
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json)
Hash identifier: fGcjEos4BVcidzSPZm5vqT5x+QCNMI9bIiF4XRrbYd8=
Subject key identifier: 51:88:F5:8F:68:84:25:0C:30:0D:26:39:AA:32:27:BC:8F:E1:B8:D1
Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Certificate serial: 0449
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
Manifest number: 0431
Signing time: Thu 11 Jun 2026 02:29:43 +0000
Manifest this update: Thu 11 Jun 2026 02:29:43 +0000
Manifest next update: Thu 18 Jun 2026 02:29:43 +0000
Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: kl3qt0vyi/7SpvHUSzVMvPm3K8P2IMFEhqG8x1bRbHU=)
2: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: qWXbvxtUafVtAgGx5EC/D27kAXEqgp3jL09LjLQ4gKY=)
3: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: hSprzsVeX7yn1D4PAkL8tJfBZML1aZzPNfAasYni9Tc=)
4: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: NSST2LOuWe69wNvMDCc9lW2N+MLu6oemF2NWRRONKO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1097 (0x449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Validity
Not Before: Jun 11 02:29:43 2026 GMT
Not After : Jun 18 02:29:43 2026 GMT
Subject: CN=6a2a1d97-67f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:70:4f:36:e5:41:37:81:c4:32:64:4d:12:
63:d5:42:99:a7:0c:be:0c:d2:40:98:33:f5:80:13:
b0:a7:a2:7d:1c:f3:0f:09:7f:11:5d:7f:b2:08:c5:
b5:61:8b:00:e9:ba:45:58:28:92:ec:34:0a:e6:c7:
4e:28:5b:ca:5a:23:99:a0:b8:d4:a3:82:d0:a2:16:
b3:0a:d9:2a:04:41:1e:a7:e7:d2:d9:85:17:4b:64:
de:d0:c7:c7:3d:56:5d:57:b5:3e:84:fe:0c:9c:4f:
76:6e:b6:1b:d9:0e:b4:fa:1b:32:16:a8:8b:49:7c:
ea:9c:7d:13:5d:f4:6f:90:21:33:ca:bd:53:4d:19:
06:b3:72:0c:1c:36:67:4f:a2:72:e2:9e:17:be:c5:
f4:c2:6c:e2:2d:c8:e3:30:30:68:02:bd:4a:66:92:
99:d9:d5:97:e0:a4:6a:f5:83:5f:77:e4:cd:23:b3:
36:7e:6f:37:2f:c2:31:86:c3:c5:65:20:b6:96:98:
1b:88:b3:4d:77:cd:f0:b5:96:86:3e:1b:17:73:b9:
f0:c5:78:64:63:2c:75:66:94:ea:fb:e1:cb:d2:15:
2f:6e:66:f1:7f:73:b7:1c:bb:04:d4:95:6b:16:ab:
04:bd:7c:d1:ed:44:62:2c:7c:72:71:cd:e1:f8:64:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:88:F5:8F:68:84:25:0C:30:0D:26:39:AA:32:27:BC:8F:E1:B8:D1
X509v3 Authority Key Identifier:
keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c6:ed:5c:c2:0a:8a:61:9e:65:6a:7f:74:4c:cd:e6:2d:63:
02:86:66:b1:86:51:d5:39:13:89:11:fd:c5:5f:9a:97:97:5d:
e3:6e:f2:96:d0:a6:59:c3:35:95:67:5d:6c:23:7d:a2:4f:61:
16:62:53:be:49:14:aa:ed:65:54:3e:55:55:4c:86:40:be:1f:
33:7a:13:77:90:fe:4e:be:84:4b:40:72:d0:b9:34:3f:6d:b8:
d0:ac:bc:62:93:85:8e:bd:07:7c:05:b4:09:1c:06:c4:33:46:
d6:61:82:89:a0:be:17:00:a9:f0:2e:bc:0b:f2:f7:f6:75:3f:
40:26:c6:1a:d9:b0:40:ed:71:ff:95:59:30:0d:12:c7:dd:78:
9d:6a:83:97:7e:13:d8:49:46:bd:14:20:f6:69:2f:10:b4:62:
d8:85:bd:39:f9:b9:13:66:09:ac:91:23:79:61:0a:32:b2:de:
a2:99:2d:62:ad:18:ea:1e:7c:0a:80:c1:50:0e:47:29:c9:b4:
d0:54:70:20:de:b4:87:e6:11:81:c0:9d:7d:04:3b:be:55:93:
95:f0:4d:18:20:2e:86:84:a7:29:62:5e:40:1b:53:1b:38:bf:
a1:cf:ec:1b:3c:dc:fb:4a:f9:62:6a:58:11:a3:1f:17:ef:09:
4e:41:71:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:24:15 2026 by rpki-client