
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
File: wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json)
Hash identifier: B+MeneD/PETNL4quLtkrF4aJNlroFCz1IrflAH0tEQA=
Subject key identifier: C0:2C:9F:C7:17:46:78:37:29:8C:47:85:CC:71:7D:5B:E4:BC:D3:C1
Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45
Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045
Certificate serial: 0518
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
Manifest number: 1D6F
Signing time: Sun 04 Oct 2026 16:31:15 +0000
Manifest this update: Sun 04 Oct 2026 16:31:15 +0000
Manifest next update: Sun 11 Oct 2026 16:31:15 +0000
Files and hashes: 1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: bb0CZenI/eSLXl51UT16THK0SE/SapL2W1a2bGczct8=)
2: 4A7F092A776811EFB6FA747DC4F9AE02.roa (hash: 0daD0etHnbRssiJH6BixSC65d1qVyuhBrEX3CZhYnt8=)
3: F9D345C0DE8811F0B0147CB83D6F56BC.roa (hash: CURvflfPDYyPZc2U7wyj4HEbEp22qVhqjBSB4fea7bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl
rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1304 (0x518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045
Validity
Not Before: Oct 4 16:31:15 2026 GMT
Not After : Oct 11 16:31:15 2026 GMT
Subject: CN=6ac27f53-d30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:77:15:71:b0:fe:c0:ec:a5:ee:e4:a6:f1:
42:d8:fc:68:63:f4:6f:a2:74:9f:4f:18:73:2c:73:
6e:83:9a:49:ab:73:db:c1:7d:ce:db:bd:d3:8b:b0:
94:08:8d:7a:02:e1:09:09:22:f5:22:a0:bd:0b:2b:
59:ec:76:54:d8:1b:57:7b:f1:9a:82:bc:d3:2e:72:
d9:23:cc:74:f1:9d:df:ec:84:f0:31:bb:0c:73:dd:
16:63:fd:b7:e0:46:b0:f4:a7:50:a8:af:33:63:40:
09:ae:ef:92:6f:25:48:21:2f:f5:73:d4:84:3e:d0:
24:8b:4a:c2:70:5d:9a:eb:fb:00:d6:c5:b1:a0:05:
41:42:94:96:ec:32:77:00:69:7a:64:7f:91:a1:73:
a4:b3:6c:97:56:10:bf:d8:b8:d3:18:52:d9:39:94:
b4:06:76:61:90:58:cf:99:67:d8:fa:7f:98:c8:bf:
ef:6a:68:f9:ba:ab:c7:e6:92:0e:41:93:db:4f:2a:
b4:a5:5f:ec:f5:33:2e:5f:fb:0d:03:b1:fa:34:a5:
39:57:00:9b:45:db:19:b3:7c:d7:c1:34:d8:92:6a:
c2:4c:28:ae:d8:a6:20:0a:80:bb:2c:82:c1:ad:96:
66:33:39:bb:dd:4a:cd:65:d5:96:b6:f3:96:57:d6:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2C:9F:C7:17:46:78:37:29:8C:47:85:CC:71:7D:5B:E4:BC:D3:C1
X509v3 Authority Key Identifier:
keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:4e:ef:b2:2f:6e:e5:34:9b:8c:c1:c8:62:d3:d7:30:6d:99:
fa:77:06:6c:29:7d:7a:fe:40:e2:55:e4:de:ed:7a:a7:ac:ae:
e8:35:bd:10:d7:88:42:2d:48:c7:38:c2:59:ab:41:07:37:0d:
b7:ba:87:41:a4:f7:3d:0c:c8:05:f3:72:7d:1c:c4:81:41:34:
40:59:b0:27:00:2c:aa:87:2b:ea:c0:e8:37:3d:2c:7e:b3:4d:
42:f4:96:7e:ce:ad:6f:df:73:2b:91:23:e9:70:c7:70:c9:8f:
9e:65:bf:32:79:3c:10:90:ea:e9:b0:de:51:f4:ec:01:47:3d:
41:56:d4:9b:98:59:92:46:3b:a5:5a:9c:51:8c:5b:87:56:85:
77:d1:64:c1:e4:8f:61:ef:36:85:57:56:27:13:f0:da:1b:7b:
4c:0e:b3:15:41:54:67:3a:b2:56:a2:a2:de:03:8c:d7:f9:49:
62:51:9a:be:35:54:95:ff:3c:2b:d7:f7:01:27:4a:17:bf:e9:
68:3f:01:b6:d7:b7:8e:a7:d5:54:1a:b5:81:ec:5b:cc:5d:23:
3d:2f:40:04:6c:97:46:60:7e:6a:8d:f2:88:45:1d:d3:c3:93:
18:14:57:45:d1:94:fa:bb:45:ba:93:f7:05:2c:bb:d4:4c:ba:
3c:20:b2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:13:38 2026 by rpki-client