
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json)
Hash identifier: evi41JKSLCbdO/GA5qpD9RwmomnAoLBu3wXFjWXdMHQ=
Subject key identifier: 99:3A:07:57:B9:4B:69:10:B7:60:C6:03:45:B9:48:50:27:A6:95:80
Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Certificate serial: 047D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
Manifest number: 0462
Signing time: Fri 11 Sep 2026 00:02:43 +0000
Manifest this update: Fri 11 Sep 2026 00:02:42 +0000
Manifest next update: Fri 18 Sep 2026 00:02:42 +0000
Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: 0BYPc1jCfmjzHq/hogi5UCJvcdVziqBjQOhAEoEaTcA=)
2: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: 9iACXyqJyXbzjckCXFceS2N5xwZfybCxOngbROUjtGI=)
3: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: ySJe+I3dozNuenRqVNkRZyIcXxzpogjD9zxaSvpwIMo=)
4: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: 9MUJ5ahbTn/0nfX/uwJrKv31jpeuSAMP0+bUKlRgGCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149 (0x47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Validity
Not Before: Sep 11 00:02:42 2026 GMT
Not After : Sep 18 00:02:42 2026 GMT
Subject: CN=6aa34523-f8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:ec:e2:62:e5:7f:bc:36:7b:84:c3:c6:90:
26:8e:6f:fc:72:01:d4:6f:9d:cc:eb:1c:a7:c8:9e:
d5:07:79:8a:9d:2c:0a:28:a0:ef:65:4b:13:78:4d:
f9:17:9c:e0:95:3e:cc:5d:0f:74:8d:0f:17:43:b8:
8e:a7:83:0a:a9:16:b9:c7:1c:76:7f:fe:b3:15:31:
ce:15:d4:8b:32:8f:06:95:75:5b:ad:42:51:38:93:
5b:65:89:39:ea:96:a7:38:44:98:54:7e:c8:02:88:
00:82:a1:f4:88:27:66:6f:44:2d:a6:c8:0b:a1:44:
13:f1:1d:07:15:dd:2e:37:47:d2:1e:ed:5a:18:e0:
1a:e4:cb:9c:57:61:bc:36:fb:7e:1e:61:08:19:b8:
87:3f:13:b0:3b:c1:1b:14:a5:b7:87:dd:18:f9:69:
70:3f:ec:fb:39:4b:23:5b:d6:1b:95:59:fb:01:b0:
8b:53:51:e1:3f:d5:d1:c7:8e:c6:f6:13:3b:50:7c:
0b:48:a4:f2:ae:27:2c:c6:4d:b4:27:26:62:3d:47:
4c:7f:3b:70:cb:4f:bd:02:12:c4:ec:5a:e2:f6:94:
a9:1c:a6:f8:a5:09:e8:57:50:e1:5e:ba:69:96:d7:
a4:e5:c2:ed:a8:ef:0f:74:fe:9c:1c:10:75:11:a8:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3A:07:57:B9:4B:69:10:B7:60:C6:03:45:B9:48:50:27:A6:95:80
X509v3 Authority Key Identifier:
keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:dd:7d:32:d9:b8:5a:b7:76:38:ad:48:2b:8c:f6:2b:83:e6:
04:ff:d6:67:00:c3:90:66:9f:23:4e:87:ce:4c:6b:4a:a0:c5:
0a:6e:7e:1d:b8:93:ca:21:28:27:35:1d:02:d9:b9:e5:eb:db:
d2:00:96:ac:73:6e:1d:9f:8e:4d:06:28:0c:9d:e0:17:de:25:
64:c7:51:49:b2:84:88:40:0c:5b:c3:29:e2:6a:8d:82:42:a6:
e5:42:1b:02:6c:ec:33:51:a6:23:61:71:cf:3a:3f:11:f6:b0:
80:52:07:09:52:c7:14:07:31:7f:c7:8e:2e:87:c3:6d:6e:32:
1a:f0:63:53:5e:9d:b3:c9:92:bf:66:de:4d:4f:99:e1:50:62:
9e:11:21:19:e7:2d:b0:7c:19:f4:1c:36:4f:90:a1:72:a4:4b:
44:7a:a2:b8:df:9a:79:c5:fc:b4:33:55:db:e7:a9:6c:32:20:
28:80:00:f7:cc:a1:0f:93:8e:af:11:39:2f:a7:d6:1a:7a:f4:
f6:72:c3:f7:28:32:a5:33:f2:89:8e:7d:02:ad:9e:64:e0:a2:
2c:91:84:7d:c7:cc:68:ec:2d:94:02:2a:ac:8d:93:ee:c6:83:
58:99:cf:79:bb:a5:2c:08:66:f8:a4:03:44:68:98:9f:7f:80:
58:75:92:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:16:00 2026 by rpki-client