
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json)
Hash identifier: VIT5X7l1pnTqIdU3yN4TT6Ghs6vIKsex4xE79Gks51M=
Subject key identifier: F1:01:1E:00:BE:E1:D7:FB:5D:72:CE:32:F3:F0:AB:48:D1:6C:14:07
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
Manifest number: 0254
Signing time: Mon 02 Mar 2026 01:43:48 +0000
Manifest this update: Mon 02 Mar 2026 01:43:46 +0000
Manifest next update: Mon 09 Mar 2026 01:43:46 +0000
Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: BkyCNGBEr880uBwk+beS0PRjAcNmMAZTgw9RR6U4Y38=)
2: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: lA0GUtoywdP3W0s4fPvZbdcVPY5+3iGjlHV5SalUa/g=)
3: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: 0AcNJYbPABCo7geahEBKTRdq6wGpuolAL2JTEM7M9Jk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Validity
Not Before: Mar 2 01:43:46 2026 GMT
Not After : Mar 9 01:43:46 2026 GMT
Subject: CN=69a4eb53-007c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:a9:21:b5:29:c9:d1:a8:2e:73:b1:fe:d7:
32:80:0d:da:9d:cd:62:9d:49:7a:2a:61:e2:97:db:
ff:ba:24:54:b5:4d:30:03:3e:a0:45:6b:88:75:31:
04:d3:a9:90:81:9b:b9:a7:bc:9d:c1:7a:62:43:78:
44:f3:98:1f:60:2e:b9:65:dd:d6:5c:18:b4:4e:21:
05:b0:b3:86:00:5e:9b:db:93:ae:dd:bd:0c:97:84:
b2:31:14:d0:f4:cf:c9:4b:a8:c6:b0:f5:f3:95:6c:
61:e9:f8:a9:fc:56:3a:d6:50:15:4d:e7:44:12:00:
97:b0:3c:fd:51:69:64:ef:48:3b:37:7b:93:08:4d:
dd:d1:29:26:b3:90:a0:01:5a:84:c7:de:7c:b8:e7:
77:a4:50:7b:33:b5:82:49:31:13:3f:8d:3d:4d:c0:
2a:e2:16:83:6b:c8:d6:29:56:c6:17:8f:0d:b4:45:
b5:b4:f1:55:4a:08:77:ae:0d:1c:52:a2:77:d3:9f:
02:d4:d0:c1:6f:ce:d5:0f:6d:e7:44:23:12:ef:8d:
b6:87:ee:22:a3:cb:f4:7a:8c:69:2e:4c:ed:4c:d3:
89:a4:14:c7:34:27:20:eb:93:90:60:77:12:80:54:
e1:e5:bf:99:f4:11:30:48:09:29:c9:f2:f2:cc:9b:
7e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:01:1E:00:BE:E1:D7:FB:5D:72:CE:32:F3:F0:AB:48:D1:6C:14:07
X509v3 Authority Key Identifier:
keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:49:4d:64:40:b1:1e:65:ec:c7:27:49:73:60:6b:e5:9a:b6:
94:4f:49:8b:cc:65:65:69:05:6c:73:a3:cb:a1:ac:fa:6e:04:
29:59:18:a6:a0:af:ec:45:a3:00:bf:eb:d3:22:67:8b:28:1c:
7b:3e:b8:64:3b:29:02:2f:1b:c6:50:17:ee:53:12:f8:8f:cf:
20:d8:0a:fa:87:d2:a7:02:a7:90:de:aa:5e:d5:ab:3e:69:91:
30:b4:ea:af:17:1b:aa:90:c4:9a:b3:0f:14:bf:58:90:0d:e2:
34:9c:2d:3d:e0:92:3f:29:64:43:de:86:48:6f:37:d0:37:80:
c7:00:d4:be:75:d9:59:c3:92:43:4c:2b:d0:a7:4e:28:ff:20:
db:cf:4b:8a:90:b4:0e:23:c1:f9:df:b1:f1:b7:88:93:84:bd:
9d:fd:c3:ea:78:ca:56:44:4a:b1:5f:a2:34:dd:f0:22:8c:a7:
e0:68:51:15:95:45:4c:fc:21:cf:4b:e3:6a:2d:33:63:da:01:
39:31:b3:fa:4a:5e:c6:ab:c6:83:d4:e3:ff:dc:ce:a1:6a:ad:
64:1d:db:07:5b:c7:79:00:3b:b5:b2:d3:23:5b:52:12:88:fc:
5e:7c:1e:7b:bc:87:45:a5:c0:e2:fe:01:b4:a4:a9:5c:fb:8a:
a6:6d:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:03 2026 by rpki-client