
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
File: WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft (raw, json)
Hash identifier: l0LbvGM8n7aYqexpZTyH2GmfRhgraKL7t5iI5iGKmd4=
Subject key identifier: 99:6E:84:C6:92:E7:FD:0F:2E:25:86:01:36:34:64:B7:DB:37:ED:93
Authority key identifier: 58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24
Certificate issuer: /CN=A91A1366/serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
Manifest number: 63
Signing time: Thu 29 Oct 2026 08:50:04 +0000
Manifest this update: Thu 29 Oct 2026 08:50:04 +0000
Manifest next update: Thu 05 Nov 2026 08:50:04 +0000
Files and hashes: 1: WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl (hash: ogbpSh5cAKknMwmdeilEDLsiC2MZcP/rFLvSl7B+NCQ=)
2: 9DE21B78534111F196833CCBCD833773.roa (hash: 5D8pGtcI0i0PyQLkaDycsxgJHQA/3dZqJfK5aATBRWs=)
3: 857B25F03EDF11F1939FAF8DB6833773.roa (hash: jvx3jLr9s6QjVJZgrGVKD9kTWgR2nMK23/H41dS7lCY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl
rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 08:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1366, serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
Validity
Not Before: Oct 29 08:50:04 2026 GMT
Not After : Nov 5 08:50:04 2026 GMT
Subject: CN=6ae308bc-acc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:25:7d:8c:61:ec:f2:b8:d2:0a:d0:a3:7a:
9c:a8:cf:2e:e6:8e:43:bb:39:e9:2a:ed:11:6c:58:
f9:10:a4:79:2d:ae:34:35:2a:18:22:f4:9b:af:2e:
3e:f1:e3:19:a4:52:2a:6b:18:5c:9d:cf:4b:19:54:
54:64:57:43:2d:a5:7d:21:85:44:b1:1e:1f:a7:9e:
f5:6e:8f:75:13:94:35:a6:d9:bf:97:68:e8:2a:5c:
91:4e:18:3c:69:f6:4b:56:37:b8:3c:85:40:81:fb:
f9:d7:b8:a3:63:2c:1e:51:74:02:b3:cb:7e:4a:dc:
5f:59:68:5d:8e:19:a4:7b:7f:6d:7c:18:35:53:22:
f3:cb:1f:ff:1e:a4:02:31:96:84:45:a3:9d:fa:11:
0b:52:36:03:9c:9f:27:b1:fa:ae:f4:20:43:ff:33:
fb:83:71:59:41:0b:1c:da:a0:cd:a2:70:62:fe:20:
90:ae:f7:4f:09:48:5f:1e:73:7c:f9:8d:24:ee:5e:
dc:ed:2c:78:91:85:61:82:3b:7f:02:31:e7:08:4c:
d5:8e:d4:94:fa:f1:c9:4a:ba:4b:f0:3d:74:dd:d0:
d7:25:2d:b2:20:40:ff:5b:15:61:c9:66:43:e7:3f:
b0:7b:b3:43:ca:cb:66:5a:ec:6b:e7:55:d4:df:0d:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6E:84:C6:92:E7:FD:0F:2E:25:86:01:36:34:64:B7:DB:37:ED:93
X509v3 Authority Key Identifier:
keyid:58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:53:e1:f7:28:c3:38:81:c7:4f:16:f9:cf:a8:6c:3f:65:c5:
fb:47:a3:d5:7f:ef:6f:f6:95:a3:c8:c8:0c:53:56:f2:8c:06:
38:31:2b:e6:09:86:72:79:c7:8d:e9:94:20:2b:da:a1:e7:db:
a3:eb:7d:94:1b:84:01:d8:e0:39:19:ba:56:21:01:5d:e2:4a:
cb:a7:e4:1b:05:de:7c:f4:5c:78:1d:59:0e:a2:ed:62:c1:d9:
53:0d:c2:28:c2:93:0b:8b:14:3d:e6:39:f7:ad:82:57:14:dc:
21:09:7c:67:be:eb:83:04:d5:e8:9d:33:a4:1d:49:6d:2a:f3:
55:e2:9c:93:1f:4f:fa:09:fd:c1:b6:38:e7:92:7e:b7:4a:57:
07:8d:ce:44:f5:eb:d6:e2:c3:56:89:75:f2:31:4e:b4:02:5d:
ba:2d:f4:bb:f8:2e:ed:c1:ba:a2:a0:29:b7:70:b4:42:6a:fc:
b1:a7:1c:1e:88:da:06:ba:af:ae:dd:e7:55:79:2a:36:f9:19:
a7:43:b6:ff:8e:43:1d:b7:89:c2:20:4a:b2:11:db:03:4d:ad:
c1:b5:1f:ce:fb:5c:94:a1:40:4e:d9:63:eb:22:56:bc:02:8d:
eb:d3:74:a4:b7:cf:0a:d1:d5:72:6f:e7:27:22:78:7a:3a:ab:
2b:68:8a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:20:53 2026 by rpki-client