
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json)
Hash identifier: 474yaPK/nWJYxtw3+K6F6+dJ3D9rlVZ7WvQkUtnfhwU=
Subject key identifier: 11:9F:A5:A8:94:D0:E0:17:1A:37:8A:8F:10:BB:CA:44:AF:A4:DE:3F
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial: 0644
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
Manifest number: 063C
Signing time: Thu 16 Apr 2026 22:38:38 +0000
Manifest this update: Thu 16 Apr 2026 22:38:38 +0000
Manifest next update: Thu 23 Apr 2026 22:38:38 +0000
Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: PmTUKCJEdIVZuL9PRvqDk2RGJJaoFCT9baX0UfZNWiI=)
2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: Tt66YBhWZceD9xi7CJ59HIwrlysDS4oNkVI5X7bqodQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:38:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1604 (0x644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Validity
Not Before: Apr 16 22:38:38 2026 GMT
Not After : Apr 23 22:38:38 2026 GMT
Subject: CN=69e164ee-bb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:40:e6:e8:6d:e4:6d:d7:ef:7b:aa:6c:f9:
01:93:8d:b3:95:8e:c2:25:a1:42:b4:e5:43:9d:fd:
e9:ac:a1:1d:e8:1d:89:4d:80:fb:f9:d2:77:21:55:
cd:8b:78:5b:58:04:a3:3b:77:76:94:ca:ec:5e:e1:
c0:cc:eb:b9:33:10:ed:35:d1:0f:cb:23:a0:3b:79:
a7:f2:83:b9:91:7a:37:e4:dd:95:e1:28:e1:8d:0a:
c2:b6:eb:c1:cf:ab:fa:70:55:e0:0a:4f:be:74:ca:
a1:5d:23:ef:60:00:52:96:3f:b3:79:fc:8e:1a:e9:
fb:91:bd:b4:07:67:0a:25:e8:6b:33:84:6e:e6:38:
cc:4c:cf:f1:25:c8:cc:52:9c:a5:55:87:33:4a:b6:
c4:c3:56:de:5e:22:0b:ac:24:9a:34:94:32:50:89:
43:ee:46:70:22:8a:22:04:a5:5a:54:f2:c0:1e:9e:
33:71:6e:73:52:83:d6:61:02:0e:1c:3e:d6:b6:ff:
57:3d:cc:c0:b2:55:d2:98:72:f2:b7:37:04:5a:fd:
0e:d2:f5:d3:02:88:d0:21:bd:f1:15:b5:f9:2e:bf:
e5:42:d5:34:1f:19:80:93:df:a9:df:61:fd:b2:8d:
d5:a5:5f:29:ad:14:b8:8f:0d:1f:84:01:de:92:c4:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9F:A5:A8:94:D0:E0:17:1A:37:8A:8F:10:BB:CA:44:AF:A4:DE:3F
X509v3 Authority Key Identifier:
keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1e:24:4b:77:45:5f:36:63:fd:2b:65:7f:4e:09:d0:87:4d:
52:e3:79:15:6e:d3:e5:e1:ab:e9:09:98:2f:54:d9:9c:ac:ac:
07:e7:1d:94:79:8c:87:b1:48:21:cb:e1:0b:7e:cb:27:bd:1c:
22:36:c9:29:33:e0:c1:f9:fd:1e:1e:02:a6:a4:82:7e:02:ed:
e4:de:cb:56:6f:c8:62:b1:87:43:b4:e4:fa:28:ee:77:8c:e2:
98:e7:17:4b:8c:cf:82:b9:ca:9c:33:db:b4:38:fa:d8:8f:87:
f7:2b:37:33:ad:fc:cd:80:df:f1:f6:dc:90:02:9c:ed:2b:aa:
bf:e9:81:a4:8a:ef:3c:4b:68:47:29:f8:5f:34:bd:e7:e2:4f:
e5:be:1e:8f:b1:f4:78:3d:90:47:16:81:b7:ac:3a:d0:3b:a0:
c3:bb:48:dd:e8:fd:aa:27:c0:ff:cf:b0:cb:77:d9:24:0e:e6:
87:44:21:8e:e9:85:3d:38:fb:81:d6:e8:c9:02:fc:d4:13:9e:
b7:4e:c3:35:29:57:8c:3e:fe:63:53:e7:ec:9d:52:5f:a7:ab:
d1:25:63:f9:d0:ca:8e:79:e2:33:9d:b1:27:1a:0b:38:4e:c7:
ae:68:53:17:22:91:58:da:97:da:8f:d4:35:ae:6c:40:f8:78:
56:7b:1c:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVGMjUxMTAvBgNVBAUTKDVBNjg0NDFGQjlEMUI3OTBGQzZDNzk5RTM5NTEwMUQ5
Mjc2MDk2N0QwHhcNMjYwNDE2MjIzODM4WhcNMjYwNDIzMjIzODM4WjAYMRYwFAYD
VQQDEw02OWUxNjRlZS1iYjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvqpA5uht5G3X73uqbPkBk42zlY7CJaFCtOVDnf3prKEd6B2JTYD7+dJ3IVXN
i3hbWASjO3d2lMrsXuHAzOu5MxDtNdEPyyOgO3mn8oO5kXo35N2V4SjhjQrCtuvB
z6v6cFXgCk++dMqhXSPvYABSlj+zefyOGun7kb20B2cKJehrM4Ru5jjMTM/xJcjM
UpylVYczSrbEw1beXiILrCSaNJQyUIlD7kZwIooiBKVaVPLAHp4zcW5zUoPWYQIO
HD7Wtv9XPczAslXSmHLytzcEWv0O0vXTAojQIb3xFbX5Lr/lQtU0HxmAk9+p32H9
so3VpV8prRS4jw0fhAHeksQyUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBGfpaiU
0OAXGjeKjxC7ykSvpN4/MB8GA1UdIwQYMBaAFFpoRB+50beQ/Gx5njlRAdknYJZ9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUYyNS9GOEVEOEI4QUQz
NUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1RDhiSG1lT1ZFQjJTZGds
bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dtaEVIN25SdDVEOGJIbWVPVkVCMlNkZ2xuMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUYyNS9GOEVEOEI4QUQzNUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1
RDhiSG1lT1ZFQjJTZGdsbjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPB4kS3dFXzZj/Stlf04J0IdNUuN5FW7T5eGr6QmYL1TZnKysB+cdlHmMh7FI
IcvhC37LJ70cIjbJKTPgwfn9Hh4CpqSCfgLt5N7LVm/IYrGHQ7Tk+ijud4zimOcX
S4zPgrnKnDPbtDj62I+H9ys3M638zYDf8fbckAKc7Suqv+mBpIrvPEtoRyn4XzS9
5+JP5b4ej7H0eD2QRxaBt6w60Dugw7tI3ej9qifA/8+wy3fZJA7mh0QhjumFPTj7
gdboyQL81BOet07DNSlXjD7+Y1Pn7J1SX6er0SVj+dDKjnniM52xJxoLOE7HrmhT
FyKRWNqX2o/UNa5sQPh4Vnscrw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:40 2026 by rpki-client