
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json)
Hash identifier: 4ib8XPJ0f3m/NdTm4Xawye86TvC8nCWRiAw+zwpD5vw=
Subject key identifier: EB:65:BF:ED:C5:B5:FF:E7:EF:73:CA:EB:01:28:67:BD:D0:CE:51:59
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial: 093A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
Manifest number: 091D
Signing time: Fri 12 Jun 2026 20:19:28 +0000
Manifest this update: Fri 12 Jun 2026 20:19:28 +0000
Manifest next update: Fri 19 Jun 2026 20:19:28 +0000
Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: 6lupNgE1RZKTVYt276riHuH1Za9r+RIaKOaMQOROp2s=)
2: 12789D14F82E11F09E4CD127396F56BC.roa (hash: 0lQm90IuI3a5EcWOhbRW2oYdVmTwAF33dV4T2vGRc30=)
3: 915C708A5D0311F1A1E4D1FD9E833773.roa (hash: VrPJNq/Oy8dbAV0z+8RuKsoNHOduGhKMp1HhVbIhyuQ=)
4: 37A30AA2157A11F1B5E2F6BC3D3D8C67.roa (hash: OKp4FrMM/70sWLoITS6ZEZdodRxEqyoRybrxPzxTh/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2362 (0x93a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Validity
Not Before: Jun 12 20:19:28 2026 GMT
Not After : Jun 19 20:19:28 2026 GMT
Subject: CN=6a2c69d0-6b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a8:84:b2:a0:2f:9d:97:19:f0:72:fa:a3:fb:
d2:ea:65:0b:4e:f2:c4:eb:50:e9:4e:2f:f6:d8:4e:
b8:ec:68:bd:54:02:7d:d0:f5:d5:50:86:b3:32:a9:
f9:e0:21:e7:aa:27:b6:8c:2b:0e:c5:05:fd:80:5f:
d3:a6:b6:1f:d7:45:cd:df:36:87:49:bb:5b:ed:7a:
a6:82:22:23:5a:16:c4:d7:7b:ec:7d:89:00:26:98:
00:9e:32:11:b6:98:c4:74:f4:3d:4a:ce:f9:ff:f6:
bd:bb:51:e9:57:2d:4b:d0:15:98:62:bb:cb:4e:2f:
e2:1f:01:d1:8f:29:98:d7:a5:4e:f5:3f:33:b6:f3:
9a:58:3a:12:e6:ab:2b:0f:49:be:77:46:c8:6e:79:
f6:4c:e6:29:6b:48:76:28:a5:28:68:5c:8e:ad:b8:
41:37:75:6a:76:aa:8b:dd:94:d7:f1:65:3e:d6:b0:
b0:02:98:b5:59:9f:9b:de:f9:48:2d:43:8e:a1:dd:
e2:7c:c9:10:42:cf:77:e4:86:02:cf:38:72:71:80:
3f:d1:28:6a:5a:ec:fe:8e:7c:8a:10:6b:af:fb:70:
20:2d:fa:48:cd:61:f4:f0:c5:f4:86:91:da:7e:e1:
ce:3e:95:01:1b:11:45:ca:8b:c3:07:6b:f4:a3:ba:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:65:BF:ED:C5:B5:FF:E7:EF:73:CA:EB:01:28:67:BD:D0:CE:51:59
X509v3 Authority Key Identifier:
keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4d:29:58:16:69:dc:e0:a9:da:61:84:15:80:bf:3f:2a:59:
2e:5c:cd:bf:e2:a1:1f:e5:9c:97:7d:e5:4a:8c:ea:62:c5:de:
1f:0a:2d:c5:f8:6a:0e:6b:49:6f:a3:f8:e6:b0:78:04:47:e6:
64:df:d2:88:b5:86:81:67:ab:dc:e4:15:f0:37:92:0b:c7:dc:
8e:e2:c4:27:6d:9d:41:5d:4e:f9:e7:2d:a6:d7:b5:7a:e9:dc:
af:38:e9:c1:5e:6b:1e:27:20:1b:1f:ee:07:fd:48:3f:43:6a:
9c:4a:18:3c:78:e8:21:61:3c:4b:fb:da:14:57:2f:0c:e0:c0:
34:6a:00:0f:5f:34:41:80:7f:bf:8e:47:41:3b:b0:54:dc:50:
45:c9:b4:1f:8d:d0:dc:99:3a:ff:74:e2:bd:07:40:31:a3:b9:
24:0e:f0:cf:8a:dc:2b:96:12:01:9a:2a:da:1a:cf:e9:e6:24:
ba:66:57:cc:3e:ac:49:f0:7a:51:ee:15:b7:57:74:1f:35:ec:
13:d1:ce:50:54:89:43:d5:20:59:a7:0e:3d:39:b8:b1:90:1a:
81:cc:77:6f:65:55:89:03:4c:da:99:77:ab:9a:b5:8d:41:f1:
3b:fe:67:5c:12:a6:bc:9b:93:11:29:7f:e4:a6:fd:c4:c3:a1:
25:cf:77:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2
OTQyNDE2RDEwHhcNMjYwNjEyMjAxOTI4WhcNMjYwNjE5MjAxOTI4WjAYMRYwFAYD
VQQDEw02YTJjNjlkMC02YjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA06iEsqAvnZcZ8HL6o/vS6mULTvLE61DpTi/22E647Gi9VAJ90PXVUIazMqn5
4CHnqie2jCsOxQX9gF/TprYf10XN3zaHSbtb7XqmgiIjWhbE13vsfYkAJpgAnjIR
tpjEdPQ9Ss75//a9u1HpVy1L0BWYYrvLTi/iHwHRjymY16VO9T8ztvOaWDoS5qsr
D0m+d0bIbnn2TOYpa0h2KKUoaFyOrbhBN3VqdqqL3ZTX8WU+1rCwApi1WZ+b3vlI
LUOOod3ifMkQQs935IYCzzhycYA/0ShqWuz+jnyKEGuv+3AgLfpIzWH08MX0hpHa
fuHOPpUBGxFFyovDB2v0o7olIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOtlv+3F
tf/n73PK6wEoZ73QzlFZMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND
OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG
dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH
M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbU0pWBZp3OCp2mGEFYC/PypZLlzNv+KhH+Wcl33lSozqYsXeHwotxfhqDmtJ
b6P45rB4BEfmZN/SiLWGgWer3OQV8DeSC8fcjuLEJ22dQV1O+ectpte1euncrzjp
wV5rHicgGx/uB/1IP0NqnEoYPHjoIWE8S/vaFFcvDODANGoAD180QYB/v45HQTuw
VNxQRcm0H43Q3Jk6/3TivQdAMaO5JA7wz4rcK5YSAZoq2hrP6eYkumZXzD6sSfB6
Ue4Vt1d0HzXsE9HOUFSJQ9UgWacOPTm4sZAagcx3b2VViQNM2pl3q5q1jUHxO/5n
XBKmvJuTESl/5Kb9xMOhJc93ig==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:05:03 2026 by rpki-client