
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
File: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft (raw, json)
Hash identifier: gHJsQZAy4P5d8vY4OTWyX+8dUYia+5AeLqVw4+1FLy4=
Subject key identifier: 4E:50:02:FE:87:78:3D:91:40:0B:F1:A1:E3:CC:A2:BC:4F:79:FF:E2
Authority key identifier: C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50
Certificate issuer: /CN=A91D44BE/serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
Manifest number: 0182
Signing time: Mon 21 Sep 2026 04:36:20 +0000
Manifest this update: Mon 21 Sep 2026 04:36:19 +0000
Manifest next update: Mon 28 Sep 2026 04:36:19 +0000
Files and hashes: 1: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl (hash: yiYHzvUvjjfYG4aXunDsZGS+i131vANkscBWy8TQbqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl
rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D44BE, serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50
Validity
Not Before: Sep 21 04:36:19 2026 GMT
Not After : Sep 28 04:36:19 2026 GMT
Subject: CN=6ab0b443-cff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:48:7c:9e:ad:47:57:83:3f:97:43:8e:e7:
39:66:a7:ee:22:4c:e2:65:df:0f:13:e1:a6:17:56:
be:e9:1b:1b:06:1d:a0:a8:ea:e5:af:a8:b6:33:4d:
08:0f:a0:12:32:c5:8c:db:3a:d3:0c:d2:0d:11:a3:
4a:99:0b:8a:41:27:96:53:38:b4:c9:ba:e0:bb:d5:
ec:d9:f2:88:e6:60:0e:e7:19:b1:e4:d0:58:d1:6d:
3a:b8:e1:20:21:3b:b0:de:7f:e4:01:57:5b:d5:75:
de:de:8f:8d:dc:f4:fa:a9:1f:f0:34:d6:d1:57:7c:
0e:f7:87:cc:d5:99:4a:c9:03:8d:42:c2:65:3d:45:
32:43:b4:19:4d:2e:1e:87:12:b8:b1:bd:1c:51:a1:
30:7b:49:16:2d:99:27:c1:1e:c8:cb:3d:f9:ba:89:
78:33:21:1f:3d:5a:f5:f5:ca:38:68:3e:d9:6c:0b:
d9:d9:09:8f:92:5b:3f:71:e7:fb:0a:20:0c:5c:62:
0b:d1:c1:03:de:73:6c:48:eb:22:bb:4f:71:66:af:
fb:e8:c1:cd:16:fa:91:c7:7e:2e:89:3a:ab:bf:e7:
b1:a1:ce:f5:6a:f5:38:0a:10:eb:c5:e4:49:44:aa:
c7:d8:9d:73:bb:08:e3:3b:ee:ab:22:89:67:35:b9:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:50:02:FE:87:78:3D:91:40:0B:F1:A1:E3:CC:A2:BC:4F:79:FF:E2
X509v3 Authority Key Identifier:
keyid:C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:16:90:2c:d9:48:56:4a:a8:cb:c2:05:ed:7b:1c:33:3d:55:
f1:a4:00:29:6d:6d:3c:ac:1a:fc:4f:b3:73:ed:f4:3b:2d:0b:
c8:de:f4:06:ea:a8:69:79:e2:f5:44:6a:81:1e:26:19:83:b8:
23:e2:a7:08:2f:58:0f:40:30:d7:00:5e:e4:43:d3:1a:10:de:
a6:dc:8d:60:98:4b:27:f5:9d:72:4d:75:a5:3c:59:56:e0:40:
32:41:b6:f2:70:02:7a:c8:75:9d:81:e5:09:0a:89:53:22:42:
79:87:df:9e:c7:4b:0b:05:e2:96:2a:e4:bf:1b:a3:ad:bc:c2:
33:be:0e:5c:3a:98:49:3e:e1:83:88:29:d2:10:29:dd:9e:77:
06:28:9c:1b:2d:67:3a:d6:73:99:82:0d:30:da:e9:3a:55:66:
f4:6a:5e:52:0a:9f:8f:ae:0b:76:8c:c6:a4:5e:c0:54:bb:5a:
36:44:41:03:d4:28:3d:61:61:b7:23:e2:0f:32:9f:56:09:d8:
64:89:38:d0:8b:5d:de:ea:7e:28:6d:47:b9:ba:b7:82:0a:26:
9f:3e:15:10:ac:4b:5c:c5:3c:d6:47:48:59:bf:81:3c:30:b5:
1a:43:88:6e:5a:36:04:cf:b9:ca:71:13:9a:2f:cc:d4:c0:db:
a4:8f:79:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:17:24 2026 by rpki-client