
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
File: wipR7M5tlu_1Mou8JblTGLTB2i4.mft (raw, json)
Hash identifier: 7cEBx3Ruvctj3Ry1T9/Ue6/V8jCO0oOaG3RAPJ7EmhM=
Subject key identifier: 43:37:89:E9:83:D0:76:4A:BA:14:13:29:41:48:B5:69:D6:69:12:9E
Authority key identifier: C2:2A:51:EC:CE:6D:96:EF:F5:32:8B:BC:25:B9:53:18:B4:C1:DA:2E
Certificate issuer: /CN=A91D74A6/serialNumber=C22A51ECCE6D96EFF5328BBC25B95318B4C1DA2E
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
Manifest number: DF
Signing time: Sun 01 Mar 2026 22:49:35 +0000
Manifest this update: Sun 01 Mar 2026 22:49:34 +0000
Manifest next update: Sun 08 Mar 2026 22:49:34 +0000
Files and hashes: 1: wipR7M5tlu_1Mou8JblTGLTB2i4.crl (hash: ceTvunnZ0nBO3HRMBR58KbbWvWVMMXKH/MhBQa4iH04=)
2: 048B6F32D19D11EFB536C03DC4F9AE02.roa (hash: WUFEXmKNIL3inky9xMfKCw+Qw+yh/+IZZQUCVmvnj88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.crl
rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D74A6, serialNumber=C22A51ECCE6D96EFF5328BBC25B95318B4C1DA2E
Validity
Not Before: Mar 1 22:49:34 2026 GMT
Not After : Mar 8 22:49:34 2026 GMT
Subject: CN=69a4c27f-f992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5b:61:d7:2d:df:48:77:e7:1a:41:d3:74:26:
45:cd:f3:ff:79:93:61:56:ae:88:03:8e:2b:21:ac:
81:b9:ff:86:2f:ac:12:40:46:84:6f:12:c1:5f:3a:
88:c5:47:4c:46:f8:66:be:10:7a:9c:d0:1c:c2:b4:
50:7f:53:8a:4e:b4:a7:dd:ff:94:c1:f5:79:d7:85:
db:4a:81:d9:96:4c:6f:a8:12:41:c5:47:14:b5:69:
da:20:ea:a0:7b:67:24:06:76:68:5e:4d:d1:5f:3a:
6f:98:72:7f:47:98:8f:98:36:8f:f7:db:53:bb:ce:
6a:b9:2b:23:0c:f6:4b:54:6c:3c:3c:07:48:b0:f8:
79:d6:e4:8c:1b:e8:75:c8:d0:09:e4:43:a3:3e:f3:
96:cf:2f:f6:c5:4e:26:f8:43:27:42:09:1d:47:43:
04:b2:ee:0a:91:66:ba:9a:15:d5:07:67:0a:2a:60:
1b:83:d2:19:9f:60:7f:81:b8:74:42:8e:76:78:43:
ab:fa:92:3a:36:9f:cf:55:1a:40:8f:b5:67:51:f9:
96:70:5a:88:a1:4c:39:6e:43:62:4d:86:0b:9a:75:
4b:9f:f5:d9:88:0f:b0:25:9a:42:53:96:28:c0:0e:
5d:51:5d:c9:9a:36:28:6b:0a:be:15:31:2b:ea:a3:
74:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:37:89:E9:83:D0:76:4A:BA:14:13:29:41:48:B5:69:D6:69:12:9E
X509v3 Authority Key Identifier:
keyid:C2:2A:51:EC:CE:6D:96:EF:F5:32:8B:BC:25:B9:53:18:B4:C1:DA:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:55:a4:64:30:a9:e0:77:43:df:f1:14:0d:54:1a:c3:37:37:
fc:46:e0:c5:d3:90:5b:5a:1f:5c:72:53:38:06:1f:6c:fc:41:
60:85:ed:e3:4d:09:b0:74:e8:86:eb:e1:4c:8b:3e:7e:65:e4:
ab:0f:7d:28:c7:b2:ab:70:7c:54:97:fc:6f:83:7b:32:4f:bb:
33:d5:8e:82:ea:39:4a:af:be:a8:2c:0e:16:c2:4b:f0:d8:73:
fa:64:47:87:01:9d:e2:18:0d:da:78:3f:cc:a4:ae:7b:e2:c2:
87:b1:ae:58:19:91:4a:05:28:07:f8:f0:56:09:cb:b4:74:5a:
3f:e6:92:3c:b6:50:66:08:9b:1c:ff:20:f6:8b:7b:10:3d:45:
6c:6e:b1:07:f7:6c:9a:9f:0d:c3:70:fb:a1:7b:95:c0:47:9c:
c1:bb:9a:0c:68:ef:d9:31:f1:3b:0d:ee:b0:d4:c9:8c:b0:80:
84:63:ea:83:fe:05:5a:e7:5c:5a:2d:44:a5:c8:76:94:2d:e8:
1d:00:db:fa:b3:b7:00:b5:4d:1a:b1:c6:90:71:38:f2:28:5d:
d1:7f:af:29:53:8f:e5:24:45:75:90:61:ee:d0:20:52:7d:96:
93:05:69:f8:08:4c:7a:00:de:e7:c3:3d:36:23:8d:37:2d:61:
66:19:0d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:05 2026 by rpki-client