
$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
File: wN0sVYV6kv_nzcuilJmD1IpCudg.mft (raw, json)
Hash identifier: ndo3jWUP0cQ0252Zy8rOWx5geEtJ8GRRp6VLygPG5bk=
Subject key identifier: 64:1C:21:EC:95:0F:27:74:E5:E7:CC:31:09:29:6B:46:B5:09:23:A7
Authority key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
Certificate issuer: /CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
Manifest number: 0122
Signing time: Tue 03 Mar 2026 05:17:59 +0000
Manifest this update: Tue 03 Mar 2026 05:17:58 +0000
Manifest next update: Tue 10 Mar 2026 05:17:58 +0000
Files and hashes: 1: wN0sVYV6kv_nzcuilJmD1IpCudg.crl (hash: nmiHdqceIY8u/MHiHZge/6tVKt0270A9ZTzaFLWqeSg=)
2: 002622285F8F11EF9D02A046C4F9AE02.roa (hash: 8bGb+pMrm5fozKF07TQ3fY5ramo2lQU1ubKXT4CDsCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl
rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326FF, serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
Validity
Not Before: Mar 3 05:17:58 2026 GMT
Not After : Mar 10 05:17:58 2026 GMT
Subject: CN=69a66f06-a96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e6:24:e7:70:79:66:30:14:38:f2:24:43:0f:
5b:0f:27:91:76:37:37:7a:fe:eb:a3:44:12:ac:a3:
fd:fa:10:59:1b:59:ff:1f:19:02:d1:df:ea:b3:f3:
c7:ea:9e:33:75:d7:9e:3d:1d:77:e9:d1:4e:aa:47:
7c:32:53:42:97:42:fc:4e:47:3d:f5:00:a2:9f:10:
bf:83:0a:ba:fe:6e:4d:8b:45:5c:1e:2c:7c:0a:6c:
05:6b:a9:db:65:ad:a2:8f:5e:01:1f:13:1d:82:bb:
f5:31:c1:9d:c5:ec:88:b3:4a:2b:69:be:94:00:37:
6b:37:ce:9c:d5:a2:fd:5f:be:96:f9:0e:bd:9c:17:
b8:e3:4d:bc:f9:94:ad:fd:df:d1:93:6f:03:d3:dc:
bd:96:0c:ad:fd:72:10:ff:42:b1:8b:15:03:30:0e:
d1:99:da:e1:c0:8e:56:40:31:f3:ed:e1:52:29:d4:
65:ed:f9:0d:1b:04:ce:7b:d2:ed:b6:ff:e3:e2:df:
2a:c3:b7:45:f7:1f:a9:3b:3b:e8:9d:cb:fa:71:22:
37:4e:cd:c2:75:a4:df:4d:11:66:22:71:ae:bc:a7:
39:c7:5b:72:86:8e:cf:1f:8a:bd:c4:e7:54:17:fd:
c1:f5:0c:9c:b2:9b:36:b6:35:0f:12:87:44:7f:50:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1C:21:EC:95:0F:27:74:E5:E7:CC:31:09:29:6B:46:B5:09:23:A7
X509v3 Authority Key Identifier:
keyid:C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1a:f5:c5:d1:4f:68:3a:19:6e:a5:6f:4a:08:51:4f:a8:57:
bf:9c:9d:ed:8a:76:47:45:94:23:71:69:c9:ab:3b:60:17:2c:
ac:f8:f0:98:b7:ce:a0:7a:a6:90:b6:8c:24:e3:19:1b:b2:ee:
26:15:f6:2a:f7:ab:e2:38:7c:f2:86:5b:b7:a0:53:ac:c6:c2:
6e:8e:32:38:fa:8e:18:ae:3e:72:5d:0a:58:a7:52:14:b5:4a:
bb:0e:c1:4a:33:e0:80:d9:22:bc:0e:53:64:2f:4c:b7:66:48:
8d:2e:b6:4f:78:65:3a:27:62:7f:f5:14:58:d5:f5:97:df:d5:
9e:f1:f7:e6:0f:ff:1c:62:28:1c:f9:0a:19:ae:a4:ad:b1:81:
04:20:aa:12:e8:4e:82:62:1c:14:54:fc:f4:f4:55:52:6c:a5:
25:7d:ae:bb:9a:af:1d:5c:c6:48:04:33:ab:08:7a:cc:ec:21:
8e:f7:b5:47:e5:9e:5d:d5:e8:c6:ce:96:2b:ac:04:12:ae:f8:
7a:ea:27:94:cc:f0:a5:3a:a0:ec:4b:ef:0e:53:b9:9b:92:42:
60:38:25:c2:21:3b:4a:da:de:d7:e6:84:08:2b:c5:6f:ea:8e:
98:18:03:66:00:c7:f1:15:af:7c:ed:15:90:3b:7e:96:60:67:
1c:bd:af:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI2RkYxMTAvBgNVBAUTKEMwREQyQzU1ODU3QTkyRkZFN0NEQ0JBMjk0OTk4M0Q0
OEE0MkI5RDgwHhcNMjYwMzAzMDUxNzU4WhcNMjYwMzEwMDUxNzU4WjAYMRYwFAYD
VQQDEw02OWE2NmYwNi1hOTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAieYk53B5ZjAUOPIkQw9bDyeRdjc3ev7ro0QSrKP9+hBZG1n/HxkC0d/qs/PH
6p4zddeePR136dFOqkd8MlNCl0L8Tkc99QCinxC/gwq6/m5Ni0VcHix8CmwFa6nb
Za2ij14BHxMdgrv1McGdxeyIs0orab6UADdrN86c1aL9X76W+Q69nBe44028+ZSt
/d/Rk28D09y9lgyt/XIQ/0KxixUDMA7RmdrhwI5WQDHz7eFSKdRl7fkNGwTOe9Lt
tv/j4t8qw7dF9x+pOzvoncv6cSI3Ts3CdaTfTRFmInGuvKc5x1tyho7PH4q9xOdU
F/3B9Qycsps2tjUPEodEf1BL1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQcIeyV
Dyd05efMMQkpa0a1CSOnMB8GA1UdIwQYMBaAFMDdLFWFepL/583LopSZg9SKQrnY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZGRi85NDEwNEI0QTVG
OEUxMUVGQjIzRTc5NDVDNEY5QUUwMi93TjBzVllWNmt2X256Y3VpbEptRDFJcEN1
ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3dOMHNWWVY2a3ZfbnpjdWlsSm1EMUlwQ3VkZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjZGRi85NDEwNEI0QTVGOEUxMUVGQjIzRTc5NDVDNEY5QUUwMi93TjBzVllWNmt2
X256Y3VpbEptRDFJcEN1ZGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAohr1xdFPaDoZbqVvSghRT6hXv5yd7Yp2R0WUI3Fpyas7YBcsrPjwmLfOoHqm
kLaMJOMZG7LuJhX2Kver4jh88oZbt6BTrMbCbo4yOPqOGK4+cl0KWKdSFLVKuw7B
SjPggNkivA5TZC9Mt2ZIjS62T3hlOidif/UUWNX1l9/VnvH35g//HGIoHPkKGa6k
rbGBBCCqEuhOgmIcFFT89PRVUmylJX2uu5qvHVzGSAQzqwh6zOwhjve1R+WeXdXo
xs6WK6wEEq74euonlMzwpTqg7EvvDlO5m5JCYDglwiE7Stre1+aECCvFb+qOmBgD
ZgDH8RWvfO0VkDt+lmBnHL2vqQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:28 2026 by rpki-client