
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json)
Hash identifier: WlalE6pdjsS14eoiMGdlsYRgF+Di+GSeSFmk+y0ethk=
Subject key identifier: 39:79:20:42:E1:47:CE:CD:81:A5:63:51:9B:E2:73:73:50:18:75:DA
Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
Manifest number: 025B
Signing time: Fri 06 Mar 2026 16:42:06 +0000
Manifest this update: Fri 06 Mar 2026 16:42:06 +0000
Manifest next update: Fri 13 Mar 2026 16:42:06 +0000
Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: 2g3DvKlNT8wT/hS6+NHojQyR5CYAV0T8YCmVqdLpNUk=)
2: 04594232DEA011EE91181415C4F9AE02.roa (hash: 0K33p+5a3MtWPDXgFg5/N6ACaerP5yYdkkaGo2hJbX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 16:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Validity
Not Before: Mar 6 16:42:06 2026 GMT
Not After : Mar 13 16:42:06 2026 GMT
Subject: CN=69ab03de-648f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:52:2b:a7:75:b5:5a:25:4c:ff:a5:99:29:
72:95:2e:42:40:be:8b:64:e8:2e:0c:46:6f:77:80:
40:d4:63:3b:0d:8d:83:4e:98:42:77:cf:5f:a7:21:
ad:c2:72:7f:81:aa:ef:09:8b:05:79:60:88:f6:c2:
c3:7b:a7:ff:ce:5e:90:cd:c6:f3:ea:23:c4:28:de:
46:02:ca:54:0b:16:4b:d5:71:d6:18:7f:31:c9:a9:
3d:d1:0b:92:a4:e9:d3:2d:82:f1:60:8a:5a:ce:12:
ef:4c:34:34:5d:ff:8e:4f:8c:a7:7e:55:52:1a:11:
5e:94:c3:ea:23:31:04:af:8e:7b:90:9b:59:4d:74:
50:1e:16:1c:7b:fe:eb:20:ae:1f:88:0a:2f:b9:bc:
f4:50:37:f5:e7:7f:19:9e:2a:b6:c9:20:6b:a4:a3:
4b:0d:f9:1d:05:bd:1a:c4:ff:f3:c2:6c:b5:15:6e:
25:6b:23:66:bc:a2:f5:95:16:dd:9c:a0:40:c9:8b:
ea:5a:16:c6:19:67:29:f6:cb:99:b5:c0:1c:a6:fa:
6b:cc:e0:d1:95:79:1e:08:24:c2:15:86:7b:03:3d:
b9:a4:4f:cb:db:5b:c8:5f:e5:9d:87:ee:c3:29:c7:
41:7c:88:eb:50:3e:4c:e0:ff:d0:ab:93:18:f5:41:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:79:20:42:E1:47:CE:CD:81:A5:63:51:9B:E2:73:73:50:18:75:DA
X509v3 Authority Key Identifier:
keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:df:4e:44:95:3f:ee:e3:3b:d5:e9:82:26:9f:58:3a:fc:fe:
33:8b:b4:b7:5c:87:d5:a5:94:c7:00:c2:80:67:bb:50:3b:ae:
6a:87:cf:fa:ed:7c:e8:fa:8c:89:5f:45:f5:3d:d4:a7:a6:df:
82:49:b6:b2:05:24:1e:89:4f:70:58:15:05:a4:a0:d7:42:39:
c6:cf:64:aa:fc:a2:20:7a:bb:30:4f:6c:07:bd:da:f6:ec:1b:
50:ca:f9:f9:18:ed:06:8b:32:f4:d1:bc:35:0e:38:74:29:8b:
32:ee:19:0c:51:b8:8f:97:32:2d:d9:54:76:09:f1:24:10:a2:
30:cd:d0:09:72:1f:bc:ba:9d:b3:7b:c8:28:8f:25:c2:a4:2d:
88:7b:57:0e:50:fa:8d:83:f2:15:cb:97:e7:96:56:15:c4:c9:
1f:1d:7e:c2:47:a9:06:99:9e:6b:87:05:48:8d:a9:05:26:e1:
f6:f5:c5:4e:8b:af:f1:ec:7f:d0:34:7e:f7:fa:70:0a:df:3c:
d6:f1:cb:38:14:f8:b6:f2:1d:bb:90:bc:3f:84:35:f5:7e:42:
af:9b:60:2b:af:b5:21:16:af:2c:86:e1:32:57:4e:2d:a3:99:
c5:a8:22:23:c9:c5:98:01:df:a8:42:a9:34:01:27:e5:17:32:
be:ec:e8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:37:14 2026 by rpki-client