
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
File: woYQciwbyJvjK01LiizCHeZxfMg.mft (raw, json)
Hash identifier: Dh2yQPISX08xK/yZgYf3WlCtAcYo4r514LZtj6QI004=
Subject key identifier: 6D:96:D2:E0:CA:F5:77:74:90:A2:CD:6D:5C:F1:65:C3:1D:F4:AB:A8
Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
Certificate issuer: /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Certificate serial: 033D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
Manifest number: 0334
Signing time: Sun 05 Apr 2026 00:49:39 +0000
Manifest this update: Sun 05 Apr 2026 00:49:39 +0000
Manifest next update: Sun 12 Apr 2026 00:49:39 +0000
Files and hashes: 1: woYQciwbyJvjK01LiizCHeZxfMg.crl (hash: pjF/L0rt1Ajqhrjn30UeOV+Ec5PxhkZ7MXS7bG7IRUs=)
2: 782DB69017A911F192949DC6333D8C67.roa (hash: Mv+E4tW4XYVYr1mpUCzDscto72w/c2g7B6/yB5ClYE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 829 (0x33d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11D6, serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Validity
Not Before: Apr 5 00:49:39 2026 GMT
Not After : Apr 12 00:49:39 2026 GMT
Subject: CN=69d1b1a3-d37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:27:1e:de:9a:cb:7f:dd:5b:fa:1f:62:b3:
f7:f3:95:98:d8:07:d8:c5:b7:2d:67:10:7b:54:0e:
73:3c:e3:ce:f6:2d:10:af:0d:0a:89:72:f3:45:e4:
42:28:97:29:27:fc:6f:fb:28:eb:be:e2:9e:b9:32:
8a:3e:c5:41:87:b7:b6:dc:dc:6a:65:c8:8d:6d:1f:
30:e2:1b:86:b9:4a:ec:10:6a:3e:e2:c0:ce:22:3e:
16:ee:ce:59:1a:d8:a1:9a:ca:82:05:18:e2:f2:2a:
1a:1e:28:0c:3e:a8:c5:22:ac:59:d0:ef:92:1d:b1:
54:14:a8:77:c0:d6:6f:cf:ae:df:86:58:87:8b:80:
42:e4:f6:38:10:5b:f3:97:4a:c3:a2:78:aa:f0:c2:
0f:7d:0a:b4:d2:22:ea:1c:4b:c4:06:42:3c:dc:65:
6c:4e:0c:18:7c:92:eb:92:ee:1c:47:67:c5:30:7e:
55:e0:92:5f:08:5b:98:8e:a3:3d:de:77:ac:fe:cc:
7a:fd:6f:d4:e6:fe:30:f3:c4:10:94:96:f2:2c:46:
b4:ea:da:87:c9:a3:c6:0d:57:d0:b3:30:81:ef:fa:
5c:31:4b:a2:a5:ef:43:10:66:c5:58:37:cb:d8:63:
c9:68:28:9b:bf:1b:e2:39:04:1c:90:08:19:b1:32:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:96:D2:E0:CA:F5:77:74:90:A2:CD:6D:5C:F1:65:C3:1D:F4:AB:A8
X509v3 Authority Key Identifier:
keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c2:30:70:2c:c2:b8:d3:ac:f8:ae:6b:de:e5:d0:b3:0a:7b:
5c:2e:3f:71:94:70:9c:44:d4:6d:30:e5:56:a4:00:2d:22:43:
b0:7a:7f:c3:19:40:72:cb:31:2e:64:8d:4f:55:21:ec:db:3b:
7e:19:98:fd:1d:c8:d9:b3:65:a1:8c:5f:8b:e9:74:b4:05:d9:
18:56:e3:9d:6a:28:d4:1a:df:ff:dc:82:ca:ab:75:60:30:97:
cb:a9:25:7c:14:5f:44:04:9b:fb:93:c2:68:28:1a:fb:89:be:
40:5a:07:3a:39:3c:f8:aa:ba:1a:02:3c:a5:ce:1f:33:49:d2:
d4:e0:a9:45:2d:85:be:ea:81:b7:8a:4b:06:39:05:12:75:5a:
64:b9:b5:e8:39:23:89:a1:b6:e9:fd:b7:69:8e:8f:99:5a:a1:
b1:9a:40:a9:93:10:01:64:13:d7:e4:a2:4c:1b:c1:d4:e1:89:
7b:9c:a6:34:8a:a0:c1:1d:b4:38:f2:5a:28:3c:c3:8a:c0:5b:
a0:fd:f2:23:cf:71:c3:75:8c:24:aa:2c:28:b2:2d:c0:5e:43:
2c:4b:10:c3:11:42:b5:37:fc:10:e5:56:1a:ba:59:97:c8:11:
97:36:ae:4a:54:01:a9:07:4c:48:eb:e5:53:70:14:5d:d6:a2:
b3:f3:37:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTExRDYxMTAvBgNVBAUTKEMyODYxMDcyMkMxQkM4OUJFMzJCNEQ0QjhBMkNDMjFE
RTY3MTdDQzgwHhcNMjYwNDA1MDA0OTM5WhcNMjYwNDEyMDA0OTM5WjAYMRYwFAYD
VQQDEw02OWQxYjFhMy1kMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxmYnHt6ay3/dW/ofYrP385WY2AfYxbctZxB7VA5zPOPO9i0Qrw0KiXLzReRC
KJcpJ/xv+yjrvuKeuTKKPsVBh7e23NxqZciNbR8w4huGuUrsEGo+4sDOIj4W7s5Z
GtihmsqCBRji8ioaHigMPqjFIqxZ0O+SHbFUFKh3wNZvz67fhliHi4BC5PY4EFvz
l0rDoniq8MIPfQq00iLqHEvEBkI83GVsTgwYfJLrku4cR2fFMH5V4JJfCFuYjqM9
3nes/sx6/W/U5v4w88QQlJbyLEa06tqHyaPGDVfQszCB7/pcMUuipe9DEGbFWDfL
2GPJaCibvxviOQQckAgZsTKIdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2W0uDK
9Xd0kKLNbVzxZcMd9KuoMB8GA1UdIwQYMBaAFMKGEHIsG8ib4ytNS4oswh3mcXzI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFENi83N0RFRkQzMjA2
MzkxMUVEODE4QzQwMTZDNEY5QUUwMi93b1lRY2l3YnlKdmpLMDFMaWl6Q0hlWnhm
TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dvWVFjaXdieUp2akswMUxpaXpDSGVaeGZNZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTFENi83N0RFRkQzMjA2MzkxMUVEODE4QzQwMTZDNEY5QUUwMi93b1lRY2l3YnlK
dmpLMDFMaWl6Q0hlWnhmTWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo8IwcCzCuNOs+K5r3uXQswp7XC4/cZRwnETUbTDlVqQALSJDsHp/wxlAcssx
LmSNT1Uh7Ns7fhmY/R3I2bNloYxfi+l0tAXZGFbjnWoo1Brf/9yCyqt1YDCXy6kl
fBRfRASb+5PCaCga+4m+QFoHOjk8+Kq6GgI8pc4fM0nS1OCpRS2FvuqBt4pLBjkF
EnVaZLm16DkjiaG26f23aY6PmVqhsZpAqZMQAWQT1+SiTBvB1OGJe5ymNIqgwR20
OPJaKDzDisBboP3yI89xw3WMJKosKLItwF5DLEsQwxFCtTf8EOVWGrpZl8gRlzau
SlQBqQdMSOvlU3AUXdais/M3gA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:42 2026 by rpki-client