
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json)
Hash identifier: 0GnQ3enIWZHENGFFf0+mK9Q+48ARDbETBSHiHyXcDco=
Subject key identifier: EE:B0:0F:56:D7:68:50:49:7D:A9:A0:E9:C8:D9:56:42:51:51:6B:2B
Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Certificate serial: 0C46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
Manifest number: 0C27
Signing time: Thu 16 Apr 2026 18:45:00 +0000
Manifest this update: Thu 16 Apr 2026 18:44:59 +0000
Manifest next update: Thu 23 Apr 2026 18:44:59 +0000
Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: djFmPetCQZRZC95y3jZ73Fk0ymXh0A7XQan++ipoafM=)
2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: q0lqVS28SrU2+4MJeoLC9pzh7Qgf+qG7CEETocpWonk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3142 (0xc46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Validity
Not Before: Apr 16 18:44:59 2026 GMT
Not After : Apr 23 18:44:59 2026 GMT
Subject: CN=69e12e2c-5edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:7b:44:3a:b3:5c:88:ac:ca:29:4e:7d:52:
e2:33:91:58:69:41:1f:7d:f5:cf:ff:f3:cf:9e:4f:
31:d2:5e:f6:5d:7c:d6:23:44:c9:3b:48:c0:ba:16:
08:31:fd:f5:11:22:04:20:90:74:5a:8c:dc:87:84:
87:be:ca:c2:2e:09:f1:2e:e2:66:d8:3c:d3:f3:82:
94:df:de:26:ad:68:ce:56:08:a3:e1:89:d5:a2:cf:
48:24:8d:fa:a3:1f:5a:25:b9:74:15:71:47:3a:35:
99:2d:75:4f:a2:0a:a9:2e:5b:12:a1:33:3a:18:e9:
ac:7d:de:e0:16:c7:b2:42:e4:8f:18:14:08:c6:52:
ad:a9:af:21:f3:b7:2b:03:97:16:e3:8c:74:58:26:
33:fd:21:25:1f:96:1c:f3:b4:49:91:11:b4:e0:42:
b9:5b:12:d4:5f:17:0e:6e:6a:21:85:1c:df:68:0c:
60:3e:b8:0e:f3:1a:65:04:ef:db:7f:48:ef:c1:f4:
fa:80:86:4e:4f:2d:5a:92:25:15:71:69:56:ea:06:
53:f0:dc:ac:81:d8:3b:14:e7:1c:b5:74:54:86:46:
4b:c9:1c:01:79:b1:65:5b:fc:05:39:2e:86:f4:cc:
4e:31:b5:80:5d:12:ce:60:db:cf:c4:bd:c3:3f:d3:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B0:0F:56:D7:68:50:49:7D:A9:A0:E9:C8:D9:56:42:51:51:6B:2B
X509v3 Authority Key Identifier:
keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:5a:ff:80:cb:7d:99:8e:0a:cb:03:5c:c8:d6:95:be:f4:fb:
c8:50:67:0b:5f:23:75:5e:44:c1:71:16:cf:b5:3a:6e:f2:7b:
96:d5:a5:d3:23:bc:ff:35:b5:92:b5:bf:0d:2e:ff:3c:9c:64:
5e:55:63:46:16:b9:2b:bd:48:37:d4:78:9a:93:ea:c6:07:61:
17:70:68:19:5a:9e:4b:21:23:78:6c:df:eb:ba:7c:ca:ac:8c:
fe:4f:09:46:5c:b1:cd:95:a7:b9:77:5c:f3:73:44:dc:64:1b:
20:cc:1b:37:3a:e0:48:68:48:f7:59:ef:3a:06:42:c5:8d:39:
8f:67:28:a5:02:fc:ed:04:3a:5d:0b:8d:f9:ff:a8:97:a3:e7:
eb:28:c6:6a:70:03:06:c2:68:11:72:6e:da:63:df:8d:09:56:
f1:40:21:90:43:b3:2d:a5:cd:4f:35:a7:18:4b:49:65:cd:16:
d8:52:0a:0d:57:39:de:44:54:55:9e:df:e7:42:92:d5:9a:cc:
2a:c3:6a:05:0c:c7:8e:c0:c9:ea:bf:94:44:97:64:a5:9d:ba:
29:b8:ab:b3:ed:7b:d7:64:fb:2b:ea:c4:7c:99:14:82:8c:5b:
b9:93:4f:88:80:42:86:8c:1d:da:24:d1:27:b9:b2:e8:d2:ec:
c0:19:58:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:11:43 2026 by rpki-client