
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
File: WU96C6m9HBOGhHzoljlj_k5xY2w.mft (raw, json)
Hash identifier: oHs2wbcxElbtKByonYbwF1x7X0PrwoJ/T1+1gHqaDkw=
Subject key identifier: 17:87:7C:1D:84:D3:90:23:0A:9F:C0:B3:F2:1F:FC:22:4C:C6:E2:4B
Authority key identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C
Certificate issuer: /CN=A91FFEDB/serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
Manifest number: 0278
Signing time: Sun 01 Mar 2026 02:32:23 +0000
Manifest this update: Sun 01 Mar 2026 02:32:22 +0000
Manifest next update: Sun 08 Mar 2026 02:32:22 +0000
Files and hashes: 1: WU96C6m9HBOGhHzoljlj_k5xY2w.crl (hash: DKlTieLN8ySzdPIHyNr4jgNSvf9I1eTBOuG4Px19bkw=)
2: 3CE5C23A550611ED96C8F350C4F9AE02.roa (hash: wfo3IJ4QVH7mLkWRPHTdhiFpu+AklmK5OoP63oQmtyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl
rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFEDB, serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C
Validity
Not Before: Mar 1 02:32:22 2026 GMT
Not After : Mar 8 02:32:22 2026 GMT
Subject: CN=69a3a537-3aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:33:95:4f:9b:8c:3b:6d:73:7f:ba:83:1f:
ab:b7:08:bc:ba:3f:15:e5:11:33:d5:36:e4:a9:24:
f0:d6:26:5e:25:7e:05:9c:0d:7d:00:56:99:e9:16:
a0:f1:b0:8d:b6:4f:aa:9b:9f:e3:00:50:61:7e:5b:
6d:43:53:74:86:ec:64:17:7e:f3:6a:2f:c6:ce:7d:
91:85:b8:ea:5f:62:c1:41:74:83:2a:95:c6:b0:71:
45:77:ac:88:b7:23:50:ae:4c:8b:49:63:0f:ec:79:
7e:34:ce:df:93:8c:26:c1:ae:d7:e2:ba:63:1c:7a:
d8:fc:74:0e:92:2a:04:2a:44:23:e6:71:af:2c:9a:
e6:8c:72:cf:01:97:5d:5f:47:7a:d0:d1:c6:27:f0:
d8:33:a6:c2:bf:80:52:0a:53:1a:fd:9d:6a:b9:04:
be:b3:be:38:95:03:36:66:85:99:c6:6f:ca:94:be:
cd:78:32:69:27:4d:31:dc:7d:52:71:c0:00:76:28:
ec:d2:ed:a7:c9:e5:b1:f0:6c:3d:4e:af:7a:eb:91:
41:86:83:b3:93:43:6b:4b:b4:84:84:2e:0a:e0:53:
97:76:43:dd:ea:d8:09:47:e2:aa:bf:34:c5:1b:26:
6b:2d:bd:37:af:5e:9f:d1:ac:fa:e0:17:52:0b:26:
3b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:87:7C:1D:84:D3:90:23:0A:9F:C0:B3:F2:1F:FC:22:4C:C6:E2:4B
X509v3 Authority Key Identifier:
keyid:59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:12:b4:59:95:8c:cf:49:48:c3:79:4f:13:94:40:60:15:7a:
40:12:94:2a:24:27:50:90:6c:e2:cf:f9:74:a4:8e:d3:7a:d6:
93:c4:6a:5e:a0:a1:3e:91:0e:46:db:e4:a9:57:dd:ba:96:96:
bd:17:9a:24:f6:b8:0c:f1:9d:95:b6:50:fb:75:20:de:4c:4a:
21:27:90:61:98:35:25:c1:9c:36:ad:82:d8:65:6b:af:5f:96:
ad:74:d9:ed:54:c0:7f:34:c1:ac:14:e9:40:94:42:67:21:9d:
53:de:0e:04:8a:5a:09:e9:43:a8:f7:82:df:ad:1c:0b:27:2b:
19:7b:75:6b:97:e5:aa:61:2e:a1:c8:7f:ec:09:0f:a5:8c:2f:
5f:20:94:07:67:af:c2:e2:08:cc:75:04:ba:19:91:64:20:3b:
34:9f:dc:9e:14:08:ec:d8:39:0a:a3:85:df:f6:7d:ee:c9:16:
98:e6:eb:68:1e:c5:c7:63:08:c5:c4:46:56:0c:d5:cd:08:3d:
5a:ac:15:ae:98:de:72:c1:34:7a:47:8d:e3:70:94:3f:c9:a2:
c8:81:d2:98:f2:38:a0:de:d6:3b:51:39:f9:00:7f:5e:f6:ff:
61:e8:e0:3d:f0:3e:58:97:8e:e7:cc:29:17:f4:2b:10:12:27:
64:b8:de:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:58 2026 by rpki-client