
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json)
Hash identifier: gUrFfnkpK8JSJt6cCCAm24DW+x+/kwbm8OIhhUP40EI=
Subject key identifier: 52:BC:C5:5E:E2:50:B8:0A:1D:58:61:47:78:5C:F7:02:82:4C:0F:8B
Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66
Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66
Certificate serial: 02B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
Manifest number: 029F
Signing time: Fri 17 Apr 2026 01:27:01 +0000
Manifest this update: Fri 17 Apr 2026 01:27:00 +0000
Manifest next update: Fri 24 Apr 2026 01:27:00 +0000
Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: 0r1g4ZMtOShORZJL44z+X+zVidE2baK+0XAAR3Ps2d4=)
2: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: 5RaPjFBnhiFZyA3PtlxXYhV1TZyEd5Mgtbgk5McoTSs=)
3: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: TRXYmyqIh38BJQpPjdJnxxRS6yMm2jbuDarUopXUSZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl
rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66
Validity
Not Before: Apr 17 01:27:00 2026 GMT
Not After : Apr 24 01:27:00 2026 GMT
Subject: CN=69e18c65-d004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:76:cc:8e:d9:59:b0:3a:95:17:09:82:93:
c1:7d:39:de:1a:b6:68:ce:bc:dc:24:28:3a:f5:56:
54:ab:9e:14:ec:a0:00:61:1b:93:eb:ca:d5:1e:47:
fd:d8:8f:24:ce:ea:5c:30:5a:8c:b7:f7:a1:b0:08:
fe:31:33:e2:12:ba:20:8f:ac:04:46:64:1b:0e:15:
d8:0f:39:23:d6:36:c4:a5:e0:dd:13:ac:1d:23:b8:
dd:80:45:98:d2:19:64:8c:d1:bc:8a:8a:ef:e7:89:
27:cb:99:fe:e5:44:ed:a5:6c:a3:c6:5f:b7:c9:27:
ed:15:ca:1e:05:8f:62:98:5b:0b:1a:66:f3:28:8c:
8a:ab:a2:f5:79:ee:a0:eb:bb:1b:b6:a0:45:3d:26:
b3:05:a1:e9:19:d9:d0:2a:42:95:8e:1e:b9:0d:c4:
48:9e:ec:c0:f2:b4:0e:86:18:be:ac:7f:f0:cc:1f:
be:0f:17:47:3f:5e:36:36:35:b9:58:06:0c:ab:55:
30:78:79:1b:13:84:74:fb:4d:e7:a0:62:7e:72:4a:
57:7b:cf:02:01:56:bc:4a:d6:4e:31:cb:5f:ac:9f:
10:c5:79:57:3a:82:3a:ed:d7:25:bb:98:f0:0d:ee:
0b:2b:91:a1:25:38:ce:bd:8d:1d:6c:57:10:d0:24:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BC:C5:5E:E2:50:B8:0A:1D:58:61:47:78:5C:F7:02:82:4C:0F:8B
X509v3 Authority Key Identifier:
keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:ef:ff:b1:26:60:5f:98:07:cc:51:d8:16:51:a4:d8:da:8f:
e6:81:c5:fd:f2:32:a2:09:79:42:6d:f6:30:07:64:f2:ab:d4:
4c:89:5f:9b:e4:8e:1b:b4:7a:74:4b:88:c6:bd:10:1c:3f:c4:
03:06:64:79:32:e6:79:ea:0a:f4:26:30:92:4d:8f:0d:16:fa:
f8:19:c6:24:bd:43:29:ae:5a:72:d5:72:65:85:45:0a:bc:14:
a3:6c:57:13:0a:dd:ca:51:8e:06:a9:fe:fc:42:9f:91:03:28:
f5:10:5b:27:ee:7b:3d:93:14:ce:c7:9e:cf:00:44:66:87:fa:
4f:b1:ab:a4:42:3b:0a:5d:70:86:96:c2:07:ae:7d:92:ef:ac:
b2:21:a0:2c:4e:f6:06:ab:af:53:c9:1b:2f:cf:6c:1c:a3:92:
b9:c8:b9:ea:59:be:70:f6:36:97:58:90:1f:47:8c:fd:d9:3f:
be:9c:b8:a8:04:7a:48:0d:56:7c:8e:fe:7c:d7:38:c6:7e:ae:
fb:a3:d9:b2:a0:9c:07:4f:45:8a:90:fd:ab:0c:50:d8:64:13:
40:04:7b:0c:f8:a0:17:19:39:54:91:6b:6f:8c:ef:b4:f3:34:
81:71:24:de:31:15:21:fb:f4:20:4d:cc:14:42:4b:b8:8f:8c:
30:ec:be:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:29 2026 by rpki-client