
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
File: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft (raw, json)
Hash identifier: k2RywNUnV5TU73r76jp9y5TTIv/AQBWIrMSrcJAZzq8=
Subject key identifier: BE:B9:23:64:BA:B8:76:36:F6:37:2D:C7:A0:F6:96:0B:A8:A1:7D:56
Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD
Certificate issuer: /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
Certificate serial: 090A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
Manifest number: 0903
Signing time: Sat 04 Apr 2026 20:06:30 +0000
Manifest this update: Sat 04 Apr 2026 20:06:29 +0000
Manifest next update: Sat 11 Apr 2026 20:06:29 +0000
Files and hashes: 1: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl (hash: a0VOjW89vIv2g20kSG+DEgEZyb+uj1jgwCO+qy8BmGk=)
2: 4A9F953EE29611EF8E06890AC4F9AE02.roa (hash: edI7/Y3QUQ2H0PLGPWgqOSTulDJowXskUVxpUOtA7Co=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl
rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2314 (0x90a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD
Validity
Not Before: Apr 4 20:06:29 2026 GMT
Not After : Apr 11 20:06:29 2026 GMT
Subject: CN=69d16f46-cf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:ce:62:12:87:ba:79:78:3e:9f:8c:9b:6c:
88:08:4d:49:d9:c8:31:96:7f:1e:9a:6c:a3:bb:dc:
1f:fd:5b:42:99:6c:dc:da:22:2c:60:ce:ea:0c:59:
7b:fa:75:29:a7:9d:ed:94:f9:00:80:33:56:66:4f:
ef:6e:55:80:bd:24:0b:b8:8a:ed:ca:76:6f:42:fa:
20:34:a0:0c:e5:8d:cc:7a:f1:8c:cc:6d:c5:bf:98:
f0:86:25:1a:ab:11:cb:73:f4:76:ed:d5:22:0d:93:
55:aa:ff:88:4e:b9:de:b5:f0:d2:0c:84:34:e6:9b:
65:f3:4a:db:b1:dd:3a:8f:63:52:58:d3:a8:c2:4a:
3b:bc:bc:1f:23:05:2c:c4:b3:c6:72:ee:5d:d2:db:
52:cc:63:5f:5e:74:71:b9:e9:01:a0:06:36:c3:d8:
e0:2c:dd:33:ec:93:c4:48:f1:84:81:bb:05:a3:50:
e7:fc:67:1d:e1:ef:9a:5c:7c:76:55:84:5f:25:e5:
92:3c:b9:62:ad:77:08:88:58:59:41:b0:b9:80:d0:
03:f1:a7:d4:31:45:91:ea:9e:ce:fb:fa:7c:45:9a:
44:86:4f:43:98:b8:9d:18:f4:6c:d5:8b:86:54:e4:
29:91:95:49:a8:89:df:9b:c6:a0:39:55:2d:b3:8f:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B9:23:64:BA:B8:76:36:F6:37:2D:C7:A0:F6:96:0B:A8:A1:7D:56
X509v3 Authority Key Identifier:
keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:12:5d:ce:61:e8:2b:d0:d4:c1:e1:9f:a9:e1:fb:92:3b:46:
68:83:1f:c9:e1:55:b3:0f:0a:8c:2d:2d:1b:25:6f:04:1f:81:
65:96:1e:34:63:c6:49:87:3e:d9:4b:09:39:db:70:4f:da:5a:
ee:71:99:7e:59:46:5d:9f:63:89:b4:47:1d:0e:c3:b3:5d:48:
dd:86:3e:5d:43:8e:4a:79:75:02:a2:ef:24:96:c1:0b:53:4b:
95:5d:b8:d8:d3:46:86:8f:10:11:b0:67:1c:6c:51:7e:41:ea:
3b:9b:0b:c7:7d:cf:13:5f:ad:8e:ab:e7:e5:df:67:6f:51:8f:
7a:48:6f:76:64:ae:14:87:b6:2b:ca:52:99:c4:95:82:79:eb:
77:4b:e5:f4:d0:1e:9d:99:06:3b:29:5f:60:78:bc:f0:3a:97:
62:01:8d:4f:57:3b:ad:3d:11:d4:11:94:79:da:eb:c4:66:23:
ae:32:ff:b6:7e:8e:6a:ba:37:62:e2:bb:16:41:9d:cb:b7:31:
e5:85:78:97:5f:81:dd:f2:e7:ac:c7:ea:75:41:41:7e:9a:e5:
4b:a1:86:a5:c5:e8:5b:5b:88:eb:36:1a:ec:5f:3b:b8:c4:e9:
e9:bf:b5:a0:12:4c:56:3d:15:1d:31:b4:1f:15:86:84:a9:f2:
6f:35:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:24 2026 by rpki-client