
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json)
Hash identifier: GkcXC7Cohu7ZVxoqLB0cvVPPQAD7YAWoZVuJTbzdBwY=
Subject key identifier: F1:57:4D:99:6D:0D:25:DD:B9:51:4C:94:FE:B0:14:F7:12:C5:6F:5C
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
Manifest number: 025A
Signing time: Fri 13 Mar 2026 01:33:55 +0000
Manifest this update: Fri 13 Mar 2026 01:33:54 +0000
Manifest next update: Fri 20 Mar 2026 01:33:54 +0000
Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: AinhXw24uX8pYOsIwksYsLuDkUnUW76s8M9c0OKSbqA=)
2: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: 0AcNJYbPABCo7geahEBKTRdq6wGpuolAL2JTEM7M9Jk=)
3: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: lA0GUtoywdP3W0s4fPvZbdcVPY5+3iGjlHV5SalUa/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 01:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Validity
Not Before: Mar 13 01:33:54 2026 GMT
Not After : Mar 20 01:33:54 2026 GMT
Subject: CN=69b36983-1aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4e:76:3b:7a:91:3f:6a:49:81:99:2d:af:d0:
91:cb:42:37:31:a0:5a:37:6b:38:65:83:d3:71:42:
df:6f:6a:06:d6:14:9d:a5:58:ae:24:4c:85:f2:11:
c5:42:f0:85:b8:da:8c:3a:f9:08:ff:6e:4d:b5:7a:
a6:73:45:9e:89:fe:44:03:17:27:14:23:98:0c:05:
ae:56:9d:15:1c:0e:72:b2:11:a5:61:91:8c:7a:bf:
35:f5:70:0e:c7:78:1b:5b:45:b5:de:15:83:c2:07:
2a:c6:cd:0d:da:54:5e:7b:aa:02:e6:a4:de:cf:17:
b5:1e:72:6b:b5:21:57:98:0f:fe:64:5e:22:ab:06:
d7:52:3f:e3:f7:f7:ce:71:29:62:d7:c5:a8:4d:09:
59:63:64:9d:9e:3f:b9:e6:25:42:a6:ff:c4:77:54:
04:2e:23:c8:6b:6f:08:4c:1c:1a:a8:1d:ab:d3:f0:
7e:d1:e8:a4:ae:b8:0f:db:b9:72:6c:f2:4d:95:47:
1b:ca:a7:7f:fc:28:2c:2e:03:09:9c:32:43:b4:c4:
88:57:e9:63:39:3c:12:80:b8:a3:77:06:51:29:2d:
31:28:40:92:5c:89:6a:c2:8c:e5:d4:66:eb:1e:c3:
df:d5:61:40:07:8a:45:6a:b9:57:4c:37:78:8b:6b:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:57:4D:99:6D:0D:25:DD:B9:51:4C:94:FE:B0:14:F7:12:C5:6F:5C
X509v3 Authority Key Identifier:
keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:50:e1:30:33:dc:4e:ab:e5:e2:3d:22:b8:85:14:ad:d8:c4:
45:f2:ee:78:f2:bd:5b:28:91:89:6b:8e:1a:a3:70:c1:85:c0:
44:9d:2b:05:fc:64:8a:4a:d3:dc:4e:e6:d4:15:c2:50:61:6e:
de:9d:60:8f:54:a9:9e:ca:7a:d4:94:c5:b6:58:e6:2c:fd:ac:
55:89:e8:2c:a2:e3:e4:4a:33:2b:be:67:0c:25:4b:88:34:4f:
ad:9d:38:fc:6c:84:97:c8:16:1a:ec:b7:f6:f8:19:45:55:c6:
26:61:20:d2:04:d5:d5:43:b1:2d:9f:43:1a:58:dd:de:d2:fb:
a6:a7:79:d0:5c:f8:1d:35:83:ec:bc:41:7e:06:00:e5:c7:f1:
3b:b9:88:8a:63:7e:f7:c1:c5:54:b2:a6:e1:b5:55:56:b2:bc:
c9:7e:1e:43:90:1b:1e:31:62:38:3f:c2:e4:93:80:de:87:50:
96:fa:ac:de:e6:f7:6f:43:17:74:88:c7:79:44:56:cf:1c:bc:
9b:d0:af:70:8f:e4:e5:a3:82:1e:b6:0e:39:48:9e:be:ec:a8:
1a:34:bd:01:6f:19:3e:d2:01:e1:ed:bd:a6:84:7e:f1:2f:5a:
79:15:0c:53:05:c3:09:49:a9:37:e9:15:34:07:9a:2e:f2:c9:
3b:8f:b3:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1
NzZBMTI4M0UwHhcNMjYwMzEzMDEzMzU0WhcNMjYwMzIwMDEzMzU0WjAYMRYwFAYD
VQQDEw02OWIzNjk4My0xYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8E52O3qRP2pJgZktr9CRy0I3MaBaN2s4ZYPTcULfb2oG1hSdpViuJEyF8hHF
QvCFuNqMOvkI/25NtXqmc0Weif5EAxcnFCOYDAWuVp0VHA5yshGlYZGMer819XAO
x3gbW0W13hWDwgcqxs0N2lRee6oC5qTezxe1HnJrtSFXmA/+ZF4iqwbXUj/j9/fO
cSli18WoTQlZY2Sdnj+55iVCpv/Ed1QELiPIa28ITBwaqB2r0/B+0eikrrgP27ly
bPJNlUcbyqd//CgsLgMJnDJDtMSIV+ljOTwSgLijdwZRKS0xKECSXIlqwozl1Gbr
HsPf1WFAB4pFarlXTDd4i2sarwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPFXTZlt
DSXduVFMlP6wFPcSxW9cMB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2
NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL
RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEMzMC8wRjFGN0NFODk2NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlE
ZEliVlZEVVliY3hYYWhLRDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQlDhMDPcTqvl4j0iuIUUrdjERfLuePK9WyiRiWuOGqNwwYXARJ0rBfxkikrT
3E7m1BXCUGFu3p1gj1Spnsp61JTFtljmLP2sVYnoLKLj5EozK75nDCVLiDRPrZ04
/GyEl8gWGuy39vgZRVXGJmEg0gTV1UOxLZ9DGljd3tL7pqd50Fz4HTWD7LxBfgYA
5cfxO7mIimN+98HFVLKm4bVVVrK8yX4eQ5AbHjFiOD/C5JOA3odQlvqs3ub3b0MX
dIjHeURWzxy8m9CvcI/k5aOCHrYOOUievuyoGjS9AW8ZPtIB4e29poR+8S9aeRUM
UwXDCUmpN+kVNAeaLvLJO4+z8Q==
-----END CERTIFICATE-----
Generated at Fri Mar 13 20:48:22 2026 by rpki-client