
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
File: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft (raw, json)
Hash identifier: 7lVPHNqFSLlx5CA+eTP5JizpitFAhLmWPBYfUkDYngw=
Subject key identifier: 1E:0E:5B:0A:FC:63:AB:9B:C2:5C:A8:7D:4F:B7:62:A2:75:59:DD:BB
Authority key identifier: C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50
Certificate issuer: /CN=A91D44BE/serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
Manifest number: 012D
Signing time: Sun 05 Apr 2026 05:00:03 +0000
Manifest this update: Sun 05 Apr 2026 05:00:03 +0000
Manifest next update: Sun 12 Apr 2026 05:00:03 +0000
Files and hashes: 1: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl (hash: EYfsGUFtyY+cqNZsCYTuaKx1HAZDIgqC4NP8ed9LOzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl
rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D44BE, serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50
Validity
Not Before: Apr 5 05:00:03 2026 GMT
Not After : Apr 12 05:00:03 2026 GMT
Subject: CN=69d1ec53-394b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:15:b3:b8:f3:b8:56:73:50:56:f4:77:a7:
27:43:d3:76:b7:74:38:86:1b:58:ef:ec:57:ce:5d:
5e:38:d1:25:82:7f:ca:53:b9:ab:d1:92:6b:d3:43:
ba:c4:72:d9:cc:be:20:52:29:f6:68:6e:b4:f7:5c:
12:eb:26:f4:f7:c2:a4:81:92:d7:ba:5a:7c:8b:30:
8f:54:85:8f:1d:63:25:49:36:9d:ef:2e:f1:84:5d:
e4:f5:92:c3:98:10:2f:ce:af:bf:9d:35:a5:1c:f7:
a0:a3:62:2a:ee:2a:b2:98:a7:a6:f7:a7:8f:04:60:
fe:ba:22:1e:8d:c9:9e:01:b5:24:79:73:16:db:0b:
84:ca:df:14:16:21:ee:99:79:e8:35:fd:d2:68:d6:
53:bb:e9:e9:31:4a:03:bc:53:17:37:2a:d5:f4:7b:
dc:61:12:74:b1:fc:e8:bd:b7:de:0a:5f:bf:0e:c9:
08:73:ba:ba:a2:a4:87:75:55:07:77:a4:04:27:fe:
bb:33:aa:34:fc:14:77:e6:2c:b9:ff:22:58:30:0f:
7b:eb:70:a0:ab:02:8a:20:6d:f0:f5:d4:32:fc:0c:
69:b1:82:2e:b2:68:e8:61:c7:8c:4f:16:ee:06:03:
4d:36:d7:e4:53:87:94:f8:75:25:18:6c:94:70:49:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0E:5B:0A:FC:63:AB:9B:C2:5C:A8:7D:4F:B7:62:A2:75:59:DD:BB
X509v3 Authority Key Identifier:
keyid:C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7f:45:0a:ec:75:c8:5c:10:3b:ac:d8:36:1c:f8:a3:f0:7e:
36:b3:43:48:59:15:72:8d:84:b6:db:11:eb:14:02:81:16:f8:
6c:74:26:12:08:b4:8f:ae:ef:67:09:10:9d:53:23:99:92:29:
f6:da:35:da:b7:5d:5c:df:b9:ab:24:44:f4:76:88:94:46:7c:
54:23:bd:b4:f6:cb:ee:c6:13:d3:83:95:02:c6:56:56:fe:8a:
f9:34:f9:98:82:cd:b1:3a:be:cc:fc:1c:92:8b:d7:79:a1:84:
5e:0d:3e:1d:f4:17:c7:3f:51:87:d5:b6:d8:76:52:32:b6:12:
82:38:72:ae:f2:dc:be:8c:b1:ef:f4:c6:62:ca:29:cf:80:fc:
bf:97:54:15:12:20:ff:49:60:1e:91:49:49:62:dc:46:81:58:
66:cc:6e:2f:46:5a:fb:f2:61:58:20:14:f6:69:71:24:0b:0b:
50:a2:32:92:37:8c:b3:05:85:db:c4:74:c7:4d:78:80:17:63:
fa:c1:63:b4:5d:10:c9:b7:86:2a:18:ed:82:ab:2c:f5:5a:bf:
24:7c:19:65:a8:3e:06:a0:b5:94:81:68:57:4f:d1:ce:fb:49:
96:a2:b3:08:fe:e1:39:d1:fe:c5:4f:8b:4b:6b:8b:17:6f:34:
ef:ef:ac:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ0QkUxMTAvBgNVBAUTKEMyOTYzRjNBODU0RkQ2RDRFNjEwMTk5RTY3NDA4M0Q4
QUFBMTJFNTAwHhcNMjYwNDA1MDUwMDAzWhcNMjYwNDEyMDUwMDAzWjAYMRYwFAYD
VQQDEw02OWQxZWM1My0zOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn1oVs7jzuFZzUFb0d6cnQ9N2t3Q4hhtY7+xXzl1eONElgn/KU7mr0ZJr00O6
xHLZzL4gUin2aG6091wS6yb098KkgZLXulp8izCPVIWPHWMlSTad7y7xhF3k9ZLD
mBAvzq+/nTWlHPego2Iq7iqymKem96ePBGD+uiIejcmeAbUkeXMW2wuEyt8UFiHu
mXnoNf3SaNZTu+npMUoDvFMXNyrV9HvcYRJ0sfzovbfeCl+/DskIc7q6oqSHdVUH
d6QEJ/67M6o0/BR35iy5/yJYMA9763CgqwKKIG3w9dQy/AxpsYIusmjoYceMTxbu
BgNNNtfkU4eU+HUlGGyUcEmX+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB4OWwr8
Y6ubwlyofU+3YqJ1Wd27MB8GA1UdIwQYMBaAFMKWPzqFT9bU5hAZnmdAg9iqoS5Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wQjJFOEI1MDY5
MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi93cFlfT29WUDF0VG1FQm1lWjBDRDJLcWhM
bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dwWV9Pb1ZQMXRUbUVCbWVaMENEMktxaExsQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDRCRS8wQjJFOEI1MDY5MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi93cFlfT29WUDF0
VG1FQm1lWjBDRDJLcWhMbEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG39FCux1yFwQO6zYNhz4o/B+NrNDSFkVco2EttsR6xQCgRb4bHQmEgi0j67v
ZwkQnVMjmZIp9to12rddXN+5qyRE9HaIlEZ8VCO9tPbL7sYT04OVAsZWVv6K+TT5
mILNsTq+zPwckovXeaGEXg0+HfQXxz9Rh9W22HZSMrYSgjhyrvLcvoyx7/TGYsop
z4D8v5dUFRIg/0lgHpFJSWLcRoFYZsxuL0Za+/JhWCAU9mlxJAsLUKIykjeMswWF
28R0x014gBdj+sFjtF0QybeGKhjtgqss9Vq/JHwZZag+BqC1lIFoV0/RzvtJlqKz
CP7hOdH+xU+LS2uLF2807++sng==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:49 2026 by rpki-client