
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
File: W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json)
Hash identifier: zs0hI+/1cj1rK7/jlJl0IT572RLeYw+nnm16QwbCH9Q=
Subject key identifier: CA:98:A6:D8:5F:EE:BB:BC:B8:42:DD:0A:5C:5C:59:B2:5A:D3:83:95
Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB
Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
Manifest number: 01AA
Signing time: Mon 02 Mar 2026 02:21:25 +0000
Manifest this update: Mon 02 Mar 2026 02:21:24 +0000
Manifest next update: Mon 09 Mar 2026 02:21:24 +0000
Files and hashes: 1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: RgUggeXcshykM1r0onvbJYGGQOuNd6vVXHJoeRKCxVo=)
2: D61299F2D8C011EFB41E1319C4F9AE02.roa (hash: 1Mnu5Kcr8+QSDHHvBWqO3NthqVgKtFSxzfASTz7l5b8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl
rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA5A2, serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
Validity
Not Before: Mar 2 02:21:24 2026 GMT
Not After : Mar 9 02:21:24 2026 GMT
Subject: CN=69a4f425-c094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:76:f8:6e:1e:47:c2:1f:c3:dc:2b:47:a4:
97:2d:4e:8a:c6:c0:6d:b5:55:84:c8:cf:bb:0f:b7:
4b:8b:14:02:64:b9:36:11:42:40:7c:d0:61:d8:61:
e9:d4:08:83:f6:24:91:5f:4a:45:a4:c4:4b:69:63:
b9:c0:04:7f:4d:1f:cc:04:92:02:a5:b2:fb:16:30:
97:1f:c7:8b:b1:44:79:cd:41:34:3d:c9:a9:74:ae:
12:75:82:6c:e8:c0:b4:7b:0f:8d:2f:ec:e5:e3:3d:
61:63:81:37:76:9a:ee:fc:19:69:1d:1c:6c:19:42:
7f:9a:49:53:5e:5b:2b:6b:71:c0:a1:c4:2f:36:b7:
07:2a:bf:33:69:1b:23:b4:b6:48:21:43:0b:53:9a:
ba:46:a5:17:e0:63:87:0e:ad:a7:13:1e:07:4e:32:
67:66:54:60:5e:c9:4f:0b:09:63:e8:a5:63:85:bd:
19:72:a8:2b:0a:51:02:19:fa:a9:d5:15:bf:8a:c6:
fb:2e:f4:1f:09:cc:19:5c:32:69:1a:84:4e:e5:a6:
da:d5:1d:ae:06:31:a3:6a:de:13:63:c8:0a:fd:23:
1f:5b:ed:ed:be:f6:04:1d:a4:d3:c6:ae:74:8b:9d:
42:a0:b5:c3:d2:86:31:fd:86:34:e8:3c:6e:1f:58:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:98:A6:D8:5F:EE:BB:BC:B8:42:DD:0A:5C:5C:59:B2:5A:D3:83:95
X509v3 Authority Key Identifier:
keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ab:83:1c:bd:3a:36:50:d1:35:be:60:a5:07:73:6d:4c:96:
2c:b1:12:ab:6c:06:6c:cc:ae:ee:73:e2:30:f9:e2:23:38:b2:
40:d1:67:33:25:6f:56:da:8b:85:f1:bc:dd:27:fd:31:5f:57:
0b:96:dd:82:37:a6:43:59:8f:b7:23:f6:82:b0:b0:c2:81:04:
1f:1c:15:6d:28:28:78:29:cd:f2:56:ce:5f:a2:26:6f:44:9a:
34:2f:49:0d:a1:e9:32:86:ab:af:5a:3e:a0:75:2b:50:1c:4a:
36:cd:94:b8:05:56:56:f4:85:16:12:5b:1d:7c:0c:75:33:d1:
08:5e:7a:05:bc:ed:f5:3a:fe:1a:4f:a9:5b:57:e6:46:4b:c1:
29:86:59:b5:82:84:2c:95:fd:89:e9:96:16:4d:99:15:0f:01:
f3:cb:d7:29:37:8c:a1:a6:5e:f5:0e:65:8f:2f:b1:d0:3e:42:
65:b7:7f:03:74:89:4a:16:47:4f:03:d3:32:9a:86:1e:15:c4:
b9:08:36:90:3c:fa:b0:0d:b8:d7:d6:22:0b:d2:07:9c:80:57:
64:82:e6:de:c0:31:7c:1b:c1:c0:c0:64:70:91:60:79:8e:fa:
72:33:68:0e:f1:4d:a0:f9:8e:1c:d1:a1:23:82:c1:ca:99:4a:
54:62:af:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:00 2026 by rpki-client