
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json)
Hash identifier: wvREvvFpORz6vgkydraYi9eQ8PCWHXXaytb0FiAbMew=
Subject key identifier: B9:E3:00:1C:EF:1C:7C:99:55:5F:A2:6D:34:B8:CD:F9:B7:DB:66:F0
Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Certificate serial: 0C96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
Manifest number: 0C77
Signing time: Sun 20 Sep 2026 18:40:22 +0000
Manifest this update: Sun 20 Sep 2026 18:40:22 +0000
Manifest next update: Sun 27 Sep 2026 18:40:22 +0000
Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: 4Z5/G10Fs8Fn7asIE85ulNOZv94QVbG/aqrOpcUqKcU=)
2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: q0lqVS28SrU2+4MJeoLC9pzh7Qgf+qG7CEETocpWonk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3222 (0xc96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Validity
Not Before: Sep 20 18:40:22 2026 GMT
Not After : Sep 27 18:40:22 2026 GMT
Subject: CN=6ab02896-d8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:88:93:ac:2e:8b:7e:31:b3:30:6c:74:40:
18:ce:8b:80:c2:a1:61:37:11:5d:b2:75:3d:27:65:
5d:aa:ad:02:d3:39:b4:20:95:13:90:36:e3:dc:cf:
9d:a8:f2:f6:36:c9:24:2e:cb:e3:61:11:f2:e4:f4:
c4:0e:fe:4f:1d:1c:87:e2:4c:6a:84:5c:47:1f:2a:
96:6a:64:1b:14:0b:b2:89:b3:9e:42:10:fe:6e:b6:
85:cc:cb:0a:5a:c5:c0:62:5f:66:b8:1b:4f:6a:b0:
13:4d:12:17:4f:c5:95:95:ba:da:bc:2a:95:af:12:
24:6b:26:fd:69:62:90:82:17:68:b2:40:f4:94:0b:
a0:a4:a2:fc:1f:bd:2a:4d:d8:c3:33:0b:78:8b:34:
bc:50:0a:81:b7:86:64:3b:f8:98:7f:b5:e1:24:27:
3e:51:ca:54:71:74:6a:e4:e0:d3:90:aa:83:02:16:
4c:29:36:67:13:29:49:5f:cb:d9:d9:58:ac:e9:b0:
6c:61:d2:2b:27:e4:a6:b0:da:f1:4b:6e:8b:58:e8:
d7:4d:83:9d:a7:90:c0:d3:81:58:66:64:e6:95:bc:
cb:bc:59:3c:cb:ad:48:e9:0b:9c:18:f4:19:b8:6d:
bf:4e:4f:e9:74:1e:fc:86:75:cb:24:6d:bb:bf:51:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E3:00:1C:EF:1C:7C:99:55:5F:A2:6D:34:B8:CD:F9:B7:DB:66:F0
X509v3 Authority Key Identifier:
keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:38:46:df:28:ed:4b:ce:0c:b1:94:af:cd:58:db:5c:3c:ab:
5d:07:ff:8c:c5:ca:97:a9:c4:27:35:11:d7:2a:3a:e1:20:96:
22:a8:f6:7d:f6:76:41:ab:08:27:58:f3:36:34:76:59:81:79:
d0:ec:5f:c1:d4:b5:5f:64:32:ce:72:15:0c:e8:f0:50:9f:85:
7a:87:0e:ac:73:ff:8b:2a:7d:26:8b:d1:62:a5:6d:e4:45:8d:
d6:8c:0a:69:c5:de:d6:99:64:8d:eb:44:4d:05:19:76:23:fd:
82:64:43:d9:db:7b:e3:be:ec:c1:12:56:4a:ea:0b:ec:cc:36:
99:04:6a:d1:7b:3e:3a:04:dc:e1:81:3b:4b:9e:c0:9e:ed:d6:
c3:2e:40:04:98:1f:dc:c6:c6:48:26:26:20:ee:eb:cf:d2:7f:
9a:9b:03:ad:02:09:3a:20:a9:79:83:a6:bb:dc:14:e7:6c:75:
4d:a0:fe:d8:93:a2:af:ad:f5:e1:ed:1b:ee:75:4b:14:4e:29:
fc:ab:82:df:fa:d2:f9:68:87:76:57:b5:51:34:43:0f:3c:36:
0d:db:02:79:fb:71:41:c2:f8:e7:06:9a:65:a4:24:24:80:75:
2a:31:c6:19:89:03:6f:23:f4:d6:28:3b:f8:00:54:3a:ab:2b:
a2:c8:5e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:18:54 2026 by rpki-client