:0e:04:61:10:59:9f:
73:e9:6e:de:85:53:c8:40:8f:f2:92:43:33:01:68:9b:46:d6:
69:91:8b:4a:d5:d5:ac:fe:17:fe:3b:ae:ba:90:80:0c:aa:80:
7b:38:e6:71:f6:31:4b:ca:5e:94:7a:18:fd:50:b1:21:89:f0:
b0:52:75:3f:67:1a:c5:3b:2c:f3:37:f7:46:da:ff:f0:9b:cf:
ba:8d:d5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:06 2026 by rpki-client