
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json)
Hash identifier: g9ANcJNM7425TN+aqDl4smUlruHLiUj5+b3GYBM3/sw=
Subject key identifier: CF:E7:D0:93:A4:18:CC:47:83:85:DF:78:2B:6D:EB:6E:C1:B5:C0:12
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial: 02E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
Manifest number: 02CE
Signing time: Thu 29 Oct 2026 01:50:28 +0000
Manifest this update: Thu 29 Oct 2026 01:50:28 +0000
Manifest next update: Thu 05 Nov 2026 01:50:28 +0000
Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: ghgCTV3s0IvukIwg15b/xL++RDLj6iROd2GT49Mghpw=)
2: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: lA0GUtoywdP3W0s4fPvZbdcVPY5+3iGjlHV5SalUa/g=)
3: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: 0AcNJYbPABCo7geahEBKTRdq6wGpuolAL2JTEM7M9Jk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 01:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Validity
Not Before: Oct 29 01:50:28 2026 GMT
Not After : Nov 5 01:50:28 2026 GMT
Subject: CN=6ae2a664-4f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:f4:db:ef:9c:9a:e3:78:21:dc:81:8a:6e:
d8:ec:f0:98:a2:72:9c:7a:92:02:5c:46:61:2f:ae:
65:0d:55:04:36:36:94:ed:df:1d:f8:ab:9b:67:70:
5e:2e:1a:1a:c5:67:6c:da:33:86:22:3d:b8:fc:a2:
90:dc:f5:62:8c:93:61:4b:f6:eb:7f:86:bb:6c:24:
c5:63:71:b7:ef:0b:10:38:31:8b:01:b5:d6:2a:be:
9b:bc:61:50:fe:06:b5:01:e8:62:96:b1:68:e6:84:
8e:c2:d5:3e:52:ea:b5:f3:af:83:c6:62:62:d6:34:
c9:c6:93:3f:c3:e9:c7:8d:f1:8f:42:0a:dd:45:65:
45:66:a8:7d:f7:e2:f0:ec:25:d9:e1:d6:81:34:bd:
7e:5f:64:b3:8e:8c:2e:1d:78:82:25:e4:6e:1c:0e:
8c:54:cd:1d:5a:32:53:59:4f:a2:0b:c3:c0:07:ec:
21:48:a3:a1:3f:cd:97:8a:9d:b1:dc:6f:35:eb:d1:
28:c3:f4:42:1f:45:b3:41:db:6f:9a:b1:6e:f9:99:
ff:6b:60:b8:2d:9c:f5:b9:73:fc:88:61:55:68:41:
0a:f2:eb:65:7e:0c:42:5a:1e:87:7f:14:ea:79:98:
24:49:e1:db:04:69:27:68:74:49:77:79:48:fe:31:
39:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E7:D0:93:A4:18:CC:47:83:85:DF:78:2B:6D:EB:6E:C1:B5:C0:12
X509v3 Authority Key Identifier:
keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5a:10:e8:a6:8e:74:b9:3c:d9:26:91:4f:6b:06:64:cb:f4:
94:34:cd:03:82:b1:20:b0:47:af:a9:3d:75:ec:f2:54:98:c7:
23:85:fa:31:27:fb:dd:b7:6c:b7:6f:1d:05:88:30:d5:42:07:
43:36:28:9b:60:65:78:91:88:8a:fa:a7:e3:8d:91:cf:77:f8:
fa:bf:5e:72:8a:62:14:dc:97:72:9f:08:d0:70:d2:cd:5d:70:
5a:08:16:e5:5a:48:6a:de:fc:dc:07:d3:a6:00:8d:c9:51:94:
fd:8f:07:43:ab:76:e9:88:3a:2c:46:6d:d6:8a:80:0f:63:08:
a1:8d:e0:54:e1:07:d4:6c:30:56:05:fb:a9:2e:81:da:23:f9:
51:f8:a5:ea:c5:79:6b:8d:5f:41:1a:5f:18:f2:7c:1e:db:9a:
fd:a8:ef:d4:4b:61:00:54:09:9a:34:1e:4e:b2:0f:da:7d:2d:
3a:e4:dc:dc:a2:09:a1:07:e4:c9:4e:eb:9d:07:ce:66:14:cc:
11:d0:57:17:2d:67:26:66:04:b3:f1:f1:fb:ab:80:cc:01:fb:
fa:2b:07:5d:2d:0e:40:a5:3e:71:d9:20:f9:6a:94:e9:4d:82:
f0:76:2b:a5:7e:d2:53:34:33:70:9f:55:a6:82:32:dc:47:a6:
55:0b:b5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:08:49 2026 by rpki-client