
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
File: wsFz12JIhbwL1vwZPvvO6VQ_okM.mft (raw, json)
Hash identifier: OFbSMShPnZVoU4h97ooHpOzQyJETvMSSkgbmBcLZ3E8=
Subject key identifier: E9:37:A2:AA:17:61:2E:FB:56:C4:F7:6E:88:E6:BB:03:5B:FA:D4:9E
Authority key identifier: C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43
Certificate issuer: /CN=A91C8DF1/serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
Manifest number: 49
Signing time: Sun 01 Mar 2026 09:43:48 +0000
Manifest this update: Sun 01 Mar 2026 09:43:47 +0000
Manifest next update: Sun 08 Mar 2026 09:43:47 +0000
Files and hashes: 1: wsFz12JIhbwL1vwZPvvO6VQ_okM.crl (hash: ErnmX87YLXe/qhNTnJBAuaDLUzz43If+g2MUzH/a1Z4=)
2: BD37307CAAD011F0ACA9F95DC4F9AE02.roa (hash: Pzx4cLp6LQnYJAZ7Og6n8jVJWupopojg1hWD2Hxu8W4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl
rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DF1, serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243
Validity
Not Before: Mar 1 09:43:47 2026 GMT
Not After : Mar 8 09:43:47 2026 GMT
Subject: CN=69a40a53-54b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:b3:2e:d5:b0:aa:b1:9a:f2:4a:21:be:1f:
57:9b:a4:25:15:b4:1e:59:75:9f:05:f0:1e:a3:9b:
05:66:81:fb:53:15:b0:92:48:04:fe:04:74:f2:96:
61:b6:b7:0b:b1:32:7d:9c:0e:33:6f:00:ef:87:74:
7c:67:bb:3e:18:98:07:20:a5:4b:6a:db:9c:3a:e5:
a9:00:17:27:2e:c1:8c:87:d8:ae:27:12:ca:b8:c9:
1f:b5:69:57:23:70:c4:4a:09:21:7a:c1:0c:4e:9c:
ae:12:dc:36:53:96:b4:72:0e:f4:c0:27:48:03:a2:
22:f1:25:94:c0:38:24:c9:ec:d9:aa:45:b8:1f:2f:
ac:b6:c8:a0:1e:77:04:13:1c:a4:09:87:d2:f1:86:
f2:4c:e8:51:34:d5:93:12:27:ff:da:4e:fa:a2:ad:
fa:96:2d:43:3d:26:23:0a:37:74:68:d0:be:9e:70:
09:32:af:32:db:6a:3f:1f:b2:c7:99:4d:12:e6:c6:
8d:13:a2:26:d2:56:8b:a1:5f:7a:aa:cf:90:ed:c9:
58:7c:03:48:c2:6f:77:7c:c4:ca:05:da:aa:a7:3c:
76:c5:24:1e:ff:2d:44:86:d8:08:93:20:0a:71:15:
a2:3c:74:06:83:a7:0c:8d:d9:b9:6c:36:c9:6f:68:
55:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:37:A2:AA:17:61:2E:FB:56:C4:F7:6E:88:E6:BB:03:5B:FA:D4:9E
X509v3 Authority Key Identifier:
keyid:C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:ef:96:79:29:be:bb:d1:44:68:1d:22:39:36:4d:29:0d:a2:
0c:bb:0f:8c:a9:31:9b:ae:78:af:79:58:67:b4:04:a0:60:24:
a6:60:41:96:74:42:71:44:ad:57:05:c4:44:ac:17:87:8d:b1:
54:39:6c:7f:f6:de:8b:ec:70:37:69:76:be:61:2e:16:68:d1:
19:34:7d:76:24:da:44:a4:83:42:96:94:83:2c:52:2b:d5:d4:
0c:87:7f:07:a9:ea:db:9a:f2:b8:05:6a:4b:e6:84:e3:bd:f7:
6f:fe:72:b8:fb:92:56:dc:d7:7d:81:12:41:09:14:e5:8a:f4:
f4:e3:e9:a8:a0:4b:f3:5e:35:6c:36:27:24:d1:41:c6:65:1b:
4c:0c:2d:88:f7:d5:cb:af:13:35:f9:28:60:41:d8:b0:05:76:
e0:11:85:b3:1d:8c:fb:c7:fe:d9:4d:06:9d:47:d0:65:0a:ee:
f0:f8:36:07:32:32:9d:ef:d9:77:e9:88:b9:fc:17:e1:0b:82:
74:17:59:ed:8e:c5:69:b5:ac:ba:d0:70:f5:1d:b4:07:38:f5:
31:6e:62:8e:74:7b:86:eb:38:4a:eb:30:75:84:2b:26:1c:ab:
21:f7:19:e2:4e:89:af:f7:f1:5c:9b:53:18:67:8f:3e:2c:79:
5d:0c:d1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:16 2026 by rpki-client