
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
File: RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json)
Hash identifier: iH3O2Vh89kPkecOI8kPvhaWAEzdiATzYbm102MiWlLc=
Subject key identifier: 0C:DD:AA:8C:5D:2A:44:C2:65:AE:AF:1E:9F:14:AB:D3:7A:32:18:8F
Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
Certificate issuer: /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
Manifest number: 0280
Signing time: Fri 17 Apr 2026 01:51:49 +0000
Manifest this update: Fri 17 Apr 2026 01:51:48 +0000
Manifest next update: Fri 24 Apr 2026 01:51:48 +0000
Files and hashes: 1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: RN0dSH1Tcnnv7mz9SsINUsmm0vAvtc5+Znkvi1UMfGw=)
2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: 56OWJIaGJbU897Qsu8EsYt1ihb4Vo/hHqb3TZGrUjxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Validity
Not Before: Apr 17 01:51:48 2026 GMT
Not After : Apr 24 01:51:48 2026 GMT
Subject: CN=69e19235-df7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:d1:8c:c0:70:ea:6d:3e:92:84:a5:5c:3b:
d0:f3:c6:31:e1:de:84:74:a9:49:dd:0f:46:ed:41:
b2:d0:8f:61:e7:94:fb:84:36:45:91:9a:ff:2b:72:
98:e4:fe:53:6f:74:fe:7f:72:e9:70:a1:d5:04:c6:
d5:69:cd:8d:89:e7:01:68:8a:88:a5:a7:61:6e:5d:
26:10:69:f0:b0:a2:96:16:16:7d:47:e6:8e:bb:b3:
b7:92:10:bb:e0:8d:92:90:97:a3:3d:72:04:db:42:
cb:b6:49:da:60:33:d3:17:7f:70:72:1e:4b:87:48:
08:96:ec:8d:aa:ac:27:de:09:31:77:ae:42:f4:c4:
bb:76:92:2f:79:a6:91:54:22:0e:92:d2:77:59:02:
02:a8:00:58:63:5e:66:57:96:49:3b:a4:94:f2:d1:
40:4a:84:80:0f:d9:a6:6f:11:0e:df:ae:09:f3:36:
8c:f7:94:95:b4:e3:d8:f6:8f:bc:2b:a3:b8:91:9f:
62:86:5b:f9:2f:05:cb:6f:67:ba:7e:d3:a3:34:84:
4c:34:8e:1e:5e:16:f0:a7:97:79:a4:24:f4:e6:e2:
02:c2:31:ee:ec:a1:f2:1d:cf:f4:bd:98:7c:9c:fd:
6e:b2:78:30:b9:4a:a9:90:c7:7d:a5:c9:81:10:4d:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DD:AA:8C:5D:2A:44:C2:65:AE:AF:1E:9F:14:AB:D3:7A:32:18:8F
X509v3 Authority Key Identifier:
keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:24:9c:72:af:4d:b7:e0:d0:74:12:55:83:ad:f8:85:7d:89:
63:98:4b:20:5b:a0:bd:ec:8a:c2:ce:70:5a:15:39:af:57:a4:
a3:82:b7:82:b2:73:b9:94:f9:15:98:f1:ef:3b:a1:2a:f6:f1:
16:ec:7e:e6:45:00:79:15:a2:e6:c5:0c:f4:29:bf:90:91:39:
fd:a8:5b:9c:c7:29:3d:19:ea:85:b4:7e:6e:ad:5c:11:76:cb:
5d:a1:69:ed:40:90:97:91:de:0e:7e:98:7c:26:ac:99:1b:26:
5c:8f:42:18:b6:41:e5:f3:f9:15:98:30:25:75:70:c6:83:9d:
f0:e2:3b:73:da:61:a1:90:b1:51:33:e8:77:74:38:50:5d:88:
23:32:24:28:bf:c0:85:9a:41:a6:29:bc:45:9f:98:f1:e4:c0:
f9:98:eb:b4:ad:4c:89:27:e6:41:07:b7:cd:4b:b5:09:15:8a:
17:c5:80:3a:71:15:e6:b1:c6:a7:88:26:c6:bc:87:d6:c9:d5:
de:e3:80:e2:3f:97:47:62:d3:2a:b0:f6:52:37:77:d1:57:b1:
10:93:6e:a4:e5:4c:6d:e9:ce:72:7b:67:c2:bb:4a:0d:8d:dc:
dd:99:b1:26:6f:5e:06:5f:99:c9:bb:6c:4b:18:c6:d7:ab:d0:
f0:5b:4b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:17 2026 by rpki-client