
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
File: 0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json)
Hash identifier: yYadOo3wq1R7rmyNDEFRJGIj97Q5/HcjmgEztD7ivP8=
Subject key identifier: 86:7B:0E:31:62:E9:1A:02:1B:A5:42:61:1D:F9:B8:18:C7:13:C9:D7
Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A
Certificate issuer: /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
Certificate serial: 0763
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
Manifest number: 075D
Signing time: Sat 28 Feb 2026 22:09:02 +0000
Manifest this update: Sat 28 Feb 2026 22:09:02 +0000
Manifest next update: Sat 07 Mar 2026 22:09:02 +0000
Files and hashes: 1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: bD+DZ2FP/SZ9Or/QTpIq6veMadmIZZXBfd5s69WIUog=)
2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: ShBRwbTuBxj9yKQsDtx+jaY1y+xIJPIpBM97g/zTojo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl
rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:09:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1891 (0x763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
Validity
Not Before: Feb 28 22:09:02 2026 GMT
Not After : Mar 7 22:09:02 2026 GMT
Subject: CN=69a3677e-26b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:83:7d:c2:d1:09:87:f8:2d:e5:cf:8f:86:
7a:df:e1:f4:a7:a3:76:b2:90:f9:53:44:1c:14:34:
79:c2:76:c4:ba:9a:ed:0e:8c:64:7a:eb:46:29:3b:
c6:40:0a:0a:d9:e8:7b:23:e7:a2:e8:1f:f0:71:d6:
fc:38:88:44:35:ce:d6:32:86:d8:7a:eb:99:db:97:
ba:e5:34:53:e0:ae:f8:43:9b:42:67:30:ac:ad:65:
82:62:2b:bc:4d:b9:dc:c1:92:31:53:59:a5:74:3b:
20:d6:f6:1b:07:7e:ae:5c:81:d2:f9:6e:6f:29:3c:
cf:8d:5e:ef:aa:bb:08:c6:ff:a0:ff:37:ad:55:a3:
54:6a:ad:7d:32:9d:b1:33:4b:ee:01:26:4e:fb:1e:
03:be:3b:ed:c0:80:aa:02:ec:59:cf:a8:42:d3:78:
c1:92:12:e0:59:05:0d:53:26:4f:f9:13:64:89:33:
37:b4:fc:31:8c:20:66:7b:17:76:84:b2:7b:a9:84:
8a:3f:c8:9e:4a:ce:bd:60:74:ec:d0:4a:83:29:6d:
08:e1:69:c0:bb:cd:dd:17:51:74:3a:1b:9e:9c:aa:
cd:45:ac:50:bb:9c:0a:12:53:29:a7:f2:cd:69:04:
73:0a:37:51:db:c6:ad:0a:c2:5e:8d:83:00:63:3e:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7B:0E:31:62:E9:1A:02:1B:A5:42:61:1D:F9:B8:18:C7:13:C9:D7
X509v3 Authority Key Identifier:
keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:aa:a7:3a:e2:f4:3f:75:4c:59:65:88:b4:07:89:e7:e7:3b:
0c:2c:8c:23:4f:86:6c:72:a0:ce:46:74:18:3a:ec:45:54:30:
ad:67:5d:c1:76:cc:15:de:8d:a7:22:e3:17:75:25:cf:02:f7:
13:62:94:5e:fe:86:db:2a:86:fa:ef:69:10:bf:03:3d:71:ad:
49:f8:8a:46:a7:d4:56:7c:b6:a3:0a:c0:b5:2a:67:eb:e7:3e:
86:0e:8b:8f:cf:22:6b:14:0d:06:a6:42:ca:8d:b5:a3:19:3d:
22:f8:14:fa:f8:0f:22:e7:bd:5f:06:a7:1f:c8:85:c3:72:53:
dc:c5:1b:08:98:e7:d6:b3:62:c5:26:54:f7:ff:b0:79:c5:a5:
cc:f0:44:8e:e1:f9:7f:49:c5:19:f0:27:0b:64:30:9d:e1:30:
f9:c9:b0:2b:85:d9:a5:4d:8c:c0:8b:ec:ec:6b:59:fa:a3:e1:
95:d2:11:ee:e1:53:e9:78:97:4a:35:8c:95:01:95:5c:eb:94:
05:e1:a6:10:0d:36:f0:ab:05:51:4a:69:6f:6f:4c:df:17:07:
24:39:9c:95:2e:ac:39:ea:94:f9:1a:77:f3:32:72:6f:34:43:
56:07:5c:65:89:9a:ff:8e:bf:c0:d7:67:5f:10:d2:90:68:a7:
a5:13:6d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:16:13 2026 by rpki-client