
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
File: 0WaBZz8RihAOwgFHTM-7UYeD2WA.mft (raw, json)
Hash identifier: 3j2KgDPnM/jO/vf0HE+fkp/9I+y3rUZN2DEhsDUKyHc=
Subject key identifier: 07:96:37:50:A4:45:66:3E:0F:0A:44:AD:EE:4B:BB:51:04:59:0B:94
Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60
Certificate issuer: /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
Manifest number: 56
Signing time: Tue 21 Apr 2026 03:17:34 +0000
Manifest this update: Tue 21 Apr 2026 03:17:34 +0000
Manifest next update: Tue 28 Apr 2026 03:17:34 +0000
Files and hashes: 1: 0WaBZz8RihAOwgFHTM-7UYeD2WA.crl (hash: Dkz58c8a9kcDyfhYef9raHdC1WqGR026AGK9m24MPqs=)
2: D798F0A0C04B11F0A85A7449C4F9AE02.roa (hash: D1XVMH1vA5La0IfiYGXEnqhzX2rQW9q2kW1yPmg2KPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl
rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 03:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960
Validity
Not Before: Apr 21 03:17:34 2026 GMT
Not After : Apr 28 03:17:34 2026 GMT
Subject: CN=69e6ec4e-01fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:c9:a2:8d:11:b0:a0:73:19:14:77:59:2d:
af:ff:06:c4:87:19:c9:b3:4a:3c:41:16:28:6a:2b:
62:97:80:63:1b:f5:8e:b0:a2:c7:eb:d1:60:24:d5:
bf:a1:4e:33:04:7e:a3:0e:98:07:70:7d:79:9d:f0:
bd:fe:5f:ed:4e:aa:e3:a9:32:11:f8:93:54:ef:d0:
f7:9d:38:73:3d:38:ab:4e:4f:88:4d:27:6b:21:7d:
08:b4:9c:e2:62:ab:4e:d9:4d:53:56:03:87:a9:6c:
67:a6:b4:cd:05:97:d5:a2:e0:f7:62:71:2a:de:7a:
66:59:8f:01:1b:33:fe:f2:54:6e:76:9f:a7:47:6c:
c3:6b:88:e1:f9:31:91:7b:ad:6b:ce:b2:f7:30:cb:
e8:d4:4c:8f:b4:85:dc:0a:84:d5:14:82:5f:f2:8e:
a1:60:d2:92:df:63:5d:aa:ed:f0:ca:67:02:b8:d6:
05:d3:6b:f8:71:f9:fe:2b:d9:39:f6:ee:74:4c:9f:
cf:98:8c:22:5f:1c:ef:cf:0d:53:ad:31:37:04:c3:
45:f5:a7:d6:a2:f1:5e:6d:83:dc:f0:ac:cc:1c:12:
87:39:1b:b7:17:18:76:4e:b1:ed:aa:86:94:ca:32:
52:51:34:73:94:d8:d5:62:cb:57:4e:13:31:1d:52:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:96:37:50:A4:45:66:3E:0F:0A:44:AD:EE:4B:BB:51:04:59:0B:94
X509v3 Authority Key Identifier:
keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bb:20:c5:bf:d9:8c:e3:7e:73:5d:51:12:19:e7:01:88:a1:
06:b4:ba:49:97:fc:e8:c4:2e:ef:0b:e2:07:3b:70:08:6e:96:
96:2a:9d:f5:23:35:54:38:9e:39:4a:36:e3:5a:54:94:6d:20:
90:b4:10:96:33:35:14:71:e2:40:e9:fd:0a:3a:1f:03:45:3c:
9d:3d:bb:73:54:92:b1:d3:b6:3c:9b:43:bf:11:c7:89:51:a7:
bc:93:a2:d9:41:74:5d:e8:b1:be:0f:19:a9:31:bf:a5:eb:27:
b2:26:05:b6:80:8c:ff:76:91:2b:47:41:89:bc:4e:1c:1a:dd:
01:12:fb:5f:db:20:19:79:29:e2:43:23:bc:18:fa:87:11:20:
27:12:2a:63:68:9d:ca:1f:57:2e:63:79:ce:1d:97:1f:8a:10:
6c:f7:91:86:b1:23:23:59:c6:57:fc:34:2d:22:24:39:55:df:
49:8d:9a:5a:16:e6:24:75:14:12:34:7c:bd:ec:2f:ea:b7:17:
9c:15:21:1f:31:7d:fa:62:e6:db:f4:15:5b:7b:82:45:09:28:
b8:8a:4b:7d:7b:48:b7:7e:a1:02:d4:1d:99:24:13:fc:39:dc:
ed:d3:30:c0:7c:79:34:b2:1d:9d:89:4d:d0:30:b3:4d:f5:09:
03:6c:de:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:13:30 2026 by rpki-client