
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json)
Hash identifier: acOWMAWtaKgUWlBP4g4cQNPcMEkReCy88WhJyOgvZcU=
Subject key identifier: 3E:EE:74:9A:40:4C:66:7F:6B:1B:CE:10:8F:3B:C9:5F:C1:F0:FB:02
Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
Manifest number: 0126
Signing time: Sun 27 Sep 2026 06:18:03 +0000
Manifest this update: Sun 27 Sep 2026 06:18:02 +0000
Manifest next update: Sun 04 Oct 2026 06:18:02 +0000
Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: tBW9ihAOW03h9ngv9kZR9wJiScPMc37glAEchKcw3NQ=)
2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: e1prpIYuDZ5J7mrkW/azLYwyJt2qyvzcK3j1tu4Uieg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 06:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Validity
Not Before: Sep 27 06:18:02 2026 GMT
Not After : Oct 4 06:18:02 2026 GMT
Subject: CN=6ab8b51b-b0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:34:8e:9d:7a:a3:88:0f:40:69:90:e7:30:
08:3e:c8:7d:fe:9b:e0:ff:77:bf:c9:df:e4:ec:0d:
e0:0a:b8:80:72:03:f1:ce:2d:f1:b1:f0:2c:ff:24:
cc:e9:5b:4d:c0:b5:c4:f2:6b:5f:05:89:be:9e:17:
39:bd:ae:f1:5c:ee:62:09:a4:f6:d3:bb:0b:21:26:
16:eb:b9:b4:15:87:fb:9a:1b:94:06:74:11:12:72:
15:42:ca:77:26:8a:61:79:43:45:48:60:9a:62:4e:
88:7c:dd:60:6d:65:07:8c:ca:32:b9:ff:ef:3c:66:
7f:27:41:5a:b1:ff:c1:3e:34:54:d8:e5:09:ab:6e:
3c:c1:88:0a:12:81:00:10:25:4b:a4:3d:0e:c2:9a:
81:b0:f7:eb:62:ea:8c:14:8b:12:37:be:0c:1d:ff:
32:ea:83:a3:84:22:ba:56:9e:3c:27:21:ed:95:49:
8b:e2:84:17:26:37:31:80:7c:07:a8:ca:cf:34:21:
39:ab:66:c1:6f:ef:7e:66:2d:0e:17:d6:38:e6:27:
b6:c8:b5:2f:0c:07:87:72:dd:38:48:7c:92:34:8a:
fd:aa:d9:08:1f:17:66:b6:e8:a7:c5:cb:ce:44:b7:
cc:20:2c:b0:89:c1:f7:2c:3c:c8:66:2e:27:d0:10:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EE:74:9A:40:4C:66:7F:6B:1B:CE:10:8F:3B:C9:5F:C1:F0:FB:02
X509v3 Authority Key Identifier:
keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:65:70:20:a7:ea:49:9c:47:93:32:84:b6:4f:0e:63:80:d4:
a4:2b:d4:15:22:51:66:80:02:b4:6e:57:ed:3d:f2:02:20:6c:
8c:3d:7d:42:75:d9:d1:da:ba:dc:c7:16:19:b9:2b:b3:3e:8d:
a2:19:71:a0:af:f0:96:5f:86:11:37:45:8b:4e:2d:f7:cc:a8:
c0:9f:8e:56:7b:5b:e2:4c:3f:1d:ce:4c:4d:34:37:4f:7e:5c:
fb:ca:33:e1:e7:7f:f4:7c:d7:69:74:d2:a4:f0:30:f4:56:8e:
9e:f4:eb:04:54:2e:36:aa:1c:98:93:21:f7:30:e2:e0:e5:79:
89:41:6b:19:05:e9:b4:60:d9:17:9b:5e:3b:b0:c4:e2:9a:9d:
2d:e0:92:48:12:62:80:36:af:ee:5a:d4:e0:1a:64:c8:28:a0:
a7:62:51:17:c7:3e:ec:23:75:ff:d3:67:bf:3e:33:4a:49:a8:
79:37:b8:06:4f:a1:c0:7d:5f:a3:7b:ea:5a:6c:92:3d:2a:d8:
47:7a:b4:da:0c:1f:34:3f:22:b6:1c:9c:49:17:79:cd:60:f6:
11:0e:56:8c:73:9d:6f:df:93:f6:70:05:db:1e:75:95:30:39:
98:54:05:b7:b2:39:51:36:c8:25:3b:ee:8c:6b:3e:8b:f7:7e:
5d:20:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:50:27 2026 by rpki-client