
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json)
Hash identifier: tjqyhAqVBeYSXdmeJyNc81qGJEdQB7RDtiDlHbJDQgg=
Subject key identifier: 51:D9:83:F1:90:30:BD:6A:96:BA:59:04:D3:C7:1E:29:FE:0A:FA:91
Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66
Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66
Certificate serial: 0302
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
Manifest number: 02EE
Signing time: Mon 21 Sep 2026 01:01:48 +0000
Manifest this update: Mon 21 Sep 2026 01:01:48 +0000
Manifest next update: Mon 28 Sep 2026 01:01:48 +0000
Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: S7Gc47aWC16z+ZqnWW/TAsoOjLIGjq4QZ45tQAK3c6U=)
2: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: 5RaPjFBnhiFZyA3PtlxXYhV1TZyEd5Mgtbgk5McoTSs=)
3: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: TRXYmyqIh38BJQpPjdJnxxRS6yMm2jbuDarUopXUSZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl
rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770 (0x302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66
Validity
Not Before: Sep 21 01:01:48 2026 GMT
Not After : Sep 28 01:01:48 2026 GMT
Subject: CN=6ab081fc-f036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:19:ff:23:5c:48:61:2c:c0:03:87:51:55:
3e:5e:94:c8:48:5a:2e:10:a7:70:1f:9e:30:d6:26:
52:e5:5b:c6:bd:c1:6e:b0:ad:2c:9f:5e:20:7b:51:
8a:68:55:38:84:e8:b4:af:f4:ea:bc:23:b4:02:f9:
80:f4:43:37:d1:ab:5c:df:43:7d:f6:b1:0c:d4:58:
dd:79:11:e1:a8:da:60:72:8b:25:ff:ef:65:c8:05:
f7:56:67:57:2e:fc:d3:84:a0:16:06:df:19:d9:47:
f1:76:ea:de:85:8d:f4:97:76:51:98:2c:0e:61:aa:
a3:26:6d:89:a0:df:d9:39:ff:d4:ce:01:14:02:2e:
58:0e:1d:38:d6:c7:25:f4:95:8e:87:5b:d8:f0:5d:
c5:f9:0c:8d:55:47:f1:36:ab:e0:47:31:a8:5f:3b:
50:d4:13:25:74:35:d0:e8:a3:6b:ce:37:59:4f:d5:
96:5f:b0:bc:a8:e7:cb:a7:49:c4:50:50:7a:b5:77:
b8:87:8d:47:9a:ac:cf:ef:6a:2d:54:75:43:9a:6b:
76:2d:31:4d:4a:02:69:bf:13:2c:55:f8:85:93:98:
dd:b1:aa:6c:f8:8b:f7:a2:58:2d:62:94:f5:b8:f8:
d5:d3:a6:25:38:55:50:25:e2:65:1a:d9:c8:0c:69:
a8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D9:83:F1:90:30:BD:6A:96:BA:59:04:D3:C7:1E:29:FE:0A:FA:91
X509v3 Authority Key Identifier:
keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:00:6d:82:02:85:ab:e0:0d:16:90:61:c4:13:b4:80:1a:c4:
eb:1c:af:3b:6f:96:80:b1:27:6b:04:f6:b4:64:89:96:27:6d:
4c:15:45:e1:5c:7d:7c:1d:24:3c:bb:12:81:7f:ce:e8:e6:18:
a7:f6:63:52:b9:56:d3:aa:56:ad:a5:0b:e7:3d:a4:a2:e5:e6:
08:51:4d:18:88:79:01:03:cd:62:99:af:98:fa:36:d5:33:38:
78:8a:02:82:a1:c6:f0:bc:4a:c7:51:6e:52:8e:98:1e:5a:24:
ef:eb:fa:b0:a9:4a:c0:dd:6f:25:45:a1:99:bd:be:dd:4c:37:
d9:99:36:fd:70:4f:12:51:20:4c:cb:e8:1b:f7:67:ee:ee:8a:
4e:c2:0e:e4:9b:88:1f:45:bc:61:a7:75:c9:6c:90:00:fe:f1:
ac:28:be:a6:f0:5a:ba:d1:d1:bc:df:52:c7:38:1a:1d:95:c6:
15:af:6f:24:6d:b5:eb:f0:43:f7:79:fd:9c:8a:8a:a7:2a:23:
b1:73:bb:7b:ad:36:d3:3d:3a:69:25:f9:b1:53:8f:ef:13:dd:
7a:b5:6b:ac:66:5b:d9:69:21:24:a7:7d:12:92:77:09:92:fe:
82:6d:74:55:0d:da:43:5f:d8:1e:f9:3c:e3:ac:99:21:85:0b:
92:f8:a8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:26:16 2026 by rpki-client