
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json)
Hash identifier: IJdp5VAEAgKrbZGRVw33Gxa5qFBf+lTwDO30SUIwvzw=
Subject key identifier: 99:0C:64:C9:B2:DA:FF:A3:4F:19:3C:C2:A8:A8:F8:60:EE:DA:FA:6D
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial: 0910
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
Manifest number: 08F6
Signing time: Sat 04 Apr 2026 20:09:36 +0000
Manifest this update: Sat 04 Apr 2026 20:09:35 +0000
Manifest next update: Sat 11 Apr 2026 20:09:35 +0000
Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: ruJj78OleHucYXiSpV0MutwsWRygOj0bRTY4DQ+Jpjk=)
2: 12789D14F82E11F09E4CD127396F56BC.roa (hash: 0lQm90IuI3a5EcWOhbRW2oYdVmTwAF33dV4T2vGRc30=)
3: 37A30AA2157A11F1B5E2F6BC3D3D8C67.roa (hash: uAPz3oqpyV8H/ba3OsJeuX8/ZXubOJrKDa3EJe/hGAk=)
4: C2D58A40182311F1A32496671A3D8C67.roa (hash: Vjii/cMW7dxLjA293RnTQH1E8e35be6igTOo7WebE5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2320 (0x910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Validity
Not Before: Apr 4 20:09:35 2026 GMT
Not After : Apr 11 20:09:35 2026 GMT
Subject: CN=69d17000-5976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:47:43:dd:21:e7:60:7c:55:5d:78:44:c9:
8e:3a:0a:fa:b6:a0:51:e0:69:c2:24:86:de:e5:98:
6b:5b:fe:75:1b:b8:03:a3:0a:11:60:14:0d:e9:b1:
9f:2b:f9:0b:7a:2d:4f:36:dc:3b:3b:ba:fd:bd:60:
20:37:b6:29:f1:5d:35:06:35:c4:98:81:6d:52:4b:
78:f3:2c:75:52:0d:64:e5:eb:1c:5f:13:a4:fd:b5:
1d:05:8c:76:7a:2b:40:8e:89:78:4b:dd:5a:b7:df:
0b:8e:5f:bc:42:dc:1a:74:4f:1a:c3:67:4a:97:ad:
03:55:55:2f:9f:62:11:5a:c2:73:7a:55:78:72:b8:
c1:3c:b5:05:2a:95:00:b0:09:9e:e9:fe:48:38:5a:
04:3b:01:e4:42:84:bf:3e:a0:b5:42:5c:46:8a:48:
e4:95:c1:f5:a6:1f:a2:08:29:21:1f:f7:01:78:31:
88:33:e7:e4:03:c2:85:0d:18:ee:82:09:85:eb:66:
96:f2:fc:68:02:57:c8:86:46:9f:40:e6:69:38:4e:
71:fb:b5:88:3d:65:67:88:15:6a:c1:0e:2d:ce:bf:
86:98:9a:39:4e:34:46:49:ad:f9:39:d9:2f:80:a1:
31:0e:83:17:3b:67:1a:3b:87:69:62:63:12:b1:2f:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:64:C9:B2:DA:FF:A3:4F:19:3C:C2:A8:A8:F8:60:EE:DA:FA:6D
X509v3 Authority Key Identifier:
keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:33:17:67:48:4d:f9:f8:c2:d5:d6:6b:c9:b4:68:04:6e:69:
c4:6b:ae:28:70:f5:db:31:c5:39:bb:45:4d:5d:0e:75:6a:d0:
30:14:fe:e6:c8:39:7a:36:82:55:64:c2:33:db:99:e0:d6:aa:
c5:2d:25:ed:d3:05:a3:59:d4:91:67:b6:ae:86:73:5c:43:e8:
93:76:1f:2c:92:9f:93:d7:f9:2c:6f:a1:a2:d1:42:5d:c7:58:
35:ac:5e:e9:d1:6e:60:11:8c:08:f8:69:df:c5:09:11:ed:c4:
83:0e:a3:0c:e8:7d:e3:82:b3:5d:57:54:65:62:b3:2b:25:23:
8f:59:23:6d:f4:5c:4d:25:27:82:c6:18:f9:a4:1a:98:67:57:
a0:85:d0:59:77:d2:8b:ca:b8:18:04:2e:00:60:24:9d:c0:d9:
71:a6:da:1a:63:28:3f:32:2b:47:f8:c0:a4:63:48:59:d7:08:
74:60:e1:9e:ac:66:0b:8b:8c:a9:d6:dc:07:d6:ba:19:01:9f:
36:d0:cc:a3:f4:24:c8:04:53:e8:04:2c:5c:51:9f:51:47:17:
25:4d:fa:c2:8a:2d:67:f3:07:ed:83:8b:6b:08:65:b6:82:03:
a2:8a:0c:91:4f:a3:51:e4:82:e2:a9:63:0c:b6:80:a5:2a:ba:
f6:db:40:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2
OTQyNDE2RDEwHhcNMjYwNDA0MjAwOTM1WhcNMjYwNDExMjAwOTM1WjAYMRYwFAYD
VQQDEw02OWQxNzAwMC01OTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtztHQ90h52B8VV14RMmOOgr6tqBR4GnCJIbe5ZhrW/51G7gDowoRYBQN6bGf
K/kLei1PNtw7O7r9vWAgN7Yp8V01BjXEmIFtUkt48yx1Ug1k5escXxOk/bUdBYx2
eitAjol4S91at98Ljl+8QtwadE8aw2dKl60DVVUvn2IRWsJzelV4crjBPLUFKpUA
sAme6f5IOFoEOwHkQoS/PqC1QlxGikjklcH1ph+iCCkhH/cBeDGIM+fkA8KFDRju
ggmF62aW8vxoAlfIhkafQOZpOE5x+7WIPWVniBVqwQ4tzr+GmJo5TjRGSa35Odkv
gKExDoMXO2caO4dpYmMSsS/6JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkMZMmy
2v+jTxk8wqio+GDu2vptMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND
OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG
dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH
M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADDMXZ0hN+fjC1dZrybRoBG5pxGuuKHD12zHFObtFTV0OdWrQMBT+5sg5ejaC
VWTCM9uZ4NaqxS0l7dMFo1nUkWe2roZzXEPok3YfLJKfk9f5LG+hotFCXcdYNaxe
6dFuYBGMCPhp38UJEe3Egw6jDOh944KzXVdUZWKzKyUjj1kjbfRcTSUngsYY+aQa
mGdXoIXQWXfSi8q4GAQuAGAkncDZcabaGmMoPzIrR/jApGNIWdcIdGDhnqxmC4uM
qdbcB9a6GQGfNtDMo/QkyART6AQsXFGfUUcXJU36wootZ/MH7YOLawhltoIDoooM
kU+jUeSC4qljDLaApSq69ttAAA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:12 2026 by rpki-client