
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
File: p-wiWGgvb66fhDj6JicYnlQvTe8.mft (raw, json)
Hash identifier: n3mwhY+I1AnmjlAV//Wyaogqlmi1iNUlAUm3XsEWrWE=
Subject key identifier: 45:C2:7B:29:F8:0E:24:B2:B1:E9:F1:7B:3C:27:34:7E:17:BA:17:CF
Authority key identifier: A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF
Certificate issuer: /CN=A91FA92A/serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF
Certificate serial: 1A98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
Manifest number: 1A85
Signing time: Thu 16 Apr 2026 16:17:02 +0000
Manifest this update: Thu 16 Apr 2026 16:17:01 +0000
Manifest next update: Thu 23 Apr 2026 16:17:01 +0000
Files and hashes: 1: p-wiWGgvb66fhDj6JicYnlQvTe8.crl (hash: n1SNo3tla2c+eWbm9obnIqahqd/e244tMDgAbnwW8Rs=)
2: 3A1C441A5A4E11E7965D9A75C4F9AE02.roa (hash: 4w47H0Y1vnBN5i/M/jV7KCeDSn1xH7StGYdAvJdkOiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl
rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6808 (0x1a98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA92A, serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF
Validity
Not Before: Apr 16 16:17:01 2026 GMT
Not After : Apr 23 16:17:01 2026 GMT
Subject: CN=69e10b7d-ebec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:e2:50:f6:f7:04:d2:c5:1b:ea:2d:6d:6d:
a5:60:93:09:a9:97:02:92:1e:86:c0:ad:ad:0c:9f:
0e:fb:f7:b1:72:5d:0a:c3:d0:0f:45:13:fb:9f:97:
b4:68:6b:31:2a:7a:fb:b6:c7:ab:03:9a:ae:7d:ba:
c0:cd:72:f5:f8:21:05:56:48:b6:10:59:aa:c2:3a:
20:69:8a:af:c4:98:7b:67:92:2a:9d:0c:15:b1:8a:
c1:17:98:22:60:0c:d3:a0:e2:db:30:d9:cb:5c:13:
d4:77:f0:eb:aa:37:b8:eb:9b:04:d8:24:3f:fb:c9:
2f:70:66:da:13:2c:85:67:d5:e1:98:0f:12:c8:91:
c1:e1:29:3d:8e:e8:41:de:80:18:d9:df:7b:9b:bf:
2e:62:6a:e5:8e:e2:48:59:76:de:1f:8e:d8:a0:a2:
20:38:b2:83:26:1e:6b:c0:ad:af:4d:02:6d:96:b5:
9e:e9:4b:4b:e4:18:d1:4a:a6:db:50:a6:6e:24:39:
c9:db:ff:7e:f1:14:fc:40:71:01:b6:22:73:f1:e2:
9a:06:6d:44:f2:e8:0b:bf:3c:fc:6a:b5:0d:20:bf:
fd:81:0a:f4:fd:8d:32:f1:6b:34:9e:55:2e:98:fc:
33:ba:c9:40:9f:66:71:d0:b9:c7:ad:db:f9:d4:e3:
bd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C2:7B:29:F8:0E:24:B2:B1:E9:F1:7B:3C:27:34:7E:17:BA:17:CF
X509v3 Authority Key Identifier:
keyid:A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:ff:a6:ba:ae:05:6b:fd:19:a1:67:f8:c3:ac:9a:4a:02:59:
51:8b:c4:53:d0:07:46:64:ea:ed:a2:a7:eb:4a:e6:27:cf:ce:
1a:a7:a8:3e:12:38:61:d8:c6:6c:dd:0c:b2:c4:96:3b:7f:8a:
10:58:84:0c:5e:0d:21:64:31:69:cd:26:63:a1:81:35:da:b9:
ef:cc:df:a2:f6:50:17:7b:3e:e8:40:8a:8f:0c:49:48:1e:bf:
15:28:66:06:e7:b3:3d:7b:73:31:18:ce:62:b4:2d:c6:5c:2c:
d1:28:37:5c:76:ac:6b:1e:44:a9:65:48:74:e2:8c:e5:51:42:
3f:41:7e:97:d7:76:ea:d4:51:dc:b7:10:0f:d2:dd:ec:1f:f8:
47:48:33:a9:fd:82:35:4d:08:fc:c3:c2:49:b9:0e:a8:e1:9e:
66:d4:07:7a:b0:bd:45:c9:ae:e9:13:b1:e9:bd:b5:6a:69:ac:
d5:19:eb:81:ec:07:3e:1a:db:20:b8:b6:cd:8e:6f:79:a1:ef:
93:5f:b8:0d:76:67:ed:5b:e3:50:65:80:d4:b0:c6:24:01:b6:
d5:c2:2d:0c:01:f1:91:e0:dc:1b:56:ea:c5:6c:a1:d7:c6:0c:
d0:ed:f3:db:22:5b:51:5c:35:a2:cf:78:76:4a:80:60:00:1e:
6d:40:2e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:10 2026 by rpki-client