
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json)
Hash identifier: CY62y735MneB7xdqvZTfjbFuz61Niz9OgBIKPOCV6Vg=
Subject key identifier: C6:60:B6:D9:59:4B:6E:2F:84:CF:FA:B1:73:66:27:23:BC:1E:F6:22
Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Certificate serial: 040D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
Manifest number: 03FB
Signing time: Sun 01 Mar 2026 01:21:17 +0000
Manifest this update: Sun 01 Mar 2026 01:21:16 +0000
Manifest next update: Sun 08 Mar 2026 01:21:16 +0000
Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: WdigGMyMJhePivLFmZDNOzIw2WX3b+JP2hmN5ZnfMlE=)
2: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: uBqvI5dq8qNrDbHw4p02iYakpWTkn0S51P6ziID2+EI=)
3: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: scTIVhqGYW6GoZyvhCkZ72zHa5qMbQB5MWHuWvi79lw=)
4: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: nfR34cWIXlmbnxZObF117xAPX2RJTODqf4QtFwTlL+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1037 (0x40d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Validity
Not Before: Mar 1 01:21:16 2026 GMT
Not After : Mar 8 01:21:16 2026 GMT
Subject: CN=69a3948d-35a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:d7:ab:d4:69:e9:bf:e6:7d:b8:66:54:d6:
dd:a2:53:ae:88:9a:03:a9:57:f5:1f:05:e5:e0:72:
ec:fc:06:5c:46:2a:07:01:fb:a3:d9:0a:7d:99:88:
76:3b:60:27:97:5d:50:ba:ee:cc:67:8d:73:26:90:
7e:a4:3e:90:52:9e:04:43:f7:de:c8:be:dd:0e:74:
39:78:59:fb:e6:67:0e:6e:d7:8d:fe:c2:ca:72:b2:
52:51:b9:39:af:8e:ae:d7:a6:d8:04:95:be:ed:6c:
ca:55:b4:d9:c4:e6:85:d9:a9:35:a3:e9:32:84:c4:
27:e4:68:a4:64:1d:37:db:f4:54:87:7a:1a:e7:c9:
84:98:a9:d8:21:e9:be:a0:bd:7f:a8:88:02:9e:fa:
65:58:28:bd:a5:2c:86:e0:b7:e8:88:d2:7d:1e:8b:
34:43:9d:8e:9c:e2:2f:ab:7f:0e:98:e9:df:53:48:
5d:25:24:3e:8f:bd:7b:63:25:4b:49:2a:67:3e:24:
f6:ae:8c:02:0c:7b:fb:b1:68:25:0e:57:3c:11:e2:
c5:2c:8c:23:31:8f:8a:bb:3e:40:2c:e1:59:b4:74:
74:6a:e4:ef:30:8a:48:c9:8c:c8:3e:cc:0d:7d:5d:
13:c8:30:95:75:8e:a7:ee:cc:8f:1c:af:6a:9d:33:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:60:B6:D9:59:4B:6E:2F:84:CF:FA:B1:73:66:27:23:BC:1E:F6:22
X509v3 Authority Key Identifier:
keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:f6:7a:d0:ce:88:3e:31:f2:00:88:2e:6a:f9:43:f9:e0:50:
e5:25:b0:eb:b1:97:b4:fd:6b:9b:12:b9:50:09:81:28:ac:f5:
6a:5e:12:14:29:6b:1e:7e:38:a5:d1:3a:56:e3:a6:ed:24:1c:
80:10:a2:73:4f:0a:c4:f2:36:18:5b:f5:f6:fc:92:1f:c0:8b:
77:09:8f:5a:1b:61:9d:e7:30:8c:8f:70:79:e2:2b:2d:79:9c:
58:3a:25:b8:a5:9d:05:d0:e6:ca:8f:d6:e9:b9:5c:9f:f8:40:
d4:a2:a9:a4:85:d3:67:a7:e8:b6:76:d9:ed:ac:8d:86:c3:1d:
18:4e:97:fb:67:4c:ba:fe:94:d3:9b:a0:22:0b:25:c6:4f:ed:
85:8d:b7:71:5b:70:69:f0:ad:a8:f7:45:34:bd:9e:db:39:d7:
ae:03:a6:d7:24:1e:f5:90:28:1e:5d:03:af:f5:55:88:af:94:
d3:9c:f6:ad:f2:e2:f1:b5:55:77:71:41:6c:ef:e5:86:1f:1a:
91:60:a6:e3:5d:46:50:26:9f:65:8a:8c:bf:c5:8e:ad:48:bf:
29:ce:e4:fc:15:ed:b5:f5:e7:3a:a9:fe:fd:9f:1e:c1:6e:bd:
bd:0b:6d:4d:ae:22:eb:30:f4:13:e8:f8:76:67:21:42:fa:6a:
a9:6e:5d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:43 2026 by rpki-client