
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json)
Hash identifier: 1PuvV+pMrsBYFhJavf82tyzChK8lfo2SbvJCqUkaoDc=
Subject key identifier: 26:E6:F9:1F:7E:A1:1B:00:73:FA:E4:1B:CA:39:9D:47:37:F1:1B:C5
Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Certificate serial: 041B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
Manifest number: 0403
Signing time: Fri 13 Mar 2026 00:03:04 +0000
Manifest this update: Fri 13 Mar 2026 00:03:04 +0000
Manifest next update: Fri 20 Mar 2026 00:03:04 +0000
Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: wr7LPyogcf94TdK5tX5N41r3RP0O/dmQkhrqaCETnto=)
2: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: qWXbvxtUafVtAgGx5EC/D27kAXEqgp3jL09LjLQ4gKY=)
3: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: hSprzsVeX7yn1D4PAkL8tJfBZML1aZzPNfAasYni9Tc=)
4: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: NSST2LOuWe69wNvMDCc9lW2N+MLu6oemF2NWRRONKO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 00:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Validity
Not Before: Mar 13 00:03:04 2026 GMT
Not After : Mar 20 00:03:04 2026 GMT
Subject: CN=69b35438-48a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:90:3f:ce:3a:c1:9a:9b:06:5e:3f:03:e5:
be:fc:87:96:02:33:b7:ae:fb:90:55:30:8f:7b:c0:
74:08:63:96:4c:32:10:d3:9f:c6:a9:87:82:03:d4:
ca:74:82:97:72:ba:de:ab:f6:af:ed:61:70:1f:ba:
48:cd:e7:9e:ed:d4:6f:8e:40:6f:32:00:3b:2c:bf:
9e:ac:a6:07:28:6c:23:e7:12:6f:c0:13:2d:c6:4d:
ac:e1:b7:f3:69:f1:66:09:59:91:5c:4c:52:c0:bf:
c5:7e:19:18:1a:9b:e3:f9:95:f9:51:0f:45:b3:e8:
4e:55:09:45:40:f9:a7:82:32:bd:35:83:cf:17:e5:
b2:41:c7:86:1f:d5:17:9c:c2:9d:13:f4:35:72:14:
a4:a8:20:c3:67:02:48:e5:81:02:27:fb:1c:15:2f:
fa:8c:68:54:85:03:e5:43:cd:80:62:93:db:ed:b6:
70:a9:ed:0d:d6:a7:23:67:29:ac:9c:b8:b3:21:17:
ed:b5:72:6f:7c:4b:b0:af:17:7f:4b:01:3d:ee:71:
d2:19:74:11:e2:83:68:1a:cf:62:86:19:ad:e1:9d:
b1:4b:48:bc:15:5f:7e:37:42:9e:bf:01:cd:8a:7d:
40:bf:7a:21:a7:a1:a6:92:38:c2:8a:a0:e8:5c:c3:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E6:F9:1F:7E:A1:1B:00:73:FA:E4:1B:CA:39:9D:47:37:F1:1B:C5
X509v3 Authority Key Identifier:
keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:99:da:16:28:99:05:87:9a:4f:06:3d:f8:3b:d2:da:ca:c3:
0b:5e:e7:93:4a:45:e3:da:6a:b1:c7:d3:30:92:4d:f2:bd:9d:
54:4f:66:75:31:ff:95:da:86:33:5b:d1:e0:95:6a:c3:17:d8:
c8:82:8d:03:a9:9b:9d:17:d3:c7:27:dd:b0:91:56:17:25:e2:
5a:ab:11:96:3a:8f:25:21:0a:d6:c3:af:a1:f4:38:bf:5e:e7:
9a:2d:c6:d9:70:9b:5f:21:7e:8a:c7:94:68:9f:18:9f:e2:8f:
67:18:5c:c9:f6:e7:cc:d1:b7:c9:23:43:41:11:20:95:75:b7:
bd:8e:77:d8:18:73:a1:a1:1e:66:0b:5b:98:46:54:b1:53:b5:
4a:00:3c:34:cd:b4:9b:5a:7b:cd:14:29:73:c2:26:87:80:06:
a1:ec:85:ec:df:1e:13:5b:7c:ae:03:c1:11:ad:74:40:e1:6e:
d7:fc:76:9a:b6:f6:5f:6f:d7:c6:9b:d6:ab:84:c4:d9:15:46:
3f:e1:56:b9:86:4b:47:2f:3e:24:56:bf:16:7a:23:bf:4a:5d:
e2:b6:47:23:41:0d:e5:dd:7c:b0:f6:9d:a6:ca:62:20:80:d5:
87:e3:0e:69:81:8a:ba:cc:ea:1a:04:e3:ea:e9:0a:5b:82:b4:
6d:69:90:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:55:44 2026 by rpki-client