
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
File: Wr7NjqrTfqV665OfLAsUKXSEH4o.mft (raw, json)
Hash identifier: RNrabogiV+M/HJo5ET/YQxjqYQvzMoKYbrzTD1uCWGA=
Subject key identifier: 09:54:7A:61:19:E1:7D:F6:4A:9E:76:05:30:81:9B:D2:F4:9E:56:ED
Authority key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
Certificate issuer: /CN=A91A5A82/serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
Manifest number: DC
Signing time: Thu 21 May 2026 06:44:31 +0000
Manifest this update: Thu 21 May 2026 06:44:31 +0000
Manifest next update: Thu 28 May 2026 06:44:31 +0000
Files and hashes: 1: Wr7NjqrTfqV665OfLAsUKXSEH4o.crl (hash: of1DEF4jUQzIFha2MKl2cMtAKKbgAUTKo6npgXbVIZI=)
2: D0B32912090911F0A5348F26C4F9AE02.roa (hash: 4Lyw/AU+Wk60oVjtMsai5M/XpQ4x8ZuW3TaDGBXdpZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Validity
Not Before: May 21 06:44:31 2026 GMT
Not After : May 28 06:44:31 2026 GMT
Subject: CN=6a0ea9cf-3221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:4c:2d:0d:98:5f:cf:bd:8e:00:18:72:b8:
c5:7c:46:fb:34:c7:7f:ac:af:cf:67:ae:73:67:0d:
ca:e1:f4:7c:e9:f0:c8:3e:5f:c1:d7:f7:55:49:84:
18:45:27:24:53:b1:ff:27:47:6b:55:22:6d:3c:2e:
da:69:b8:70:8f:a2:41:25:77:83:ea:78:ff:81:7e:
42:04:0e:16:f5:4f:91:1e:a8:57:ff:84:9f:f3:67:
08:f3:40:fd:7d:04:ab:0c:83:ba:25:3a:ab:b8:90:
68:f7:aa:b3:6f:b8:b2:87:ff:f2:37:ef:ac:04:73:
f5:3c:ea:94:44:92:ff:cc:fd:9a:ae:30:2b:bb:06:
ce:70:6a:b4:eb:57:39:7d:e5:6b:95:f1:99:cf:59:
ee:ee:83:84:73:8a:c7:bd:07:48:9d:02:d6:41:1f:
7f:90:35:00:50:37:b3:b2:30:27:56:4a:3d:90:23:
34:58:07:42:c0:a6:c1:32:3d:e1:c7:7e:0c:ad:06:
b6:ff:94:57:ab:3a:09:d8:0c:15:b0:84:86:71:9b:
f1:b6:5d:83:39:63:fa:ff:b7:76:99:a1:45:ca:18:
b9:c5:1c:40:e2:dd:08:d1:d8:63:37:6c:29:24:70:
eb:48:33:9f:ba:4e:57:fc:d0:84:ae:b1:0d:ac:65:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:54:7A:61:19:E1:7D:F6:4A:9E:76:05:30:81:9B:D2:F4:9E:56:ED
X509v3 Authority Key Identifier:
keyid:5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:dd:d5:7f:c4:01:7c:f2:82:2a:f8:c5:05:9d:ab:a2:c0:15:
fa:b9:8f:22:46:bf:be:97:50:48:e6:d7:89:af:19:9b:e8:0c:
7b:cd:63:98:ab:b6:4d:a7:be:95:a3:b2:f2:58:dc:e3:bc:79:
3f:e1:58:53:92:dd:70:37:31:56:67:9f:dc:4d:12:b0:a7:a9:
11:28:6b:a9:23:f9:d7:37:1c:05:16:a9:71:0a:0f:34:5e:fa:
8b:ae:fd:f0:24:51:78:e7:0a:ef:68:99:5e:2d:5d:1b:b4:f9:
db:fe:30:3e:ce:f5:91:07:31:11:99:58:0b:8d:3a:57:6d:42:
92:54:94:d9:b1:3d:86:c8:39:5e:93:f2:4e:62:21:2c:fd:16:
23:8e:56:ea:67:32:21:3a:44:7d:ce:93:b9:a8:eb:7a:01:fe:
ca:10:9e:ce:73:24:51:2d:54:7f:fb:28:5d:66:28:e9:23:7c:
06:b4:6a:53:c3:79:64:86:85:c5:1d:8e:5a:c8:a5:74:78:df:
05:8b:13:6c:77:1b:37:66:a0:e8:ce:c7:79:16:f6:0e:ae:2b:
a1:ec:f4:40:78:c1:6e:05:47:03:fc:a7:f3:cd:71:81:86:ef:
8e:7f:ef:75:89:93:3c:f0:4b:34:a1:0b:09:cb:64:f2:d9:03:
b9:86:4c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:22 2026 by rpki-client