
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
File: WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json)
Hash identifier: S1DCToieAYakGS3CC6uAkHTnAFTUCiJTpieUcs/E2Qg=
Subject key identifier: 06:7D:BE:23:CD:6B:18:4F:F7:D3:1B:91:81:15:9A:87:B3:3F:26:57
Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76
Certificate issuer: /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
Manifest number: 0274
Signing time: Thu 21 May 2026 02:05:42 +0000
Manifest this update: Thu 21 May 2026 02:05:41 +0000
Manifest next update: Thu 28 May 2026 02:05:41 +0000
Files and hashes: 1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: XWW4CWEfhtj9fNsrmltjw3EgGosCCkcTwrszy/Ded/c=)
2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: TaJdRiGSYLXxN+5sGdAd2EbJ36eAZlZPdEwMNT5EY+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl
rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275A6, serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876
Validity
Not Before: May 21 02:05:41 2026 GMT
Not After : May 28 02:05:41 2026 GMT
Subject: CN=6a0e6876-6578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0e:f9:2b:eb:f4:f3:bd:20:0a:10:e9:e4:4a:
e0:a5:58:f6:ef:be:26:4a:26:7d:c2:f9:2e:c5:e7:
1e:d7:8f:5c:4e:aa:a1:e0:04:f0:4b:f7:f9:dd:47:
e0:bb:1c:4d:9f:97:62:87:26:5d:77:80:94:fa:e0:
2f:fc:58:f8:90:55:5c:11:c1:c6:97:1b:e9:bf:86:
bb:f2:dd:92:8a:62:09:2a:fe:b9:79:99:37:ed:48:
06:91:ad:e4:1a:47:47:0e:90:ba:37:b0:d2:29:76:
40:7c:8b:ff:d0:02:f9:e8:3d:6a:49:72:bb:b3:95:
27:01:95:52:a9:bd:39:1b:b7:78:35:75:a3:8a:09:
03:49:d3:08:f3:b7:a7:b7:35:7f:4d:cc:98:6b:ed:
51:99:53:4d:80:3f:36:3d:d8:d7:1d:ad:12:16:9b:
6a:79:a4:41:c9:2f:2f:a3:66:81:b8:b0:97:2f:a8:
ca:bb:4d:4b:8c:5b:b6:9c:c9:cf:75:6c:4b:6e:a5:
a7:9d:a2:13:62:3a:6b:ae:a4:67:6d:0f:80:59:60:
55:f2:9b:51:05:4d:8a:c7:6f:93:e6:23:2e:e4:94:
21:13:26:13:bd:ea:0d:2e:5e:7c:2b:b6:bf:72:68:
20:42:17:65:bd:43:a3:04:62:97:ed:da:7f:d8:e9:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7D:BE:23:CD:6B:18:4F:F7:D3:1B:91:81:15:9A:87:B3:3F:26:57
X509v3 Authority Key Identifier:
keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:91:89:25:e6:16:eb:06:f1:0d:b9:77:7c:ff:c2:64:1d:76:
7c:62:a9:b8:47:88:aa:4d:5f:df:69:08:91:07:d7:da:9f:5f:
76:e5:1f:69:0d:62:94:81:a4:69:6b:ac:8d:ab:96:75:55:e1:
0a:be:6a:2d:ba:07:f4:7d:88:75:87:37:ce:43:72:04:6f:87:
f4:a1:89:ed:a9:34:91:b5:d4:19:12:f3:f6:4f:49:0f:aa:46:
b3:4b:fd:47:24:0b:da:61:2f:69:7c:9b:ac:3a:e7:7d:fd:b2:
2e:c5:b7:ec:ad:01:62:07:5e:a9:c4:75:ff:37:7e:41:3c:94:
e9:73:d4:0c:63:6c:c3:f5:39:3c:03:b9:c3:fd:eb:8c:50:8e:
b6:42:32:6f:ea:49:3a:d1:c0:15:d3:ff:ef:c8:ef:6a:7e:11:
eb:9e:23:2e:63:86:04:db:ea:60:b4:fd:a9:e8:34:33:d7:b8:
d3:3a:d9:47:bd:c3:2d:a6:e5:c9:18:3f:30:5e:77:db:d3:88:
ff:d4:03:11:e8:c2:3e:74:99:a0:57:94:b4:b2:10:a6:a5:79:
cc:3f:b3:f1:ed:3a:a0:35:e1:65:fa:b7:4e:e5:a8:97:e6:ef:
8f:ef:6a:af:ae:b7:f6:de:d4:77:24:8c:27:fb:77:2b:96:83:
8f:8b:78:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:17:44 2026 by rpki-client