
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
File: WdWIElpxZphzjR0enm2KaNdAmyc.mft (raw, json)
Hash identifier: EQpM8jL+n4YfRMu4aOgmUhgPV7D1J4c59kOgaebMRQ0=
Subject key identifier: 54:71:0B:4F:07:3E:38:3D:EB:81:82:FD:25:27:38:A2:D2:00:5F:8B
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Certificate issuer: /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial: 0235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
Manifest number: 0216
Signing time: Sun 05 Apr 2026 02:43:23 +0000
Manifest this update: Sun 05 Apr 2026 02:43:23 +0000
Manifest next update: Sun 12 Apr 2026 02:43:23 +0000
Files and hashes: 1: WdWIElpxZphzjR0enm2KaNdAmyc.crl (hash: velW57qNSfq0wjv/KuqtINYYUAI7mj3+arzZ5NLz1Ao=)
2: 6A9F1EFECC1211EEAA175022C4F9AE02.roa (hash: 1xYIyrHc82xKY7htjAeQe3mlAnscoHObkpHB/DuNBbY=)
3: 74444F50490E11EFA7EAAA70C4F9AE02.roa (hash: NMrm1g9FM9NJPr1lYfQZFfpW90lnT17RE5GP7Fw1OY4=)
4: BCB9064CF93C11F090318BAB3D6F56BC.roa (hash: WKsRF3NIlxhyZb5Dv3mvGsaQ2EgbtfTHyBVv0+Z8Fmw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 565 (0x235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Validity
Not Before: Apr 5 02:43:23 2026 GMT
Not After : Apr 12 02:43:23 2026 GMT
Subject: CN=69d1cc4b-7c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:02:2c:91:45:c8:7c:66:85:93:a5:01:13:
cc:4e:1b:a2:2f:d3:d4:53:62:10:c8:10:e7:f6:a6:
43:fc:e6:e2:31:40:7e:b3:08:9a:ed:5f:bf:7d:0e:
0a:fb:d2:a2:b1:77:af:a5:02:53:07:49:b8:4b:03:
50:31:28:b8:b4:c7:fe:a0:73:8a:f7:6e:08:6b:6f:
a3:67:b8:b3:e4:20:79:5b:40:8d:bb:cf:fc:44:80:
80:0a:20:00:75:fd:c7:06:ae:1c:41:ca:7f:55:2e:
0b:a5:f7:81:40:b3:f0:f0:c4:3a:62:1f:e4:a0:f5:
16:7e:88:70:fc:4b:a0:03:6c:df:1c:0c:e9:6a:54:
90:82:a4:11:a3:7e:aa:b9:56:d8:d4:03:74:b5:8b:
ec:cc:c0:60:6c:d4:c2:55:f2:de:af:ea:c9:44:73:
09:c5:d2:2f:14:b8:d7:61:e6:c3:15:30:f3:5f:ac:
c3:8c:e3:7b:3a:9f:d2:3b:75:76:7d:e5:3c:54:0f:
e1:37:a0:3e:3f:3e:d6:6b:94:d4:f4:1f:6b:ae:3b:
28:86:0e:60:89:63:42:fd:4a:b3:7a:a0:8f:f0:5a:
05:d4:11:81:ea:cc:5d:07:9d:fe:6f:14:a4:a7:f5:
73:33:94:20:06:a4:3d:12:bb:92:23:f7:1b:e1:8a:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:71:0B:4F:07:3E:38:3D:EB:81:82:FD:25:27:38:A2:D2:00:5F:8B
X509v3 Authority Key Identifier:
keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:55:ae:f7:0d:c4:da:73:a2:77:ae:8d:da:bd:6b:26:ee:df:
19:df:bd:94:38:9c:c0:bf:c9:92:b6:59:8d:91:0b:10:35:02:
1f:0c:fa:6d:e7:83:9b:aa:64:9c:b8:da:db:7c:87:7b:e8:4d:
67:7a:b1:73:5b:15:a2:bc:84:27:3d:06:84:50:85:60:58:68:
8a:e2:03:68:cb:b8:49:66:1a:54:45:e0:f8:2f:b4:10:2a:e9:
13:ad:6b:23:a7:94:ba:ce:00:5c:32:a4:f8:95:73:4d:39:6a:
24:0b:52:a5:a3:a3:05:33:c8:40:a0:60:87:df:cb:19:44:7e:
99:22:97:7f:35:37:ba:68:6d:46:5f:1c:e1:0b:f7:69:20:6e:
7c:a5:91:71:78:1e:c2:c5:79:f8:45:fd:a1:61:14:67:37:d0:
79:83:7f:14:b6:4a:0e:4b:22:c9:d7:d4:d5:18:94:c0:7d:bf:
18:d8:87:92:17:46:07:e4:d0:ef:4a:96:6f:cf:ba:dd:72:9a:
0e:44:c5:db:3e:47:b7:67:aa:13:7f:a6:1e:e4:2c:8d:6f:d7:
12:75:22:ef:61:e8:58:bc:a3:d3:95:00:0f:d6:97:63:4a:c7:
00:4e:f1:e8:dd:7e:8e:02:18:ec:c4:9d:0f:43:e4:16:fc:97:
18:a5:bb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:00:42 2026 by rpki-client