
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json)
Hash identifier: OZOeC7rVBAdBD6UZQQfTGOnXJrXcjEm2nn0709D5srI=
Subject key identifier: 5E:60:F7:E1:F7:72:7D:20:59:C2:71:62:A7:EE:C8:DF:43:73:FE:6A
Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Certificate serial: 0C28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
Manifest number: 0C0B
Signing time: Sat 28 Feb 2026 19:04:59 +0000
Manifest this update: Sat 28 Feb 2026 19:04:59 +0000
Manifest next update: Sat 07 Mar 2026 19:04:59 +0000
Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: 8qikr40dzk8CXIaV+q5KZS0CNTdjVYzJ2g9qODS8B8w=)
2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: WohY8W0xB97fJlzc0NXwUcNoZJQ/eR2hTSMO+u9osbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3112 (0xc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Validity
Not Before: Feb 28 19:04:59 2026 GMT
Not After : Mar 7 19:04:59 2026 GMT
Subject: CN=69a33c5b-0037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:33:2d:6b:84:b0:55:99:9d:69:52:16:6a:b2:
dc:ce:6c:8f:73:86:00:65:4d:24:26:c8:11:08:43:
d8:b7:14:8c:3f:3c:bc:a5:b2:19:fc:d3:9b:f2:cb:
34:a1:9d:21:d2:ad:b7:54:85:6a:b8:1d:ad:3e:45:
8f:c3:02:07:ae:d1:ef:a7:0d:19:a6:0c:83:cd:4a:
1e:d6:8c:14:18:fc:10:e1:b0:4f:7b:45:ba:c4:10:
42:2d:2d:6e:52:49:bc:59:34:71:6c:55:91:bf:47:
ac:85:77:20:fd:81:54:40:53:2a:a0:bd:d6:4d:78:
e5:f1:88:80:18:ac:17:71:1c:9e:e8:5b:e5:9f:c7:
f2:ba:d7:6b:37:84:6e:23:34:07:b0:4d:a3:f9:7d:
87:52:61:d1:db:7e:91:a3:00:ff:fc:2a:df:d0:35:
55:4f:07:15:78:af:5e:8b:da:5c:99:29:09:00:cf:
e7:52:98:38:0a:86:de:c3:be:b2:97:f9:61:a3:43:
6f:be:80:3d:bd:5f:2d:fc:48:6e:54:1c:17:4a:9f:
25:2a:b3:65:a7:fb:36:22:eb:22:f9:05:96:e6:76:
b3:f8:b8:01:f8:be:65:1d:f5:83:44:40:e8:0f:a7:
9d:ad:b6:de:9f:db:7d:6f:61:d2:35:f1:7a:f1:52:
5d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:60:F7:E1:F7:72:7D:20:59:C2:71:62:A7:EE:C8:DF:43:73:FE:6A
X509v3 Authority Key Identifier:
keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:02:17:1e:e9:95:bc:57:54:b1:8e:2f:3f:ae:47:2e:e7:64:
79:36:0f:fd:a9:97:de:08:54:7f:85:c8:b4:f0:6d:61:33:ae:
b4:92:e3:d7:40:40:75:cd:d3:a3:60:ba:bf:00:1d:06:a9:73:
0d:93:1d:79:38:a8:a9:4e:77:1a:99:e6:0d:f4:0a:98:97:c9:
b5:38:ab:81:d7:25:59:16:64:50:d3:c8:f5:e8:02:1f:d8:41:
78:e9:ed:c1:31:94:76:b9:d6:79:1d:01:bf:a8:40:a2:d9:c9:
9e:82:04:4b:c0:7b:29:49:92:6a:e7:a3:b1:80:e5:3f:b6:a1:
63:e1:6f:02:9d:6d:a6:da:34:ff:f0:7d:4b:48:ef:8d:2f:44:
4e:35:9d:30:3d:28:ba:cb:3d:b3:1e:07:83:67:7a:24:19:9e:
cc:68:ce:11:9a:0a:1f:f2:3a:ed:ba:5c:4e:56:fe:b9:1b:c4:
8a:29:c2:69:82:eb:e7:98:0b:4b:a6:07:91:98:80:eb:e9:f9:
dd:be:d3:d6:c1:ec:cc:69:2d:6e:41:e1:51:f4:6b:a6:af:a3:
f3:f7:3a:68:03:59:d6:ea:16:8f:19:d5:b3:95:bd:9a:d6:da:
6d:48:a3:d3:d5:f4:ef:d9:6e:0f:0a:de:b3:50:5e:3b:df:46:
72:34:17:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZFQjExMTAvBgNVBAUTKEMyODg3OUZFQzEwQ0U5MjlDMUNGMkU1Qjk3ODg2RjFE
N0VBMTdDNUEwHhcNMjYwMjI4MTkwNDU5WhcNMjYwMzA3MTkwNDU5WjAYMRYwFAYD
VQQDDA02OWEzM2M1Yi0wMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6DMta4SwVZmdaVIWarLczmyPc4YAZU0kJsgRCEPYtxSMPzy8pbIZ/NOb8ss0
oZ0h0q23VIVquB2tPkWPwwIHrtHvpw0ZpgyDzUoe1owUGPwQ4bBPe0W6xBBCLS1u
Ukm8WTRxbFWRv0eshXcg/YFUQFMqoL3WTXjl8YiAGKwXcRye6Fvln8fyutdrN4Ru
IzQHsE2j+X2HUmHR236RowD//Crf0DVVTwcVeK9ei9pcmSkJAM/nUpg4Cobew76y
l/lho0NvvoA9vV8t/EhuVBwXSp8lKrNlp/s2Iusi+QWW5naz+LgB+L5lHfWDREDo
D6edrbben9t9b2HSNfF68VJdfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5g9+H3
cn0gWcJxYqfuyN9Dc/5qMB8GA1UdIwQYMBaAFMKIef7BDOkpwc8uW5eIbx1+oXxa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkVCMS80QzVGNzIwODMx
RjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZTbkJ6eTVibDRodkhYNmhm
Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dvaDVfc0VNNlNuQnp5NWJsNGh2SFg2aGZGby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkVCMS80QzVGNzIwODMxRjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZT
bkJ6eTVibDRodkhYNmhmRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGwIXHumVvFdUsY4vP65HLudkeTYP/amX3ghUf4XItPBtYTOutJLj10BAdc3T
o2C6vwAdBqlzDZMdeTioqU53GpnmDfQKmJfJtTirgdclWRZkUNPI9egCH9hBeOnt
wTGUdrnWeR0Bv6hAotnJnoIES8B7KUmSauejsYDlP7ahY+FvAp1tpto0//B9S0jv
jS9ETjWdMD0ouss9sx4Hg2d6JBmezGjOEZoKH/I67bpcTlb+uRvEiinCaYLr55gL
S6YHkZiA6+n53b7T1sHszGktbkHhUfRrpq+j8/c6aANZ1uoWjxnVs5W9mtbabUij
09X079luDwres1BeO99GcjQXdQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:32 2026 by rpki-client