
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/WitzJi4KG4Slqp07Tj3yNWXIHd0.mft
File: WitzJi4KG4Slqp07Tj3yNWXIHd0.mft (raw, json)
Hash identifier: DNHph9VjUrKVsIzlzjYzXoEzZXRji4A4zoRANF3ul40=
Subject key identifier: 93:18:66:E5:54:33:1D:24:E6:23:2E:A2:1E:D9:9F:53:C2:EE:99:10
Authority key identifier: 5A:2B:73:26:2E:0A:1B:84:A5:AA:9D:3B:4E:3D:F2:35:65:C8:1D:DD
Certificate issuer: /CN=A91AF9EC/serialNumber=5A2B73262E0A1B84A5AA9D3B4E3DF23565C81DDD
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WitzJi4KG4Slqp07Tj3yNWXIHd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/WitzJi4KG4Slqp07Tj3yNWXIHd0.mft
Manifest number: 0F
Signing time: Tue 23 Jun 2026 09:22:40 +0000
Manifest this update: Tue 23 Jun 2026 09:22:39 +0000
Manifest next update: Tue 30 Jun 2026 09:22:39 +0000
Files and hashes: 1: WitzJi4KG4Slqp07Tj3yNWXIHd0.crl (hash: ODSstzHV8khUFnw50FQaEDQhvCWwhjVZx9Zhi+Y4kS4=)
2: FCD9067E5B8311F1B70F511BA8833773.roa (hash: cgYr+kfxAyhZ9VoWZROtLJpf9z2ifbMSdJfhGqrR9IA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/WitzJi4KG4Slqp07Tj3yNWXIHd0.crl
rsync://rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/WitzJi4KG4Slqp07Tj3yNWXIHd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WitzJi4KG4Slqp07Tj3yNWXIHd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 09:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF9EC, serialNumber=5A2B73262E0A1B84A5AA9D3B4E3DF23565C81DDD
Validity
Not Before: Jun 23 09:22:39 2026 GMT
Not After : Jun 30 09:22:39 2026 GMT
Subject: CN=6a3a505f-f1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7c:ff:a4:fc:bd:64:3f:69:cd:d6:07:44:e4:
42:ed:09:8a:a2:0c:97:59:39:84:9a:69:88:12:6c:
a3:e5:6a:79:f6:a5:c9:ab:9c:5d:41:d7:db:ef:2f:
8a:b2:30:69:81:6a:42:e7:b9:bf:3d:8d:e3:67:84:
8a:ff:9b:fc:eb:23:74:0a:47:9d:47:37:23:21:24:
ef:38:65:10:7f:88:40:77:9e:24:29:eb:05:fd:be:
19:23:0d:e1:c7:9d:bb:dc:46:ad:e5:b9:e9:f4:d5:
62:cb:19:31:5a:9b:ab:80:67:aa:0c:76:bd:e0:dd:
54:29:c0:50:b0:87:49:16:53:50:97:3c:f7:c5:09:
1b:16:a1:34:29:09:84:f9:20:18:02:30:e2:2f:a0:
8d:66:61:d4:64:32:03:1e:9d:07:9e:46:6c:06:ec:
15:c7:f1:cf:57:dc:3f:00:59:0d:25:36:74:64:cd:
93:88:b2:0d:aa:6f:07:b1:f6:14:70:6a:06:82:87:
fa:29:ea:ed:a3:12:07:52:c6:6d:c2:fc:6e:5c:38:
b3:95:de:60:9b:96:ce:61:a2:cd:c7:8f:fa:5f:ef:
40:1c:d0:42:f4:dc:d5:ec:c3:23:27:02:99:fd:71:
f2:0a:1f:bc:f7:d6:28:c3:01:d2:c8:20:99:4e:5d:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:18:66:E5:54:33:1D:24:E6:23:2E:A2:1E:D9:9F:53:C2:EE:99:10
X509v3 Authority Key Identifier:
keyid:5A:2B:73:26:2E:0A:1B:84:A5:AA:9D:3B:4E:3D:F2:35:65:C8:1D:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/WitzJi4KG4Slqp07Tj3yNWXIHd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WitzJi4KG4Slqp07Tj3yNWXIHd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9EC/79227B805B8311F19539B8F8A7833773/WitzJi4KG4Slqp07Tj3yNWXIHd0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:87:ce:c1:df:83:4e:02:c1:29:cf:74:f9:c9:db:1a:29:76:
9b:11:fb:4d:c9:71:a5:a1:90:fc:27:8a:76:95:47:2c:10:50:
12:c9:5d:1a:0b:e6:15:b2:f0:3a:57:4d:1b:d5:d5:56:ba:f4:
88:a9:4c:84:64:85:42:fa:2d:b6:e1:d7:4a:cf:f5:b9:7b:dc:
5c:8c:72:9a:6b:a0:88:cc:3b:d9:1c:78:ce:75:3b:7d:d9:0d:
ab:d6:08:6e:ee:fd:75:df:f6:d1:06:44:2d:5e:04:14:17:2c:
8e:c3:4c:65:12:85:3c:7b:b4:42:82:c6:92:52:57:7c:4b:e4:
99:ee:84:95:ec:47:b4:06:f5:c0:92:96:73:6c:15:5a:82:b4:
bf:7c:4d:0b:54:b6:76:13:3c:5f:61:3d:33:00:dc:7b:83:03:
52:48:e7:b1:8a:46:f6:b3:3f:b3:5f:fc:4b:89:93:87:b7:4f:
c3:8b:90:19:bd:33:64:ed:16:c3:2a:fe:9f:45:1a:a5:0e:29:
05:6c:f0:6e:3a:7f:7f:3a:e2:44:17:00:87:8a:af:66:69:ef:
5b:a5:79:99:15:df:48:b7:fb:6a:f9:d8:27:1d:2c:47:a9:12:
fa:66:59:12:61:7e:06:c9:c2:8e:e9:2a:a7:01:e5:10:9b:9d:
b7:4e:d7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:10:17 2026 by rpki-client