
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json)
Hash identifier: rqNWvCsP0/A32En+BgYuQjhb+JMa31ZPdJRRBSw0iC8=
Subject key identifier: 98:91:32:EF:DB:B9:1D:40:4A:B8:21:21:B9:1C:35:53:49:FD:1F:3F
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial: 0977
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
Manifest number: 0956
Signing time: Fri 18 Sep 2026 20:08:46 +0000
Manifest this update: Fri 18 Sep 2026 20:08:45 +0000
Manifest next update: Fri 25 Sep 2026 20:08:45 +0000
Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: PGoW2a9vnTlWIk957laoL1cTX20XX1fph5OY3lqbnSo=)
2: 0CA8CFDC905711F1B15AA74E5811F970.roa (hash: 4IcG0l/wb7OKo2AeOju5X8+uLa+otJRMLywhoscjKl4=)
3: AB4610AA7EAF11F1B80EBCC267A30FBC.roa (hash: X3ZUS5c7YNv6h1DWtLHYPdbyqcCD2SWsBkXcjr1SmB8=)
4: 37A30AA2157A11F1B5E2F6BC3D3D8C67.roa (hash: OKp4FrMM/70sWLoITS6ZEZdodRxEqyoRybrxPzxTh/c=)
5: ABDC2CE87EAF11F1B80EBCC267A30FBC.roa (hash: ukUJEgX9lQ5VeOWBPATywGFlg6QgIS8tcmX0+Cesd+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2423 (0x977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Validity
Not Before: Sep 18 20:08:45 2026 GMT
Not After : Sep 25 20:08:45 2026 GMT
Subject: CN=6aad9a4d-ab5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:f9:02:80:d8:05:b5:ee:34:d8:e2:2a:db:
28:69:14:c9:d7:86:4b:cf:0e:fc:44:8f:50:2e:c7:
1a:68:41:0b:d1:f2:66:f9:45:1c:6f:85:f7:4b:e9:
7f:1b:65:6f:46:f3:35:af:84:a8:7d:12:4f:80:6b:
ea:03:96:f8:36:30:d4:1b:f3:cf:ef:e2:9a:15:52:
1a:8a:4e:9b:7b:2b:ce:64:02:83:99:83:8d:f8:33:
1e:b2:e5:5b:ae:e3:48:01:68:ff:e0:0a:65:12:6f:
c4:05:cb:9a:e6:ed:df:11:94:75:2b:a3:c1:a7:ed:
6e:ff:8c:ff:96:e6:b5:ab:51:72:1d:ce:33:cd:71:
84:b0:80:d3:99:02:b8:3e:59:97:3f:c1:cf:fc:39:
7a:4c:21:b4:86:da:22:9c:ca:7d:57:c7:44:cc:a6:
a0:6f:17:d1:62:c5:6c:b8:c0:7c:26:dd:9b:3f:33:
f7:11:2a:01:9e:3e:10:e8:c9:9a:6d:16:af:79:84:
4a:24:23:df:7c:e4:3b:d9:53:32:e8:48:d2:db:36:
05:6b:45:f2:9d:2e:19:14:66:ef:6a:a4:f6:c7:c3:
16:2e:60:48:f1:0b:3f:ca:0a:a1:e9:d0:8d:2d:c8:
81:ae:38:93:38:c4:9f:bc:15:70:aa:b7:16:cb:cb:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:91:32:EF:DB:B9:1D:40:4A:B8:21:21:B9:1C:35:53:49:FD:1F:3F
X509v3 Authority Key Identifier:
keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:89:e4:58:13:f2:7b:7b:41:fe:79:cb:c6:87:e5:ee:e4:df:
84:d4:d6:f1:96:52:96:a6:f1:4f:9c:50:ee:e4:dc:c0:09:d8:
8b:98:68:cd:a6:7f:dc:dd:97:16:43:c7:a3:c7:b0:c4:37:84:
d7:09:9c:5f:34:96:2b:da:40:d6:33:55:27:b9:8e:74:ec:a5:
10:fc:1c:7b:1e:17:53:fc:0a:49:cf:0b:6c:d3:3d:68:d0:7a:
2b:0b:1c:d0:c0:44:28:8b:9d:cc:5c:30:77:33:17:e8:d9:b5:
2e:65:11:00:a2:ab:fb:ec:9f:0f:f8:86:7b:39:d8:cf:2d:26:
01:bd:70:1e:eb:22:51:e6:55:e3:f4:e2:27:2d:d0:3c:a1:89:
12:2d:9e:f3:a1:48:f4:25:75:be:72:ca:54:dd:e1:86:52:2d:
9a:cf:80:3e:c1:ba:ae:a7:63:2a:f9:fc:9f:ab:fd:f6:d5:45:
92:4f:fc:bd:e3:31:5a:e0:41:14:3b:6a:e6:93:4d:fa:db:c4:
6a:d7:43:ba:a3:34:9e:e0:c4:65:51:1a:d2:e0:43:02:99:e8:
a1:a7:d2:5c:54:88:18:89:a3:79:d4:f4:c6:d0:a7:68:42:b8:
b9:bb:c3:b4:07:6a:2f:0b:12:8c:01:ef:c7:5e:49:7a:d5:59:
06:28:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:46:07 2026 by rpki-client