
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
File: whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json)
Hash identifier: gYlxtnfQMzDTs0WyviCeu/4fk8hqBubHCbX7TQwY0b0=
Subject key identifier: B4:D0:4C:16:BE:24:25:EC:65:CA:01:24:95:53:EE:A7:2F:F1:4B:BA
Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
Certificate issuer: /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
Manifest number: 0186
Signing time: Sun 01 Mar 2026 05:29:04 +0000
Manifest this update: Sun 01 Mar 2026 05:29:04 +0000
Manifest next update: Sun 08 Mar 2026 05:29:04 +0000
Files and hashes: 1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: o/GHbjOhcvlDv9FpGVnzYWeUE8sze3nh/nqT0rZKqTM=)
2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: q05ljgath9EJ2Ml9Q3ZPGNUrePFu/Fa2fuhBhk1dNp0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl
rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C167F, serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
Validity
Not Before: Mar 1 05:29:04 2026 GMT
Not After : Mar 8 05:29:04 2026 GMT
Subject: CN=69a3cea0-1105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:75:8c:7d:35:22:28:b3:8e:91:2e:9e:0a:
c7:41:7c:df:de:2b:4f:16:cc:2c:fe:77:6b:ea:71:
9e:98:9d:77:33:dc:d8:b5:11:5a:9b:cd:0a:1d:18:
ab:59:a5:a7:9d:60:a7:d6:ff:f0:e3:81:89:f0:9f:
c0:7e:5d:bf:ed:01:fd:67:21:e0:4f:9f:ab:35:9a:
30:ef:f8:dd:b9:19:54:be:d7:93:4b:2e:8f:bc:75:
c5:14:0a:65:88:69:a9:47:e0:b7:f1:45:93:8c:a4:
cc:12:51:c2:3b:f4:7d:9d:85:b5:e9:4a:b5:35:3d:
67:34:f4:97:af:0a:cc:b5:cb:91:4f:ff:3e:e2:01:
dc:ae:cd:35:87:5d:18:20:b9:ea:01:56:d9:35:f5:
74:d5:27:dd:41:ca:ce:74:17:9e:54:92:43:2b:ff:
b5:c2:ff:5a:93:09:04:42:39:d3:9a:de:07:cf:93:
34:57:96:a6:c2:f4:ca:c3:28:49:b7:ea:6e:bf:1a:
30:13:92:bb:3c:ff:f6:b7:bb:ec:e5:04:60:93:b3:
5f:86:8d:f2:01:ea:b9:1e:b7:7f:1e:72:03:33:67:
da:bf:a0:40:0f:aa:8f:e4:18:ed:8d:48:19:3e:a1:
92:c7:40:d6:9e:2b:83:71:bd:90:c1:d2:c5:96:ad:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D0:4C:16:BE:24:25:EC:65:CA:01:24:95:53:EE:A7:2F:F1:4B:BA
X509v3 Authority Key Identifier:
keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:94:02:fd:47:c5:75:c0:7f:05:c8:f0:cf:ff:c9:38:9e:df:
08:cd:e8:17:53:cc:fb:d3:05:3a:22:f3:17:e1:b3:44:6a:e0:
6d:36:09:cf:a9:44:97:64:27:6e:4b:7f:99:e6:ef:2a:4a:58:
87:96:01:6d:13:22:cd:89:41:7d:61:75:25:de:9e:23:e3:24:
fc:fc:fc:83:93:05:44:9a:0f:5f:01:b2:ac:91:c1:f3:56:73:
af:99:68:c2:cb:90:d1:3c:ba:2f:45:5f:bf:23:5f:59:99:22:
5d:bf:ba:4d:fd:57:90:d6:0b:97:5e:83:24:e8:fa:2c:ce:d5:
fd:74:e6:e9:08:9f:3f:49:59:3e:69:f6:75:1d:14:05:1c:93:
2b:72:6d:29:70:f1:d7:0d:8b:64:6c:cd:2f:52:31:cc:92:f3:
e2:83:3b:05:c0:78:2d:dc:8d:0b:7e:5c:16:38:62:82:b7:77:
b0:d0:50:5e:0c:89:bc:19:6f:a5:98:2c:73:89:19:1a:e2:65:
9c:f6:68:da:3f:44:4f:ca:72:c3:1c:c6:5b:b7:5f:c5:3a:0e:
e8:be:b0:42:3d:11:98:30:9f:24:4f:da:d6:dc:4a:bf:2f:07:
fc:11:25:d1:9c:60:bb:07:8f:08:3a:c3:f3:31:31:e7:2e:77:
c4:94:cd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:04:37 2026 by rpki-client