
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json)
Hash identifier: Z7yH45FUSSffc21x4f9B+tP2FXtSoiGx7Nv7UBE21r4=
Subject key identifier: 7E:3F:6B:D1:8F:91:C5:C1:6F:A2:F1:1C:4E:30:65:76:C0:3E:F1:42
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial: 0698
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
Manifest number: 068F
Signing time: Tue 22 Sep 2026 22:11:22 +0000
Manifest this update: Tue 22 Sep 2026 22:11:21 +0000
Manifest next update: Tue 29 Sep 2026 22:11:21 +0000
Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: 7ivu3i3c8ogTZgqXtqjDoaVry6DrkhLZrfnviPoMGuQ=)
2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: xX6xLmXsGMhA6ynOHDJr+09/J6zrlE/mAc8SSCuWzQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1688 (0x698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Validity
Not Before: Sep 22 22:11:21 2026 GMT
Not After : Sep 29 22:11:21 2026 GMT
Subject: CN=6ab2fd09-47e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:db:92:95:d4:f0:04:ab:35:9b:ed:0c:22:
10:89:7f:5b:2c:6d:8d:d7:21:4f:10:1a:18:d0:83:
e9:70:97:53:0d:81:29:71:7b:e1:e0:22:d2:a3:c0:
1f:12:56:fd:c9:1a:23:9e:53:29:7e:07:7a:c5:8a:
3b:34:62:fc:5a:e7:e8:e8:01:bf:98:59:57:1b:c0:
51:51:5c:2a:07:eb:ca:4f:cd:90:73:b4:a1:ca:ab:
f7:35:55:a7:7a:15:69:52:cd:3e:01:98:18:15:84:
52:79:0e:68:33:98:cd:6a:67:19:62:46:6a:0e:fb:
1e:94:86:b8:93:90:ed:5e:f8:9e:ea:89:1f:69:ed:
0b:0e:ee:04:58:04:1d:35:6c:7c:87:b3:ac:73:b2:
f6:43:76:8c:91:fa:bb:66:1a:6f:af:78:b0:89:8c:
1e:51:2c:2e:ab:14:f1:59:eb:09:0b:5a:f8:02:c9:
5e:21:68:3d:f2:39:d3:b8:db:41:c0:f8:3a:27:70:
42:9b:39:a5:44:06:7a:e2:f8:5b:a4:0e:40:e5:d8:
ee:bf:aa:b6:bb:b8:40:a8:fe:cc:1a:40:aa:34:60:
28:d4:33:a3:f1:55:a5:83:17:56:f4:5d:a6:b2:31:
f0:32:0f:f7:a5:de:60:49:11:cc:98:60:0e:06:28:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3F:6B:D1:8F:91:C5:C1:6F:A2:F1:1C:4E:30:65:76:C0:3E:F1:42
X509v3 Authority Key Identifier:
keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:9a:ad:01:eb:3d:00:5f:f8:8a:f6:3e:90:bc:af:e7:7a:99:
b5:96:ac:f2:0e:9c:a0:78:73:55:68:14:ac:7f:6a:01:eb:f5:
58:41:5e:a8:37:b4:b3:ef:d1:bb:a3:58:32:2e:12:fc:f4:5e:
08:df:88:66:0f:fa:fd:34:d9:2a:af:55:e8:40:7d:17:dc:d8:
49:fb:f8:86:f8:09:c6:1f:5a:3c:ec:67:ef:c6:cf:b6:e3:b7:
8b:95:4a:93:6e:db:b5:8c:bc:e8:c8:fc:d2:a0:aa:9f:15:b2:
f2:42:0e:65:05:55:2f:34:51:71:c5:33:6d:d3:ff:20:50:c0:
8f:92:c7:39:fd:e3:69:a5:f3:0f:60:32:c7:1f:47:1f:a4:ae:
b5:a5:42:21:53:db:30:fa:4c:fd:69:a0:2b:46:7f:46:3b:d8:
41:dc:ef:04:fb:bf:b5:3f:55:dd:da:ab:c2:70:bb:0e:44:e6:
e2:47:9d:2d:74:11:a1:18:d8:00:ef:5b:9e:ca:21:4e:7e:6a:
6d:c0:b6:fd:13:a0:51:2c:dd:d9:06:74:e8:d4:0e:c2:53:f4:
b5:fd:73:a4:63:45:1c:39:d8:33:52:a0:1d:51:6b:c0:93:cf:
35:28:60:c9:f8:9a:8f:56:ca:cb:46:9a:57:7c:9f:a1:9d:3b:
2a:c7:f3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:21:35 2026 by rpki-client