
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
File: wngM_VepmGmT2_bA1r3u92tFGXI.mft (raw, json)
Hash identifier: zsmtUyo9vPb4y2RXcem2p3IjOok5vFRwOgFoHJdABnE=
Subject key identifier: 42:87:1A:A4:D4:FB:63:30:89:F6:8E:36:8A:A1:EC:FC:E9:D1:A1:A2
Authority key identifier: C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72
Certificate issuer: /CN=A91E007B/serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972
Certificate serial: 0AF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
Manifest number: 0AE3
Signing time: Sun 01 Mar 2026 23:21:30 +0000
Manifest this update: Sun 01 Mar 2026 23:21:29 +0000
Manifest next update: Sun 08 Mar 2026 23:21:29 +0000
Files and hashes: 1: wngM_VepmGmT2_bA1r3u92tFGXI.crl (hash: LHNFDs3elZzlKa5UuSZIoBkW8r6xZ7CvtaWRxQY40JU=)
2: BCFA6274C35C11F0BCE51340C4F9AE02.roa (hash: lQozibohJLj2RAptBASbdJ9ze/ikklJpTxaMhDLGiaA=)
3: 828FBA521E3511EB800DB148C4F9AE02.roa (hash: O9CHKgTXxfL/soF0E7Tzsdmun/kmXkfdekoCO+vuINs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl
rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2807 (0xaf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E007B, serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972
Validity
Not Before: Mar 1 23:21:29 2026 GMT
Not After : Mar 8 23:21:29 2026 GMT
Subject: CN=69a4c9fa-87bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:60:a9:d9:0b:4b:9a:7b:93:e6:2d:0d:54:df:
75:a6:4f:c8:ff:cd:5e:76:7a:68:9d:7a:7c:b7:8b:
5d:ae:44:63:7f:f9:be:7f:f2:55:89:46:99:d9:26:
76:4e:2b:55:73:b1:d2:20:9c:38:59:10:2d:ab:87:
95:5e:09:1c:86:41:43:15:54:18:17:4f:ee:97:fe:
e4:4a:69:64:70:4c:82:5d:cd:86:f1:a2:cd:2c:7f:
14:2b:81:d8:a0:56:9d:b6:bd:b9:13:4b:21:2e:0c:
76:f5:31:9e:57:de:33:af:a9:68:b8:93:02:ba:b6:
0e:20:f5:23:e2:5a:2d:c8:02:77:0b:a2:6e:22:ff:
6b:1c:8f:e9:97:43:33:88:76:ab:94:0d:fe:8c:86:
c2:60:25:0e:ca:1b:c3:b8:2f:36:a2:51:24:44:d3:
94:95:ec:48:93:7b:d1:ca:4d:41:38:03:32:c6:9f:
f1:16:cd:46:f4:05:b7:c1:0d:96:0d:01:8e:0d:69:
bf:b5:b2:85:35:96:0c:37:e2:44:58:19:9f:8f:1f:
e2:c0:a5:b2:d8:14:95:05:b8:18:01:3f:8a:5c:09:
46:41:4c:e1:0b:2e:92:3b:7c:d5:76:4d:d6:c5:79:
71:c0:fd:d3:4b:d9:f2:43:d2:81:a2:7d:0b:a5:a8:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:87:1A:A4:D4:FB:63:30:89:F6:8E:36:8A:A1:EC:FC:E9:D1:A1:A2
X509v3 Authority Key Identifier:
keyid:C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6f:c3:8d:00:e9:d9:e6:8f:6d:73:5f:4d:75:24:ca:3a:a2:
46:f2:34:87:4d:60:d0:8e:ef:4f:b1:97:6b:d1:24:04:47:ff:
ff:9e:d6:24:7f:a4:dc:00:fe:d9:f8:c2:90:3f:16:c7:7b:f9:
d0:65:26:63:18:c6:d5:eb:c9:13:56:4a:be:9d:79:4d:6e:d5:
cb:6c:55:7f:11:e9:e5:09:77:a3:27:3a:e7:90:0a:e9:dd:bb:
85:3f:51:a2:51:71:49:4d:4b:04:58:fe:96:b2:2a:62:8f:49:
0d:b1:67:08:4f:2e:e2:a6:73:ed:ef:3c:4b:0f:04:11:e7:3a:
18:92:74:1b:ac:ec:db:60:43:98:25:3d:b0:08:82:df:77:5e:
70:99:d0:e9:6e:2d:24:98:44:77:29:dd:4c:a7:bd:f1:6c:27:
5b:1a:7c:c9:4b:79:b2:1d:ab:b8:a1:e0:ca:22:48:c1:63:af:
41:90:44:6d:0d:e0:07:c8:c3:a1:95:8d:89:14:56:56:43:2a:
68:cd:16:02:1d:a5:cd:5b:4b:fc:e0:06:17:87:02:75:ee:6c:
3c:4a:75:f3:13:b4:ba:cb:94:b3:dc:b6:60:30:84:51:04:de:
b6:0b:50:f1:4f:5b:73:f3:78:10:fd:61:a1:a5:76:8c:2f:2f:
a3:0c:2e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:15:58 2026 by rpki-client