
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
File: W9MkppvSbt2t9RKc0Y93odgFI7Y.mft (raw, json)
Hash identifier: VfnjKT3K964Zj2wxpeRtK+dwcOKhsF4gG6JEMaJ506c=
Subject key identifier: D9:7A:42:CA:9E:38:F8:E8:6B:AE:39:D0:B8:80:C4:E6:9A:10:44:FF
Authority key identifier: 5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6
Certificate issuer: /CN=A91B0380/serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
Manifest number: 0128
Signing time: Fri 17 Apr 2026 05:20:59 +0000
Manifest this update: Fri 17 Apr 2026 05:20:58 +0000
Manifest next update: Fri 24 Apr 2026 05:20:58 +0000
Files and hashes: 1: W9MkppvSbt2t9RKc0Y93odgFI7Y.crl (hash: Th1heixZOWZEVgtDBPvhJC/2chnnotd3Feu9zAvsbFA=)
2: 0A918056D24C11EFB8B5C95EC4F9AE02.roa (hash: IRaLwA2IIRDbeBtiFogWyRHcbWIxB674vhzVCmckLC8=)
3: 09FB57587C7411EFB8CF8A27C4F9AE02.roa (hash: MzNPXLeUHRXuqEsw2jAFx3fqhrieEdDBJpFkUnjbk2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl
rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0380, serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
Validity
Not Before: Apr 17 05:20:58 2026 GMT
Not After : Apr 24 05:20:58 2026 GMT
Subject: CN=69e1c33b-87e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:7d:66:23:18:54:ca:25:a6:55:66:19:c6:1b:
78:f6:b2:b9:9e:3a:2f:95:80:27:bc:6b:e3:f0:93:
ec:9e:bb:cd:83:d3:2d:a6:35:92:34:09:59:83:5b:
a3:27:09:74:d1:c9:36:55:88:c2:dc:c5:cf:a6:7a:
91:27:38:be:a1:83:0e:cb:57:4f:1f:7a:9a:fa:2e:
26:22:5e:e4:de:5c:10:2f:5d:1f:9f:51:0c:4e:7a:
4a:2e:eb:b7:fd:d8:1f:b8:de:76:82:74:7e:e2:72:
6d:f1:93:bb:ae:aa:af:69:a0:95:46:e1:ec:90:cb:
51:bd:6c:74:1e:64:a1:24:aa:6f:82:aa:e1:1f:18:
f4:86:f5:cc:0d:a2:c3:0a:b0:52:1d:66:2a:5a:5a:
66:cd:36:fd:95:03:44:bd:65:de:82:5f:b7:cd:e4:
35:c5:c2:1a:8d:9f:59:3f:a8:4e:f5:d1:49:da:d5:
07:ce:b7:b3:d3:0a:ef:3e:70:3c:db:d9:87:13:dc:
59:ce:5c:36:7e:92:3e:e3:d4:6d:8b:f6:e3:58:f3:
3b:19:5b:38:46:33:65:d7:e3:40:8e:fb:7d:8c:33:
ef:43:b6:69:65:1a:b2:51:6a:9d:f3:16:b4:86:7c:
cd:74:86:b1:18:89:5a:8c:24:3e:99:34:53:76:73:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7A:42:CA:9E:38:F8:E8:6B:AE:39:D0:B8:80:C4:E6:9A:10:44:FF
X509v3 Authority Key Identifier:
keyid:5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a1:53:0d:f2:85:3b:64:94:d2:e5:40:39:b4:3b:19:40:fd:
a9:28:73:e1:aa:8b:fe:00:5c:20:c5:bf:b4:2d:d9:a0:f8:9d:
57:14:70:24:d8:11:ee:d1:9d:31:7b:11:e6:36:e0:04:88:58:
05:7f:ea:97:4e:e3:cf:8f:f6:0e:3b:d7:eb:9f:2c:4e:74:45:
00:f0:56:f7:aa:a8:6b:df:08:ec:79:5e:fc:c1:a7:c8:7a:db:
d7:67:6c:0c:95:12:ba:9b:c1:b0:de:60:5f:55:64:54:07:fe:
e8:7f:79:31:80:7e:5a:75:ba:dd:d4:2d:f1:e4:b3:d4:bb:71:
ec:e5:96:0c:34:86:84:c2:8a:7b:0c:dc:c9:24:38:0c:be:e6:
4e:7a:cb:27:c3:e2:c5:61:2f:22:66:dd:d5:fa:57:9d:c5:29:
2a:c6:94:82:0c:f7:c5:c0:3b:a5:d4:05:88:b4:af:67:d7:ea:
a3:e3:8d:4c:34:c5:7b:67:a1:9a:d8:8a:ed:54:fa:ec:12:d8:
0e:27:14:4c:c9:7e:e6:59:57:7d:bd:3b:da:d3:f0:9a:ea:f6:
48:f2:e0:f2:1f:ab:e0:b5:c2:1e:34:ac:db:6d:d1:cf:af:2d:
d7:80:d7:cf:a4:5a:77:90:f8:d2:08:63:e6:90:57:8e:ab:4b:
a4:3f:b5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:37 2026 by rpki-client