
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
File: woYQciwbyJvjK01LiizCHeZxfMg.mft (raw, json)
Hash identifier: ocbrxg9KS0qpOaOYUZ8tyPFDmsacczzJBow1Cr3Nasc=
Subject key identifier: 8A:3D:9A:DA:7D:ED:E6:DB:21:35:F6:E9:B9:E2:B8:80:86:88:1A:78
Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
Certificate issuer: /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Certificate serial: 038E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
Manifest number: 0385
Signing time: Fri 11 Sep 2026 00:36:53 +0000
Manifest this update: Fri 11 Sep 2026 00:36:52 +0000
Manifest next update: Fri 18 Sep 2026 00:36:52 +0000
Files and hashes: 1: woYQciwbyJvjK01LiizCHeZxfMg.crl (hash: nvRPFPwghKD+ptSFKyFjHJPJ0h+3lldspmGsnz19xU0=)
2: 782DB69017A911F192949DC6333D8C67.roa (hash: Mv+E4tW4XYVYr1mpUCzDscto72w/c2g7B6/yB5ClYE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:36:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E11D6, serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Validity
Not Before: Sep 11 00:36:52 2026 GMT
Not After : Sep 18 00:36:52 2026 GMT
Subject: CN=6aa34d25-9068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:1a:29:07:6c:cd:70:1b:dc:2c:00:54:d9:
36:2f:8b:ed:e7:9f:b3:31:a9:41:bd:8c:26:81:3b:
ff:0b:66:17:d5:dc:c0:b4:52:32:ef:b0:be:d5:c1:
3a:23:10:ac:c4:3e:a0:bf:de:60:0b:0a:68:55:b3:
7b:6e:3e:dd:44:80:a2:7a:6c:49:b5:92:39:5b:e5:
19:1c:f5:50:32:21:09:e8:dc:7e:68:29:6e:c0:7b:
24:87:f2:a4:45:ae:cb:34:8f:2a:bc:e1:36:fc:07:
a3:01:a6:33:6c:79:f3:38:71:01:07:eb:cd:88:bb:
b7:18:51:bd:c8:85:12:f0:c2:4e:14:bf:78:2e:39:
62:f0:ff:d7:b0:7d:fd:15:c8:49:42:60:44:3f:70:
28:13:62:d6:de:41:31:e4:e7:8c:3f:fc:af:7b:b8:
85:fd:a4:67:28:e1:a2:19:ac:d8:77:35:14:6a:cf:
75:55:97:9b:d3:40:72:52:74:fc:e6:c2:aa:e4:c3:
9e:21:56:df:57:13:b6:35:b0:b5:ac:ba:46:94:f4:
13:ff:fc:8e:bc:23:d3:27:2b:cb:3a:1a:9e:c0:7a:
58:fe:c8:cb:ca:a2:73:ff:22:90:a1:6c:12:27:9e:
e4:57:31:05:ba:a2:f5:f6:d4:1f:d1:0d:b9:da:db:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3D:9A:DA:7D:ED:E6:DB:21:35:F6:E9:B9:E2:B8:80:86:88:1A:78
X509v3 Authority Key Identifier:
keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:25:e9:17:8b:f7:d0:04:9d:73:46:b1:aa:3e:67:c2:7c:ef:
07:8b:65:c0:34:df:4c:da:a6:22:c4:1e:89:b5:e0:38:ca:44:
ca:64:c3:aa:25:c0:52:58:17:59:c1:65:78:7e:e8:e6:36:75:
06:ef:3b:23:38:23:dd:72:68:9b:e3:8a:45:ae:e3:69:d4:bd:
a6:d7:72:da:b9:9c:20:c8:a6:cb:75:ae:3c:9b:fc:50:89:f6:
d7:9f:91:ae:60:b7:b0:a2:21:22:c4:05:f0:1b:e1:d1:aa:af:
89:1a:c6:41:49:17:89:50:48:00:d7:99:d5:36:86:aa:56:9d:
9e:12:77:65:0a:25:b3:0d:7d:6c:77:a8:88:6a:57:14:0c:31:
72:a3:dd:d6:99:f1:bd:ad:7d:d6:79:ac:ea:a6:b2:c3:b0:75:
e9:d9:f3:2f:df:f5:2b:87:e8:77:75:3b:97:88:5f:d2:c5:d1:
1f:9d:81:27:84:a1:40:dd:e7:d2:86:91:02:00:99:fc:88:f6:
9d:2d:26:0b:04:74:7b:e0:c6:c7:cc:3d:70:49:00:12:58:99:
04:51:6d:6c:0f:a1:14:43:17:13:25:b0:57:f0:e1:fe:f2:1d:
7f:6a:0a:9d:9d:53:d5:ca:93:27:42:20:94:aa:60:75:d8:e4:
27:c4:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:09:34 2026 by rpki-client