
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json)
Hash identifier: VrjeSFXswqHhbwHU/m+cbm5fiZop0TAH968Alykal5g=
Subject key identifier: 3B:40:C3:0A:94:98:BB:36:A6:0F:DE:56:77:F4:6B:E8:57:29:D3:30
Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
Manifest number: BC
Signing time: Mon 02 Mar 2026 02:31:49 +0000
Manifest this update: Mon 02 Mar 2026 02:31:49 +0000
Manifest next update: Mon 09 Mar 2026 02:31:49 +0000
Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: tppQ55ES67QkPk6ZiMK5KfOsAQa2B9x45Ezu7g36Rqo=)
2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: e1prpIYuDZ5J7mrkW/azLYwyJt2qyvzcK3j1tu4Uieg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Validity
Not Before: Mar 2 02:31:49 2026 GMT
Not After : Mar 9 02:31:49 2026 GMT
Subject: CN=69a4f695-fffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:1e:8e:9b:92:77:a4:dc:b5:ba:dc:32:4e:
e6:1f:40:fe:a2:c0:e4:2c:52:a0:eb:40:2e:f9:bd:
bc:5e:ac:84:11:ae:48:e6:86:63:4c:3c:16:25:94:
d9:bd:aa:f5:22:16:12:05:89:ff:03:e7:f3:c6:70:
87:96:a9:1f:db:be:cc:56:9a:98:1f:54:5a:ce:ea:
fc:40:d7:05:01:8d:b2:12:c6:a0:7d:5e:71:50:66:
46:40:66:45:99:23:60:82:57:58:1d:ba:cc:e9:96:
43:b7:a0:bd:17:d6:48:dd:a7:d8:ce:c8:1b:58:20:
33:da:3f:8a:c6:0d:de:3c:65:5c:fd:6c:f3:f6:e0:
0f:55:95:75:e0:2a:b9:c4:52:e4:55:06:f3:6a:66:
c1:9d:b6:63:99:3d:33:d2:df:c4:69:62:96:69:42:
b3:5e:e5:be:c4:86:fe:ea:64:bc:e9:9b:7e:8c:0c:
1b:7f:0a:94:5a:2b:95:9b:78:68:42:a6:ad:25:0d:
3f:fc:8d:fb:78:ae:cc:6f:5f:56:a8:9c:47:ac:e8:
03:88:41:00:09:44:a0:cf:85:ab:f2:35:ef:65:58:
00:ee:d9:85:e3:60:8b:9f:68:47:b8:d3:66:56:fd:
85:84:3e:de:9d:22:8c:27:28:20:81:a5:a6:79:c9:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:40:C3:0A:94:98:BB:36:A6:0F:DE:56:77:F4:6B:E8:57:29:D3:30
X509v3 Authority Key Identifier:
keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cb:9c:74:db:c3:4c:5b:26:96:73:d5:75:61:8b:37:61:2e:
ad:e7:f4:13:cc:cd:4f:00:1a:5e:ba:83:16:cd:dd:e1:7e:a8:
2f:b5:ad:09:7c:37:48:b5:86:3c:80:86:9f:fe:1e:19:a8:fe:
19:72:e4:b6:71:97:36:34:1b:01:1d:b8:e9:89:14:0a:15:86:
04:19:c1:81:da:2c:18:be:6b:ac:ab:5a:76:43:53:49:05:22:
ff:f4:a8:7a:f8:3f:d6:64:89:89:44:0e:6a:89:ba:fc:d0:2d:
5f:29:45:4e:34:13:74:8e:a5:c1:e3:12:1d:73:e9:2f:b8:98:
4d:21:49:24:99:92:a9:3d:4e:85:82:13:f8:4f:da:75:3c:cc:
c1:7e:9f:fa:81:78:04:2e:bd:92:60:44:c6:ce:b3:b6:77:b2:
49:c5:4a:ca:cc:78:b1:48:27:3c:64:c7:4c:fb:c6:9b:07:b1:
99:74:c9:82:0e:86:70:e0:6c:39:66:b2:b2:a5:59:01:db:97:
99:1c:d4:be:de:59:b8:dd:8d:09:0c:0d:ec:f6:01:ca:f5:69:
5a:85:7a:3a:0d:cf:90:e1:8d:e4:c6:43:89:97:55:ac:02:56:
00:f6:4d:0a:f5:0b:99:06:20:6f:5b:99:9c:1a:60:30:41:28:
11:88:f5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:02 2026 by rpki-client