
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft
File: WOkI0McaSfSCp8fZVSozVZyuJkM.mft (raw, json)
Hash identifier: N7BF/3LmVcOv0Z25bKTJjHZOJ5XJwieUf6TpmllTSVs=
Subject key identifier: CA:A8:50:20:41:62:DD:00:59:CE:94:F9:45:D8:FA:9B:19:EE:84:82
Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43
Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643
Certificate serial: 0649
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft
Manifest number: 0641
Signing time: Sat 28 Feb 2026 23:15:10 +0000
Manifest this update: Sat 28 Feb 2026 23:15:10 +0000
Manifest next update: Sat 07 Mar 2026 23:15:10 +0000
Files and hashes: 1: WOkI0McaSfSCp8fZVSozVZyuJkM.crl (hash: +Ayfc/qY3fHQ6hCAfEH3sm3XjrX/LmXztC4Y2ESY3FQ=)
2: F189CB86C81D11EBA4C0E321C4F9AE02.roa (hash: LQVhGLWyxc1pklBD2t803Fkz24sxL0uwFy0c3cUoiwk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl
rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1609 (0x649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643
Validity
Not Before: Feb 28 23:15:10 2026 GMT
Not After : Mar 7 23:15:10 2026 GMT
Subject: CN=69a376fe-cf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:ba:a7:3a:0b:0d:d3:f2:4d:38:be:7a:22:
43:a5:c6:e2:c8:08:38:d2:57:3a:77:21:ed:f3:9f:
9e:a6:d0:6f:c3:24:f0:8d:5a:d9:bc:51:e0:80:ab:
39:ab:f1:fb:fa:b6:39:b7:a7:e9:5b:c0:64:bf:c4:
23:1c:e4:71:bb:42:f7:75:da:e5:5f:eb:66:fb:25:
53:f2:ed:e8:d8:a8:b4:e0:ca:3d:e8:a5:27:70:af:
48:92:22:0a:8c:61:10:23:05:67:dc:15:4f:0d:4e:
02:50:5b:d4:4c:39:c9:a0:f9:a7:0a:54:10:0e:f6:
d7:87:8e:27:bf:00:bf:a6:fe:a9:99:ac:f3:c8:ed:
68:33:40:1c:1a:3e:1c:24:1d:d6:91:64:d9:da:3a:
29:ba:9a:ef:29:a6:68:95:06:e7:17:20:e3:d5:fd:
ea:c0:ee:8e:5d:27:cd:9a:6b:a0:36:97:c4:b8:cb:
7d:11:b7:a0:45:25:83:12:e4:07:05:79:f3:d1:16:
c9:20:5d:5d:59:d5:df:8b:d5:53:36:71:b2:36:40:
7e:ae:66:63:08:7f:fe:31:21:92:c0:0d:6f:d8:8d:
c4:3d:66:a6:02:20:8d:2e:05:47:7a:8f:96:84:55:
19:9e:03:fe:24:6e:36:fc:37:be:58:33:53:04:ff:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A8:50:20:41:62:DD:00:59:CE:94:F9:45:D8:FA:9B:19:EE:84:82
X509v3 Authority Key Identifier:
keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:4d:1b:3a:21:5e:98:ee:23:82:9d:92:c5:1c:6c:b8:69:fd:
b8:4a:b3:76:6c:c5:2d:45:88:be:05:48:c3:9f:8a:97:35:a9:
0d:72:60:e9:dd:25:3e:e2:20:93:6c:b2:2d:3b:f9:75:ec:9e:
21:d5:43:b8:9d:01:82:ff:e5:8f:b0:78:46:6e:f7:17:ce:88:
13:99:91:87:e0:7c:6b:76:89:28:3b:59:8c:e1:43:d1:20:c1:
c5:82:c4:c8:fc:65:9e:02:a6:33:e0:0d:cc:f7:b0:20:9b:3c:
d2:17:1d:5a:c4:c7:17:8f:b1:51:02:07:ea:b2:bd:f3:7e:3f:
47:73:75:d4:b4:ae:9f:6d:18:5a:e0:2e:59:27:f2:54:23:50:
78:7e:02:ab:4e:f2:a1:df:ca:13:5c:ef:e6:a2:06:1e:1b:12:
1b:67:d6:64:59:13:e5:94:a4:99:c5:25:84:be:e0:bd:c3:75:
d0:a0:2d:80:b8:0a:5c:9d:cd:f9:3b:55:3b:5b:3b:d2:92:d6:
75:d5:a0:d1:98:c9:4b:00:cd:9c:16:51:6d:b7:c0:f3:9d:95:
20:97:19:65:de:f1:61:cc:aa:af:a1:a6:32:77:c1:c4:1e:46:
a0:b0:ae:c6:fe:35:16:f8:71:cd:80:2f:2b:a4:d1:7e:f0:f2:
55:5e:67:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:28:18 2026 by rpki-client