
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json)
Hash identifier: 9Bp0SVUOk4/hLAfePtpR5P3F5W3GO2yIWb8UY1m8dkg=
Subject key identifier: 4A:35:6D:36:91:50:5A:D2:AA:9D:CC:D8:B7:D0:F0:4F:D2:77:9C:56
Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Certificate serial: 0CA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
Manifest number: 0C81
Signing time: Sat 10 Oct 2026 18:45:20 +0000
Manifest this update: Sat 10 Oct 2026 18:45:20 +0000
Manifest next update: Sat 17 Oct 2026 18:45:20 +0000
Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: 6DzX6LyVaXQU0TjP7Vdu2hNeIiDBrNG+DlITme+w/mI=)
2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: q0lqVS28SrU2+4MJeoLC9pzh7Qgf+qG7CEETocpWonk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 18:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3232 (0xca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Validity
Not Before: Oct 10 18:45:20 2026 GMT
Not After : Oct 17 18:45:20 2026 GMT
Subject: CN=6aca87c0-d012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:d2:85:6a:49:62:60:c3:93:7e:0f:16:7e:
72:4a:4b:d4:63:00:97:25:62:c6:63:41:fd:0b:c4:
c9:4a:20:a7:47:60:76:79:ac:ab:9d:f6:21:39:64:
3d:a9:ca:ca:22:f9:f7:34:3b:91:1a:8b:24:67:40:
c4:4b:c4:a3:e3:b5:ff:bc:04:31:a4:77:87:d2:17:
20:24:69:01:ba:45:7c:2d:6e:3d:a5:82:4a:40:d9:
3e:32:d9:d7:7f:f7:16:08:01:8c:a7:46:1d:42:e0:
e0:85:d7:3f:ad:8d:5c:35:d7:d7:1d:5c:20:cc:00:
32:13:f8:81:49:18:88:cd:db:be:52:a3:2a:d1:44:
bf:e4:8a:d9:95:a6:7f:60:ce:d7:85:6b:52:77:e2:
d1:68:be:e4:b3:2a:1c:9a:e7:f2:d3:81:38:ff:f6:
d1:2c:3a:9d:01:53:c8:e9:59:41:6c:8c:6e:d6:49:
98:2c:90:08:93:6d:3b:e7:ea:0e:1f:45:d2:f0:51:
d6:21:a3:87:cb:bd:b0:e1:9e:e3:c8:27:df:1f:2b:
03:a6:65:ce:66:5a:fc:8e:2f:da:b7:4d:cc:70:0a:
f9:0a:b8:0f:e1:87:e9:d6:32:6a:2f:b8:55:35:2e:
63:89:00:2d:92:22:fc:0c:a2:33:69:49:38:6e:09:
cc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:35:6D:36:91:50:5A:D2:AA:9D:CC:D8:B7:D0:F0:4F:D2:77:9C:56
X509v3 Authority Key Identifier:
keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:61:46:13:e7:5c:a6:cb:b4:9b:40:5f:b4:e5:fa:bb:e9:b2:
15:80:7d:96:98:e1:ba:ad:86:b9:4e:90:01:ad:e8:75:81:af:
fc:88:97:60:92:59:7d:ae:98:07:bb:3d:b4:6b:ec:71:57:69:
f2:f9:98:e1:ce:ff:46:af:e3:12:d6:ae:9f:87:14:9b:2f:f7:
86:3c:42:1e:65:e3:82:dc:5e:14:f4:2a:70:5d:c6:7d:e1:61:
4f:6a:74:99:14:bd:b9:00:91:cd:be:d5:53:8d:38:c4:c3:af:
f1:c8:db:33:de:ef:77:ce:25:b6:08:85:9a:8e:b8:3a:b4:72:
89:52:6f:77:bc:56:f7:57:03:42:b6:04:0b:c5:bf:0c:0b:5c:
fc:72:e2:41:bd:bd:18:63:40:40:91:0b:1f:9e:ed:4d:00:46:
ca:a7:e2:53:e1:75:03:8f:5a:e1:cc:82:6a:68:45:23:9b:15:
27:36:85:0c:f0:b9:40:cd:b0:b5:04:ec:ae:f1:d5:98:23:9f:
da:4a:e0:21:28:a7:af:57:61:b8:e5:e6:69:dc:f4:9f:00:c9:
59:f2:ea:0d:c3:44:12:f6:58:5e:0d:48:eb:dc:d5:9d:e8:eb:
a9:71:87:2b:2b:77:e2:9c:11:95:70:11:67:96:f0:f8:2e:b7:
0f:80:aa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:50:25 2026 by rpki-client