
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
File: wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft (raw, json)
Hash identifier: GpCt4d8FhrT/nR4f90vlO4YBqirSEMN+j4RoknYrI/I=
Subject key identifier: 18:39:96:58:DD:BF:6A:AA:2F:4D:E2:24:DF:13:7B:88:F1:DB:F6:8B
Authority key identifier: C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19
Certificate issuer: /CN=A91A445C/serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
Certificate serial: 3088
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
Manifest number: 307C
Signing time: Sat 04 Apr 2026 15:24:56 +0000
Manifest this update: Sat 04 Apr 2026 15:24:55 +0000
Manifest next update: Sat 11 Apr 2026 15:24:55 +0000
Files and hashes: 1: wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl (hash: OS8DcC66pcquRXMct3oInl3ZDNWkrKX1d28Q5i92/B4=)
2: 47A21580B6CC11EC98672826C4F9AE02.roa (hash: cztq4WM+cyh6Dv8KVPvE42rjfiHW8NZMn1s0RvbxLJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl
rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12424 (0x3088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A445C, serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
Validity
Not Before: Apr 4 15:24:55 2026 GMT
Not After : Apr 11 15:24:55 2026 GMT
Subject: CN=69d12d48-422b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ab:0a:43:22:40:8e:88:cb:79:19:ce:fe:19:
e5:7b:34:e9:ca:af:15:dc:3c:7e:bf:4c:18:f7:87:
72:05:7e:66:25:6f:5d:4c:da:04:4c:d9:80:ef:82:
e7:0f:c4:9a:81:35:8e:94:49:fe:6e:24:a6:c3:42:
94:2b:7b:95:5c:f0:11:45:a5:c9:cd:7b:b9:6b:07:
ea:67:17:e6:89:7f:47:37:c0:dc:7e:c0:90:4b:a5:
03:b0:5b:e2:2c:40:3b:3e:fe:b4:d8:0c:26:c2:b6:
35:d2:6e:ae:75:e8:0a:55:6c:68:52:18:8f:62:88:
6b:60:0e:cc:20:7d:17:2b:cd:67:79:72:f1:0a:c5:
86:5d:7e:d8:55:96:1d:2f:a0:82:7a:5d:47:6d:6d:
e0:cf:c9:de:63:44:ee:7f:a8:6d:6d:a7:a8:58:1e:
df:b8:b6:aa:b8:ea:92:32:ba:c9:9e:f8:49:dc:17:
1f:69:90:c1:02:1b:2e:c0:9b:09:6b:e7:9a:cd:74:
0a:ab:58:81:7f:5f:55:4c:e3:00:1a:04:b8:6c:49:
56:1b:17:f1:e7:30:8a:ee:00:fb:79:b0:68:ef:72:
f2:c2:82:61:4a:69:3a:53:91:f3:3d:d9:2e:38:03:
96:10:b4:15:05:e2:1f:f2:ca:70:69:a7:41:27:ee:
d0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:39:96:58:DD:BF:6A:AA:2F:4D:E2:24:DF:13:7B:88:F1:DB:F6:8B
X509v3 Authority Key Identifier:
keyid:C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:84:0f:e1:1f:6d:b1:21:80:f5:d5:3b:dc:5d:e9:3e:97:54:
cb:09:63:28:62:49:ce:60:c3:b3:f4:f2:eb:2f:ac:88:5f:a6:
4a:36:a8:99:89:a7:d8:ad:43:1c:e9:12:94:05:82:19:bd:72:
86:0c:e9:d9:b8:72:94:b3:29:9c:de:9c:75:7f:04:7b:25:04:
03:88:72:9f:12:37:1a:e4:4a:a7:80:44:a7:0e:c0:f1:2c:37:
9b:f0:4f:1b:e5:1b:07:c3:29:d6:00:21:e5:7d:66:c8:b6:58:
4a:11:01:18:fe:7e:57:7f:87:81:92:e2:a8:e1:d8:95:b8:02:
31:c4:43:a5:08:8f:0c:3e:19:d2:2c:a0:58:f0:6a:59:ba:7d:
3d:ca:04:c2:97:69:33:ae:20:f7:80:05:1f:37:7c:ed:3e:e0:
95:d4:cc:3f:ca:08:76:92:c1:4d:e4:61:2d:95:76:89:28:f3:
2e:74:bc:2e:8f:4c:f9:f2:a0:7d:33:75:3c:38:93:e0:17:34:
65:d8:bc:82:cf:df:1f:62:54:50:bc:b1:bd:5f:31:85:86:03:
61:f7:c5:9a:04:25:d2:12:3c:d6:82:ac:0e:82:7e:35:aa:e0:
ae:be:f0:ad:8c:61:96:2c:10:80:ac:ea:34:de:b8:c5:89:6c:
94:bb:48:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:33 2026 by rpki-client