
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
File: whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json)
Hash identifier: nZfk5zWItv2dxuZnCxd93jwV7Ar9sAnmPeXe11G3ZFM=
Subject key identifier: 08:54:F2:8A:46:FF:15:52:F6:2F:FC:F3:4F:D5:6D:2A:C5:04:E3:F8
Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
Certificate issuer: /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
Certificate serial: 01A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
Manifest number: 01A0
Signing time: Fri 17 Apr 2026 03:57:16 +0000
Manifest this update: Fri 17 Apr 2026 03:57:15 +0000
Manifest next update: Fri 24 Apr 2026 03:57:15 +0000
Files and hashes: 1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: l5L3xuX9GBnSw1XQXd00wYNB9+HiuIbRxiHka5b/lQo=)
2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: wCp+IlbpvYciIPFriRIjYQ57dN5tnAhIJFx/hlE1UvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl
rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C167F, serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
Validity
Not Before: Apr 17 03:57:15 2026 GMT
Not After : Apr 24 03:57:15 2026 GMT
Subject: CN=69e1af9c-104f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:b2:92:29:32:36:1e:01:d4:d5:46:31:24:
03:f7:a0:62:1a:df:ae:3c:26:ef:c2:bd:21:f8:c8:
fa:92:5f:c2:c5:6e:ba:cf:ac:a2:42:78:47:c1:a8:
11:da:fc:1f:fe:67:ef:4b:de:29:9a:5e:1c:49:9d:
e3:fb:09:34:44:bc:27:1c:23:fa:78:a1:93:0e:63:
07:01:fe:a4:27:17:e7:f8:c1:cd:91:3a:40:e4:9a:
cd:39:59:b1:d9:87:80:44:42:6e:ac:66:88:ef:42:
ae:b3:03:9c:00:58:ba:1e:1d:d4:d0:f0:b1:32:5b:
ca:49:9e:c1:39:b0:5a:45:eb:08:6b:54:0c:48:e1:
1d:91:b3:d8:79:03:93:03:ff:b1:0a:e6:b1:2b:e0:
d5:9b:61:50:66:7c:db:8b:ad:a5:a6:98:c4:da:df:
b9:e4:bb:e4:9a:3a:b3:9d:e4:20:ee:3f:ce:d9:20:
12:7e:4b:98:f2:aa:64:ba:dd:4f:fb:1d:47:11:97:
09:50:43:eb:04:6d:7d:25:f3:83:6f:d7:a8:0a:cb:
5e:52:dc:21:0f:44:59:0a:4b:b1:b7:2b:e5:09:f6:
10:91:b9:3e:93:64:7a:26:d1:c1:63:94:01:b4:28:
80:63:ca:55:b4:6c:18:5e:2a:7f:82:9d:bb:c4:06:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:54:F2:8A:46:FF:15:52:F6:2F:FC:F3:4F:D5:6D:2A:C5:04:E3:F8
X509v3 Authority Key Identifier:
keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3c:bc:3c:ea:c5:43:83:81:f5:c9:84:a2:c2:a7:70:ac:8e:
a5:0a:66:48:ab:34:ca:2c:78:d1:2a:58:ab:9f:db:64:53:e8:
7c:a1:95:c4:cd:68:7d:ba:c2:d6:4a:7f:20:8a:4c:d1:74:17:
6d:b9:7a:da:a3:2b:2a:1c:9b:e8:eb:ce:58:46:1b:bf:7b:fd:
a9:c2:ef:86:ac:0e:b8:04:e0:4f:d1:01:37:b1:2c:2d:aa:5c:
62:bc:0c:58:b9:eb:d6:5b:11:75:20:0e:25:fe:ae:f3:2f:03:
77:af:4e:5a:af:a4:7d:9d:27:cc:a3:5d:ed:ee:c3:be:05:29:
00:a1:e4:d5:e9:89:84:ae:3a:78:bc:90:ef:1d:b9:fa:1a:98:
d3:ff:64:25:b3:33:e4:28:02:40:4e:5e:61:d5:b9:63:9e:7e:
5d:d7:82:b2:9f:39:bc:c7:72:d1:ef:ce:f8:8b:4f:dd:7c:36:
7e:e7:70:61:4b:08:d9:38:f3:ad:10:67:e3:0e:03:4f:66:5c:
c6:35:d9:41:b7:5c:ba:1b:3c:c0:54:0a:a7:65:44:ef:46:35:
e0:b3:a5:04:93:70:10:75:01:cc:79:97:97:95:79:ef:39:3b:
aa:3d:5c:d9:85:5d:64:27:50:fd:cf:a8:32:d6:38:eb:83:c8:
51:43:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:50 2026 by rpki-client