
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json)
Hash identifier: FtiDiLV+kuGENzV5e8MFb8s11b8pE2njjSJTf+ukUYU=
Subject key identifier: 54:54:D4:B5:47:CE:7F:64:35:4E:6A:EE:7C:C4:F9:69:BE:A9:11:1D
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial: 0286
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
Manifest number: 0271
Signing time: Mon 27 Apr 2026 01:58:27 +0000
Manifest this update: Mon 27 Apr 2026 01:58:27 +0000
Manifest next update: Mon 04 May 2026 01:58:27 +0000
Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: Z+7zfC283h+6K6jkk7ekQLUMHjq65Ln4qLttZQh2y4Q=)
2: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: lA0GUtoywdP3W0s4fPvZbdcVPY5+3iGjlHV5SalUa/g=)
3: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: 0AcNJYbPABCo7geahEBKTRdq6wGpuolAL2JTEM7M9Jk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Validity
Not Before: Apr 27 01:58:27 2026 GMT
Not After : May 4 01:58:27 2026 GMT
Subject: CN=69eec2c3-0bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1e:3d:ac:26:a7:9e:5b:59:10:72:bb:cb:7e:
13:c6:43:5f:9f:1d:5b:7c:25:f0:33:85:68:45:e5:
14:40:5c:30:2c:b1:c5:66:d1:8f:59:24:8d:36:84:
6c:9d:ad:9f:6e:96:35:43:4a:1c:9b:7f:cf:99:bf:
ac:6c:8a:ea:e6:a4:3c:72:ea:1a:d7:0a:36:76:ef:
66:fa:dd:a9:b0:bb:59:b6:50:58:d0:d5:74:27:b4:
62:0b:7f:4a:b9:8b:92:1a:e2:2a:f4:1b:cc:da:f7:
bf:2b:c0:f2:73:2d:bf:76:27:99:9c:34:40:5a:e5:
64:a5:5a:3c:72:0a:e6:c9:21:a4:69:c4:f2:e6:ee:
4c:32:0c:89:1b:62:3c:19:11:da:49:63:3f:72:02:
5a:dc:01:d5:1d:ed:2a:5f:51:cd:23:a1:f5:fe:69:
c0:fb:4f:87:0a:7b:9f:3c:ef:83:19:9d:7b:1f:d8:
eb:11:96:28:97:ff:bc:76:b5:77:4d:f2:73:35:92:
4f:e1:61:d6:44:45:bb:6b:fc:93:84:f1:3e:94:c0:
8e:0e:fe:4c:aa:d6:ad:68:cc:da:b7:3c:ca:23:5b:
cb:2d:52:d0:5c:5f:8a:40:0b:ce:56:1a:bc:48:aa:
c6:c5:59:79:d3:7e:1e:97:44:5b:47:93:ab:38:c9:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:54:D4:B5:47:CE:7F:64:35:4E:6A:EE:7C:C4:F9:69:BE:A9:11:1D
X509v3 Authority Key Identifier:
keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:82:98:d0:66:2b:3b:ae:ec:80:5b:fd:84:42:14:ee:eb:83:
65:55:d4:a0:dd:ca:1e:b6:f4:58:67:83:b7:6e:a6:3e:ea:f7:
34:c8:86:c1:dc:c3:c0:10:9a:4b:19:1c:a7:5c:45:db:d4:65:
9d:4f:a7:32:dd:56:f6:6b:bc:1e:e3:c4:40:be:8a:9c:d5:27:
3e:bc:28:68:b9:5e:58:05:83:59:1a:1f:6c:f9:95:ff:de:89:
55:8c:7b:f7:48:eb:5c:8a:e4:d1:ed:12:f6:e7:3c:32:59:a3:
2d:eb:2b:b2:cc:7e:58:b5:0d:55:1b:31:a0:88:48:74:3c:68:
35:e3:d3:5d:fe:7c:12:4a:99:89:0e:03:7e:e3:bf:a0:ca:16:
93:b0:a5:f9:eb:6a:f5:f2:57:ef:9c:d2:88:47:36:55:f5:f9:
a4:48:0a:f0:ce:ca:02:68:ca:96:e6:21:89:1d:2a:cc:a1:99:
d5:ce:b4:9a:fd:b9:24:9a:8c:eb:9b:30:15:55:8f:fc:05:30:
13:fb:de:c8:2c:23:dc:30:28:60:32:0c:23:6f:d9:66:78:5c:
af:7c:4d:dc:8c:b7:78:97:df:0f:df:8d:bf:5e:4e:85:62:12:
33:c8:ac:70:f3:72:16:9b:c1:4c:48:53:3b:08:9c:97:a2:2f:
19:42:5a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 12:44:10 2026 by rpki-client