
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json)
Hash identifier: +DqQm6Ke8Bc/lCS/mDgPdhna2FXD+byyO3jzVKzQM94=
Subject key identifier: F3:4A:25:55:C0:1A:E6:3F:90:E2:C0:2E:A3:17:39:53:7D:BA:F1:64
Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7
Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
Certificate serial: 09C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
Manifest number: 09A0
Signing time: Sat 28 Feb 2026 20:14:58 +0000
Manifest this update: Sat 28 Feb 2026 20:14:57 +0000
Manifest next update: Sat 07 Mar 2026 20:14:57 +0000
Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: BK234ouzoNngs55kgewd6/bAF915A+5WpMz59/F6I5s=)
2: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: rt6Bny5AcJrI2S637EuL4TLyFA4SjY1ZgYuhkIe6es0=)
3: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: jlvb+etwEPHqA46PNwyWWQuRbCH2ZSbsGy74EBHEsOU=)
4: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: RAy4NEtPtRjjHZ7I4vl5fhJ8895ko/HNAUdCvF3aEZY=)
5: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: hPsYz+84BMOD09qXWXtUIiGoQs2iz4MgarEp+UA6x9E=)
6: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: IsjUPn+kzqWFAXd7ZKFs/dyXmrJrx2wfZqJliLqmPzA=)
7: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: pXrEj4stDQa7vXKCjosbWVQ6drk8njOMSLWpF1DWD7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl
rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2500 (0x9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
Validity
Not Before: Feb 28 20:14:57 2026 GMT
Not After : Mar 7 20:14:57 2026 GMT
Subject: CN=69a34cc2-6ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:45:e8:04:9d:74:22:80:ed:c5:a3:aa:68:ca:
97:5b:ba:d3:75:97:ab:51:44:02:9c:2d:c3:00:69:
21:1f:ec:9d:b2:59:aa:77:9e:25:ea:4a:e9:e2:4a:
d8:3c:1b:31:58:58:ed:4c:18:1e:95:52:87:34:04:
59:ff:53:00:5c:8d:33:62:98:99:37:76:b9:63:41:
f7:15:91:89:6d:6b:81:ae:11:e0:b9:42:3b:45:a1:
77:c3:f0:14:c8:67:b3:6a:46:fc:99:ca:90:1b:a1:
85:37:b4:db:db:ad:43:29:2e:af:8c:90:50:61:2b:
03:c8:17:f8:99:2a:38:3b:45:fb:a5:c4:8b:15:1a:
5f:b5:84:b1:30:77:7a:e9:14:33:55:1b:97:44:d9:
09:b9:86:55:f9:d7:98:39:cb:90:67:c9:22:53:d2:
ea:da:30:95:de:85:e4:74:b0:ba:bf:68:da:10:21:
11:4c:b2:33:0f:68:33:5a:dc:1f:57:6e:38:68:da:
c4:d0:5c:fb:e8:f8:40:aa:b7:ab:c9:ad:be:a5:99:
25:dc:da:06:57:c1:b0:d6:a1:84:f2:74:1f:d2:d9:
3e:b4:ec:a8:c8:23:bf:0d:5b:ab:47:22:77:72:4b:
64:0e:93:a7:21:d4:6f:5f:e3:76:5a:77:18:c0:c1:
1e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4A:25:55:C0:1A:E6:3F:90:E2:C0:2E:A3:17:39:53:7D:BA:F1:64
X509v3 Authority Key Identifier:
keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:d9:98:8c:6c:22:46:85:c1:47:d9:63:5b:de:2e:5b:86:b0:
33:23:e5:14:98:f9:6e:e8:68:6e:cc:7e:6e:10:23:bf:64:ba:
59:00:8d:55:f8:de:6e:25:7b:e2:fc:53:ac:64:5d:85:34:ad:
9e:06:da:1f:13:4e:c2:29:c8:b8:45:54:95:d5:08:a7:11:ac:
b5:e0:74:8e:bb:c7:3d:85:93:28:11:0a:2e:9e:79:43:d3:d1:
2e:07:e4:69:fe:a6:5a:cf:7e:b9:94:2e:ea:80:3e:ff:ab:99:
4b:12:10:be:0f:b2:a7:1f:76:58:1b:18:97:dc:2c:8c:ad:f1:
2d:e7:de:ab:54:f7:4a:f8:9a:bf:91:7e:0b:4a:81:4b:f7:34:
2d:6e:78:b9:b7:a0:17:7f:a0:5d:9c:7d:18:13:86:5e:79:a2:
b8:57:26:8b:c5:af:9d:07:69:ce:ce:ef:3c:5c:2f:41:e4:a3:
67:5a:b1:d6:69:64:13:41:45:68:fd:54:a6:8c:33:cd:da:fa:
4a:e2:96:12:ef:e9:95:13:4b:d4:9e:5b:36:5d:ae:5d:d4:7f:
82:b2:d1:b8:88:e6:a3:0d:ad:a2:fe:68:66:f2:78:f3:38:47:
92:3e:8b:e4:2e:e6:94:e9:d3:cb:37:41:c2:9e:b2:6e:1b:c9:
d2:26:ae:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:49 2026 by rpki-client