
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
File: rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft (raw, json)
Hash identifier: mapSn/bOq2Ta9W1UR+e7VSPQKQ0ZU6T9cCXif7oIg9k=
Subject key identifier: AC:DC:7C:D8:BD:E8:9E:B2:CF:2E:31:28:BB:51:E5:62:EB:67:06:91
Authority key identifier: AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF
Certificate issuer: /CN=A91A6A74/serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
Manifest number: C3
Signing time: Wed 07 Oct 2026 07:21:43 +0000
Manifest this update: Wed 07 Oct 2026 07:21:42 +0000
Manifest next update: Wed 14 Oct 2026 07:21:42 +0000
Files and hashes: 1: rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl (hash: d5d7Z7rts1wdBbj55iOnCYiLaexj/aYgSr0s1lCojHE=)
2: 285C90D49A8911F0B2115222C4F9AE02.roa (hash: X4RiwJfU/AWIqnRXA1GtRFWmRdCHp9Hw0fFZqv0xXWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl
rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6A74, serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF
Validity
Not Before: Oct 7 07:21:42 2026 GMT
Not After : Oct 14 07:21:42 2026 GMT
Subject: CN=6ac5f306-63ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:54:6f:88:fc:f9:eb:11:8f:39:d6:61:bb:
cd:5d:95:1a:6a:ff:d0:24:7f:77:89:a2:a1:9d:dc:
e3:f6:94:06:dd:4c:a1:bd:e0:00:e1:b8:93:fc:d4:
b6:01:6c:83:fe:0e:12:bc:eb:dd:a2:1e:69:70:d0:
37:89:42:52:3c:e8:89:15:95:a8:a9:f3:00:1f:f0:
cb:e6:b6:f6:8d:31:c1:57:0b:90:6b:60:0d:2c:d8:
99:da:88:b8:0f:91:f0:3f:d5:85:b3:15:b1:ad:5f:
00:25:ba:90:ef:fb:36:ec:10:1d:50:8d:23:f5:97:
36:2d:6a:c0:5e:fa:9e:00:cd:12:a0:68:a2:3f:87:
cd:7c:52:d6:df:f5:b2:63:29:e8:d8:e5:2b:8f:73:
b7:f3:37:0a:d4:bc:54:4a:7d:e3:15:65:3d:95:1b:
d0:d0:57:c5:07:91:21:a4:cd:89:3e:8c:50:a8:08:
a2:89:88:fa:0a:cb:a7:88:15:ba:f9:c6:d8:b6:ee:
d4:d7:91:18:c1:1b:63:d5:b9:b6:eb:8e:d9:d1:bc:
94:58:9f:7f:99:7a:ca:d3:c3:40:5b:0c:2c:8f:45:
0d:19:a9:c9:fa:c7:ac:e3:ca:7d:d4:a7:5f:3b:48:
8b:aa:82:32:65:6e:dd:60:e6:36:d4:2e:12:47:ce:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DC:7C:D8:BD:E8:9E:B2:CF:2E:31:28:BB:51:E5:62:EB:67:06:91
X509v3 Authority Key Identifier:
keyid:AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:7b:23:11:fc:88:ae:e8:3e:15:29:4b:1c:39:ab:c3:7b:07:
14:dd:9b:9f:0a:75:09:2a:f3:92:61:74:02:4d:67:f8:48:15:
58:59:af:4c:fb:a7:50:07:52:4f:2e:c0:ee:84:99:81:90:c5:
0d:c6:db:05:0e:b0:f1:d1:05:07:05:c4:c4:0d:ae:94:49:14:
08:d4:d7:9e:5d:4f:64:7a:43:a4:cb:c6:26:a0:95:a1:16:04:
2a:c4:26:98:26:e8:80:b5:62:61:86:47:86:71:a4:f2:fc:87:
0c:8d:d1:3c:ab:00:fc:98:8c:67:c2:bf:6b:03:c5:12:3e:06:
01:17:5a:02:ff:65:78:ba:52:d2:9d:4b:0d:e0:03:bb:26:bb:
7e:21:bb:d3:d8:6f:78:dd:43:0f:ef:5f:9a:b9:f5:6b:a9:39:
cb:21:b2:e5:b5:7c:f4:ba:76:ac:de:99:64:1a:c5:a3:03:82:
3f:20:6b:35:2f:ee:a3:67:ea:27:6e:fa:04:4e:7c:9a:7f:da:
74:0e:33:08:d1:cd:d4:36:e7:04:e2:85:37:16:94:1e:1d:68:
fd:bf:0a:57:cb:f0:1a:ee:52:ff:4b:a3:b9:8f:6e:e6:4b:af:
b1:6d:08:90:c6:c3:dc:01:d2:16:a1:7d:e8:4a:d0:a8:71:23:
98:a0:96:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:47:26 2026 by rpki-client