
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json)
Hash identifier: zp7Z11cwn5Nk0TyTto/eeqFhWcdY4X61gAdH+rJUbUw=
Subject key identifier: 12:09:CF:AD:FC:59:8C:99:24:08:6D:58:FB:0E:5B:2E:6C:2F:65:59
Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
Manifest number: B6
Signing time: Thu 21 May 2026 07:10:51 +0000
Manifest this update: Thu 21 May 2026 07:10:50 +0000
Manifest next update: Thu 28 May 2026 07:10:50 +0000
Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: 7bPpcVIq0pwTyrVEnCuBPcCa+7QElbar3jlICy6s6Z4=)
2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: azH5Q9viXquY/moxc/UZ4RwNqYyQHdR8aAwu/HmXV5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl
rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Validity
Not Before: May 21 07:10:50 2026 GMT
Not After : May 28 07:10:50 2026 GMT
Subject: CN=6a0eaffb-b77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:38:d9:ed:de:a2:28:01:b9:30:fa:aa:1a:
20:b2:3a:53:ad:d1:b0:7e:89:d4:fd:38:b4:f9:cf:
24:97:d8:75:11:43:49:78:a5:de:ef:1d:98:87:ca:
5d:d7:ae:da:8b:9e:6b:6c:9a:24:27:59:8e:4f:f9:
e0:da:96:24:48:11:76:85:4f:a2:bb:23:e8:f7:2f:
55:a3:b6:97:8f:50:12:c0:ec:2d:87:f1:ef:30:95:
3b:07:f2:77:10:04:31:c5:00:6d:97:77:c9:28:0d:
77:f5:3e:04:64:54:47:48:14:e9:60:3e:68:20:ec:
37:c8:73:fc:95:c9:d5:9a:79:cf:83:1d:70:55:a4:
e6:47:21:84:d1:0d:3b:16:e2:29:8b:33:39:d8:94:
44:24:47:24:70:6e:9d:f8:3b:a6:51:66:43:83:74:
8f:77:fd:5f:85:54:a5:c6:e8:ad:bc:3f:03:c7:dd:
c3:47:0e:08:27:e8:17:29:9d:d5:5a:6e:51:b6:ef:
ae:1d:48:f8:d4:3a:0c:1b:10:e9:4e:94:05:1f:6c:
60:32:b8:08:c3:68:42:be:35:d5:cd:f6:43:bf:87:
66:a5:0c:02:6e:eb:93:5d:39:08:27:f7:b4:f0:5f:
0d:ab:98:6e:ad:cf:bb:88:0f:01:50:29:79:83:22:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:09:CF:AD:FC:59:8C:99:24:08:6D:58:FB:0E:5B:2E:6C:2F:65:59
X509v3 Authority Key Identifier:
keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:01:30:69:dc:c4:c0:2d:32:46:db:c7:c6:42:e6:4d:45:99:
ed:07:52:51:22:7d:cd:45:fd:f5:6e:fa:48:10:2c:03:18:57:
89:0a:45:b3:c0:b3:80:a1:8f:c4:8d:72:13:cf:c6:65:bd:9e:
6a:4a:62:a1:1e:fc:65:98:e7:26:94:32:51:36:4d:6f:d6:c6:
41:d4:4c:f8:b7:e9:b2:93:62:10:75:a7:eb:78:3a:da:0f:0c:
25:0d:19:b0:c6:43:d8:01:61:1f:96:5f:2d:3f:7a:cc:4b:64:
5f:82:af:f9:25:93:a4:39:15:a1:43:13:34:bf:f5:99:ec:54:
e4:eb:ec:b7:54:56:6c:1a:b3:c0:ca:2c:5e:d2:80:8e:39:16:
40:46:81:1c:22:73:7c:65:c6:7a:c2:d0:d3:6e:f2:5a:22:e6:
d0:d4:ee:46:89:4c:b5:50:80:42:3d:78:ae:ab:06:3c:a7:a2:
63:18:53:14:69:24:6f:04:6e:dc:d3:14:52:03:74:3b:db:70:
27:4d:08:6f:2f:fa:83:00:69:a7:34:34:71:70:7b:5c:d5:09:
8b:fe:f4:4b:2b:a0:43:9d:27:78:89:44:63:1a:c1:89:0a:5d:
a1:ec:de:30:b6:01:02:e7:e0:71:ef:1b:b9:f0:80:e1:ce:b2:
18:2c:50:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:29:13 2026 by rpki-client