
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
File: WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json)
Hash identifier: yVubeUkPJgwW4EkWoVS3WssLp3UyrlM3uRKColdS1fw=
Subject key identifier: 21:3D:95:5E:27:D7:03:06:62:FC:93:4A:94:7B:C4:B0:92:14:87:54
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Certificate issuer: /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
Manifest number: 01BB
Signing time: Sun 05 Apr 2026 03:29:45 +0000
Manifest this update: Sun 05 Apr 2026 03:29:45 +0000
Manifest next update: Sun 12 Apr 2026 03:29:45 +0000
Files and hashes: 1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: F1XoGTqTUoe8Jo2fE9fBvYVhEVTd6ICyO68xam+bvRg=)
2: 7CF0A45404DF11F0B877A115C4F9AE02.roa (hash: 3zvmMVyOd3Cbubn7cAeWSSyiDSHBJieehrUFUeq/rLk=)
3: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: vuhGbAXmdFyZHU5zcn6qI6D4hSXtuQyTQbfw33B7PYM=)
4: 321296E212E711F1ABE68E4F0D3D8C67.roa (hash: fLV89AyiqIKtRsF5UkgoIwTy20rGQz1nx0VUvYpw5g0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Validity
Not Before: Apr 5 03:29:45 2026 GMT
Not After : Apr 12 03:29:45 2026 GMT
Subject: CN=69d1d729-1769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:0d:d6:b3:cf:a0:68:9e:e9:c0:87:67:b7:
68:eb:de:5c:1f:75:95:e9:e7:59:d1:63:cf:81:72:
eb:af:fa:aa:3b:51:62:dd:03:02:4e:29:ba:5d:a9:
22:3d:6c:37:37:16:ad:22:f9:6e:d6:2e:c9:ed:3f:
32:4a:4f:de:88:82:1a:32:03:47:a1:d3:11:1b:01:
56:e6:d9:66:89:7f:93:af:ab:c1:7b:c0:be:a8:c1:
28:78:69:7f:80:af:51:c8:04:16:78:06:12:13:a0:
bb:06:b6:4f:f7:5a:c4:1d:62:99:df:fd:ed:db:c9:
bd:80:ef:35:4a:6a:81:ac:ca:df:fb:48:7a:6c:22:
1a:c8:93:c0:b6:81:9d:ac:6e:e6:2e:5e:b1:74:19:
95:b9:ff:12:30:cd:64:f2:7e:b9:3c:c0:98:f3:c2:
e2:7a:c3:03:42:f4:57:e0:ee:8f:79:61:67:bc:55:
c3:1a:88:e3:25:63:e7:b3:d0:ab:bd:ce:a2:af:09:
a2:61:1b:70:e1:00:e6:d2:d5:e1:25:5e:d2:4e:21:
72:4d:85:ab:d7:c0:63:52:14:4d:2e:1c:94:ff:c5:
59:f1:a4:8e:2d:22:dd:c5:40:d2:2a:6c:73:13:55:
d7:72:37:24:06:9d:d1:41:44:6e:56:7a:42:c3:4b:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3D:95:5E:27:D7:03:06:62:FC:93:4A:94:7B:C4:B0:92:14:87:54
X509v3 Authority Key Identifier:
keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:36:3b:eb:19:3f:bd:93:f2:04:f0:4b:5b:48:80:6d:04:1d:
a3:d4:13:3c:be:6a:e3:d6:94:3f:71:25:bb:f0:e8:04:34:1f:
a8:cb:b7:52:2c:f6:dc:e2:3b:65:72:19:37:56:a0:ab:fd:11:
77:0f:81:ef:44:01:bb:a3:39:f3:4b:8c:fe:86:37:c1:25:99:
11:47:3d:a3:a9:c8:1c:e0:4c:d6:30:c1:a2:40:4c:ec:5b:6f:
02:9a:41:12:88:99:0b:54:b0:dd:5c:40:50:c9:fe:a4:0c:a8:
69:84:b3:3c:8d:60:ed:2b:e0:5a:e8:38:46:06:0c:3d:79:3c:
e0:fe:a1:c9:5b:b9:de:7c:2e:db:3e:88:44:fb:0b:a5:8a:01:
48:94:e2:cc:c6:ee:68:c9:dc:69:6a:b2:a4:40:9b:61:78:d8:
a9:b5:78:f2:1a:fb:b7:bc:b4:dd:6e:a9:a4:8d:b5:a1:62:1e:
14:19:50:dc:4e:28:a9:97:96:5b:b4:93:0c:31:34:f7:76:03:
f7:ab:39:fb:92:5e:f3:ce:4a:a0:96:52:09:5e:34:9b:a9:a2:
01:82:ab:22:45:1c:b0:aa:1b:67:97:45:7e:8c:df:47:d0:17:
ae:54:a2:2f:d7:d4:dd:ef:b5:30:11:2a:ac:f6:85:95:74:6d:
6e:d3:ac:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:11 2026 by rpki-client