
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json)
Hash identifier: SHUCxrhpa3Ug7sZ66ew5DNgh+a2Zx00X/AnmDN4+C5c=
Subject key identifier: 10:BC:D9:A3:24:4F:B0:EB:A3:7C:9E:BF:CA:2F:03:A0:DF:DA:8A:E1
Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
Manifest number: BD
Signing time: Tue 03 Mar 2026 06:37:56 +0000
Manifest this update: Tue 03 Mar 2026 06:37:56 +0000
Manifest next update: Tue 10 Mar 2026 06:37:56 +0000
Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: TwgyenIQx3OQrn00YcfzxDOz+AT2XXumX9mn4cE0E0Y=)
2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: e1prpIYuDZ5J7mrkW/azLYwyJt2qyvzcK3j1tu4Uieg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Validity
Not Before: Mar 3 06:37:56 2026 GMT
Not After : Mar 10 06:37:56 2026 GMT
Subject: CN=69a681c4-509d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:fa:72:ad:a7:7f:89:3d:fb:36:fa:b4:c7:
dc:01:bf:eb:1c:a3:07:35:4a:55:9a:1d:7a:b0:60:
a2:06:53:0c:be:1a:69:20:7b:91:49:c0:02:ef:66:
57:0b:06:09:59:b5:cc:a5:15:dd:62:f4:92:20:61:
f4:24:bf:ef:d1:7b:d7:c4:50:9c:14:ec:dc:2d:5b:
7e:14:30:ad:1d:e5:bd:82:fe:4b:f6:98:db:44:39:
e2:ae:10:43:c8:f7:cf:e9:a7:ef:b4:a1:ea:31:aa:
c2:f3:14:7b:94:46:7e:51:7e:94:07:5b:2b:9c:bd:
ea:ce:e8:95:56:75:0c:fa:83:74:f8:9d:8e:45:f1:
5f:50:e4:c4:22:87:85:26:5d:7d:18:d9:03:cd:cb:
0f:56:c0:af:e8:5f:88:1b:b1:03:e0:25:07:ff:bc:
82:87:96:aa:fe:f9:6b:ef:16:51:40:c7:e8:f0:8f:
37:fe:7c:45:40:c7:df:fc:d3:b9:46:79:06:1f:ef:
5e:36:8b:ca:5d:85:d1:18:8a:1d:87:b4:42:57:f2:
77:96:81:28:e1:35:a4:49:8e:e9:b8:0e:aa:50:5d:
0e:8e:9e:46:dd:7d:b6:f1:09:90:aa:68:89:83:7c:
93:1d:7a:0a:f4:0e:20:2d:c0:d4:0f:72:f3:47:3a:
24:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BC:D9:A3:24:4F:B0:EB:A3:7C:9E:BF:CA:2F:03:A0:DF:DA:8A:E1
X509v3 Authority Key Identifier:
keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:23:78:b0:e8:90:3d:b4:95:fb:bb:92:bf:ce:7c:b3:64:15:
a3:a3:1f:cf:7b:ec:de:12:0c:9f:0e:7c:12:bc:a8:83:78:75:
fb:f7:8f:cc:b1:ac:dd:24:e3:dc:52:f4:13:19:29:81:76:8b:
8b:52:bd:0c:44:10:16:60:7f:0c:31:d7:29:30:1f:45:68:03:
9f:42:c9:ea:8d:ab:ad:c5:88:a4:37:6e:cd:be:49:c2:9f:81:
0b:22:9e:4b:ae:46:54:16:98:95:6f:e1:96:99:60:60:2c:00:
69:c8:87:d6:7e:07:53:02:84:36:7e:44:cb:94:a6:d5:12:67:
27:02:3a:2a:95:29:c8:2b:da:c4:e5:66:e3:7e:ab:3a:17:e5:
11:6f:d0:80:77:26:7a:e3:a9:86:1e:b1:34:e5:6b:37:66:1d:
78:cc:62:47:11:1e:6f:59:79:68:b8:14:e3:49:24:5c:c3:21:
64:31:a0:be:8d:0e:f6:16:15:57:aa:c0:da:c9:c6:b3:a0:4f:
11:5a:b3:e4:66:8b:a0:de:36:9e:51:be:98:1c:11:88:46:44:
0d:70:f8:3c:79:ce:9a:16:5a:b9:d1:43:d9:5f:d2:a3:3e:53:
31:d1:7a:32:23:46:c8:2a:8a:ba:2a:90:43:8f:2e:a9:36:23:
0f:22:b1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:20 2026 by rpki-client