
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
File: s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json)
Hash identifier: yxwpvec/H7Fqjm8Kgfv3BZq5SjFT3094FfSAey/Lx6I=
Subject key identifier: 18:17:45:20:02:A9:8F:34:CF:CB:81:33:31:CF:A9:2A:C4:7A:3D:1F
Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
Certificate issuer: /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
Manifest number: 01CC
Signing time: Sun 05 Apr 2026 03:15:08 +0000
Manifest this update: Sun 05 Apr 2026 03:15:07 +0000
Manifest next update: Sun 12 Apr 2026 03:15:07 +0000
Files and hashes: 1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: V5WEB2U2y8HTPFpazoxQEh3L/M1MBVB48zAV6A6G5qY=)
2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: SDwmGnNA62CDBnu6SIeNZtXcNKrSVhcMHLtnwpsVMtg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl
rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Validity
Not Before: Apr 5 03:15:07 2026 GMT
Not After : Apr 12 03:15:07 2026 GMT
Subject: CN=69d1d3bb-5aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7e:9e:2e:51:9e:fd:a7:24:9f:27:36:30:6e:
98:33:88:91:24:85:c5:3e:4c:c3:5c:54:2f:f6:0d:
2c:53:0e:0e:34:4d:64:05:bb:1e:88:e8:ac:1a:34:
82:d6:98:20:95:ef:21:b9:12:b8:5e:e5:2a:4b:0b:
bd:cf:ee:26:2d:2e:87:5a:c3:7b:5b:84:34:0e:48:
68:8d:cd:7d:a3:2f:a3:9b:b3:30:81:d0:26:22:85:
94:83:fe:da:2a:32:42:1d:24:1d:3b:1a:a6:a2:4b:
90:c6:f8:a6:19:57:62:46:91:f2:3f:8e:12:44:9c:
55:4a:02:cc:0b:85:16:2e:57:eb:9d:76:fd:47:e2:
d0:9a:cc:6f:79:83:dc:7f:eb:46:d6:d0:fa:56:e3:
83:8d:81:f1:99:61:1f:fd:23:ad:cc:79:43:82:99:
48:e7:3b:ef:7c:a4:42:50:35:e4:ba:d1:35:b2:97:
d6:01:fd:89:37:01:e3:a7:14:2f:70:e2:94:7e:8c:
47:0e:ae:03:24:6c:91:85:24:61:57:08:99:46:a7:
e7:bf:95:5b:28:ac:bc:d0:a1:db:1f:30:c7:81:79:
ac:ec:9c:06:16:bd:6e:c5:ef:58:de:57:1a:3a:62:
e2:9b:d2:b3:5d:29:9e:77:4b:bb:2d:84:4b:a1:ee:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:17:45:20:02:A9:8F:34:CF:CB:81:33:31:CF:A9:2A:C4:7A:3D:1F
X509v3 Authority Key Identifier:
keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:bb:77:c6:f9:a7:50:d9:43:dd:38:cb:5e:5e:61:32:6f:18:
56:b1:2a:0f:41:d4:b1:66:e3:07:36:13:d4:a2:4e:67:90:f0:
4c:6c:ab:67:5f:81:b2:ea:8e:73:ed:10:aa:60:2d:78:c7:64:
07:fa:30:d8:13:71:57:01:77:88:1c:39:d3:f1:03:a1:97:c4:
b8:8f:70:b1:97:9b:db:49:d0:8c:ca:3c:c6:8e:56:42:e6:1f:
da:a2:c3:a1:7f:29:96:eb:b5:af:4f:c9:f9:b9:80:d1:4a:49:
ce:83:a9:65:07:f8:d5:57:d6:9b:44:6d:a0:8e:31:35:1d:5d:
ed:3b:9b:c6:03:c2:ba:8c:f9:49:5d:52:05:a1:a9:f5:8c:2e:
f0:f6:57:6b:dc:d2:b5:8d:3b:ee:13:91:02:99:1d:11:16:e3:
4b:1d:a7:60:f4:39:96:1a:0f:ad:99:d5:62:a0:22:d8:1d:0f:
2b:d2:b8:ad:50:71:9d:74:0d:43:85:4a:32:ea:50:3c:7c:28:
64:dd:51:d0:60:99:25:4f:5f:0d:82:a9:91:03:69:cc:d1:66:
f4:2e:72:23:0d:cf:51:79:a5:50:44:4b:72:7a:8c:50:03:47:
a3:a9:d0:55:9a:bd:57:b0:d6:3c:54:2c:80:24:0d:e7:6e:7e:
e5:54:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:11 2026 by rpki-client