
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
File: 0WaBZz8RihAOwgFHTM-7UYeD2WA.mft (raw, json)
Hash identifier: Bg9tbLu8yNVOJBtCohdd0zL+4KWwXUtlxtbkYz+r+OE=
Subject key identifier: D7:AE:80:A2:41:BC:79:C7:FF:37:94:78:24:73:B1:0B:6F:8C:ED:81
Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60
Certificate issuer: /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
Manifest number: B4
Signing time: Wed 21 Oct 2026 03:03:22 +0000
Manifest this update: Wed 21 Oct 2026 03:03:22 +0000
Manifest next update: Wed 28 Oct 2026 03:03:22 +0000
Files and hashes: 1: 0WaBZz8RihAOwgFHTM-7UYeD2WA.crl (hash: 7bryAhd2m2n2FbP5Zk4xQgb7BZ22cKIwntN8UtlFHsQ=)
2: D798F0A0C04B11F0A85A7449C4F9AE02.roa (hash: j8RPUxU1i8jQNbwP8gL4o72qQiyb5SB1xrhWEeZuKzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl
rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 03:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960
Validity
Not Before: Oct 21 03:03:22 2026 GMT
Not After : Oct 28 03:03:22 2026 GMT
Subject: CN=6ad82b7a-fa24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:72:b1:03:98:35:8c:b1:49:77:3f:5a:19:
be:d5:b7:ce:66:32:d0:7f:93:34:c5:27:aa:87:2a:
3e:97:41:24:2f:fb:3f:46:1f:c1:b7:37:1e:da:fb:
51:cb:05:b1:bc:df:9b:ad:6c:9a:19:d8:90:d5:e2:
ba:e2:a1:61:4f:e3:ae:73:0e:37:04:1e:5f:cb:b9:
3d:b6:1d:1c:bd:47:20:56:48:e3:12:57:34:55:cb:
9e:1b:14:cb:1c:94:f9:83:67:6a:e7:8d:b5:f2:41:
51:38:70:a1:12:77:9f:84:db:f3:67:b8:a1:1c:34:
aa:07:a8:db:9a:d7:75:51:e2:c4:4d:38:a4:7f:04:
30:23:01:63:52:94:73:4f:0d:b4:ed:8f:f8:96:6a:
ed:c8:1c:3c:9b:b9:50:ef:fe:36:ce:ef:64:11:bb:
14:66:00:28:eb:e7:51:23:18:12:6c:60:9f:5e:23:
68:00:7d:b3:4e:1b:c5:67:56:46:24:b6:2c:3d:e3:
9a:a6:6b:ad:44:01:2f:c3:a8:5a:5e:2d:94:cb:2b:
84:d5:d3:de:17:48:13:50:97:f6:58:3e:64:33:8b:
14:e8:3f:38:9b:dd:ec:4d:fd:42:f5:6c:7e:3e:9b:
78:02:55:b1:44:39:da:15:50:21:f5:c4:96:5c:bc:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AE:80:A2:41:BC:79:C7:FF:37:94:78:24:73:B1:0B:6F:8C:ED:81
X509v3 Authority Key Identifier:
keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4c:ae:b6:a1:5a:4f:7c:d8:8f:76:5d:ac:98:21:dc:33:89:
5d:12:ba:1e:91:55:76:c3:31:98:f3:1f:7c:70:d7:89:58:c3:
0e:a3:48:52:d3:a1:bb:1a:44:a9:4e:57:91:d1:80:33:45:5d:
52:e9:d1:45:3a:f3:2a:ae:81:2c:26:88:1a:f6:77:56:82:64:
d3:13:2e:f0:3c:45:ab:72:54:ff:26:e4:a7:d3:2c:11:a9:8e:
c2:77:3c:18:1b:d3:96:31:54:12:76:c0:af:1c:89:d9:eb:38:
78:88:47:7b:f7:0f:34:f0:e6:60:4b:54:8c:dc:83:4a:02:95:
29:71:17:6b:e5:cc:e4:d3:e3:ee:31:d6:e7:f7:77:14:e6:52:
86:e5:c0:36:5f:40:e1:39:a7:f6:26:8e:e8:fa:c8:d8:cd:53:
ec:08:91:76:f8:c1:12:65:87:1b:b2:45:f1:d3:37:d6:dd:4c:
a5:8e:ad:c8:e9:80:31:24:89:82:9c:e2:b2:12:62:18:39:cd:
9d:dc:44:92:0c:24:7f:5e:46:fb:c3:c1:b1:b9:c0:57:e0:34:
e8:ed:7e:69:24:81:ab:c6:a6:7f:78:be:ef:51:46:fd:1a:fc:
cd:b0:04:d8:39:4b:7d:a0:dd:29:ce:cb:b7:d3:fa:d2:82:f9:
13:a5:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:34:32 2026 by rpki-client