
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
File: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft (raw, json)
Hash identifier: ZjlRA/OBlWX+MQFBhk0rSzYZEgFn1TdLVwNfCYgdmEo=
Subject key identifier: 29:CF:A3:D1:40:0C:6E:58:BE:63:CF:8E:1C:6D:C3:94:F2:E3:45:E8
Authority key identifier: C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50
Certificate issuer: /CN=A91D44BE/serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
Manifest number: 0118
Signing time: Sun 01 Mar 2026 06:52:07 +0000
Manifest this update: Sun 01 Mar 2026 06:52:06 +0000
Manifest next update: Sun 08 Mar 2026 06:52:06 +0000
Files and hashes: 1: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl (hash: KbR1GUndEDdCnztGy9g/x56YkgNckkZTWmT4tl76lbY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl
rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D44BE, serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50
Validity
Not Before: Mar 1 06:52:06 2026 GMT
Not After : Mar 8 06:52:06 2026 GMT
Subject: CN=69a3e217-8501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:fd:05:81:81:02:8e:de:77:57:08:f8:e1:
cd:cb:3e:8c:bf:30:52:48:92:23:f9:8e:8d:eb:6e:
d6:d1:3a:1c:44:b3:45:d9:13:eb:8f:96:b6:79:93:
6f:ff:2f:19:4b:d7:ee:a3:33:50:a3:c1:d2:ff:9b:
08:e1:52:d8:75:5a:f3:87:56:b2:9c:8b:bb:d8:df:
16:e4:fc:f7:08:e5:ec:08:41:67:cc:9d:8b:4e:8d:
33:05:9c:4d:e0:3c:90:9e:d3:42:69:13:fb:7a:41:
e7:3f:ec:a3:af:bb:aa:dd:1c:e7:0a:bd:40:54:30:
62:55:3e:66:b8:0b:ec:a0:57:34:f5:b6:96:7c:95:
25:6f:da:60:43:52:82:1d:04:62:c5:37:e0:24:2c:
c7:0c:a8:d2:3b:a1:7c:08:8e:9e:f0:3d:77:b5:08:
1d:4f:04:83:3c:4e:8a:ab:0f:7e:0a:ba:28:d4:4f:
8c:26:46:c6:d9:ad:92:25:61:1b:2d:d8:9f:48:0c:
c2:06:79:e8:d9:dd:ab:62:0c:44:de:19:08:37:2b:
07:ae:ca:80:82:a4:ed:14:63:94:4d:5a:4d:a5:d4:
87:e9:11:09:e1:0a:1b:6e:1f:d7:3b:55:67:63:6c:
30:40:b3:20:f8:22:25:e1:0f:14:f0:32:8d:91:ea:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CF:A3:D1:40:0C:6E:58:BE:63:CF:8E:1C:6D:C3:94:F2:E3:45:E8
X509v3 Authority Key Identifier:
keyid:C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fc:9a:42:af:ec:d6:c9:2b:f4:f0:b2:3a:5e:bd:ed:28:da:
8a:7b:39:22:73:29:52:e6:2c:f8:47:cb:6e:fa:b7:e2:f4:c7:
00:75:9b:76:94:13:55:2f:e5:85:cb:2d:60:f7:f9:c6:1d:36:
78:01:21:64:4f:e3:58:2d:21:d3:39:89:58:8e:f1:5d:0d:c0:
97:ec:16:95:83:82:f0:af:60:7d:83:b9:6e:ec:b5:51:74:60:
ad:68:e3:81:c1:cc:35:dc:bb:c3:61:00:a6:60:bf:a1:0d:04:
bb:f5:9a:c8:b6:4b:a0:32:b7:aa:5e:7e:47:87:fc:c1:16:6b:
ff:7f:6c:d8:21:37:9e:59:b2:c0:95:f6:21:96:53:d0:33:6c:
21:72:41:d0:fd:7f:5b:b3:f8:c5:c2:2a:d6:2c:ff:b8:02:44:
7c:ac:22:b0:4f:d5:cc:86:8d:43:cf:c9:11:f6:e9:22:8f:e5:
3f:1d:b0:61:96:14:8d:4f:87:57:98:7d:2a:f1:d5:41:db:2c:
69:31:fa:fb:b0:8c:c8:c1:58:c0:5f:d9:53:ba:f4:c4:cc:24:
af:31:92:7e:e2:59:20:15:70:9a:ad:8e:37:eb:98:66:d7:64:
73:35:77:7d:56:fc:83:36:44:90:70:1b:21:f9:eb:c2:c7:b6:
c2:82:de:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:32 2026 by rpki-client