
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
File: RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json)
Hash identifier: nO89G5r829VcJ6G8A/Oufsjb6d7zPYZOE84d1NkNwcg=
Subject key identifier: 09:C8:73:5B:B1:40:6F:0F:FD:5C:69:1F:64:7B:EF:34:89:0B:01:D2
Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
Certificate issuer: /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Certificate serial: 0286
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
Manifest number: 026E
Signing time: Fri 13 Mar 2026 01:29:25 +0000
Manifest this update: Fri 13 Mar 2026 01:29:24 +0000
Manifest next update: Fri 20 Mar 2026 01:29:24 +0000
Files and hashes: 1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: 0Vr6BWBRiMgWLnRnm09xVQ8LI0gWM2aF1TCF97mDGnI=)
2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: 56OWJIaGJbU897Qsu8EsYt1ihb4Vo/hHqb3TZGrUjxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 01:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Validity
Not Before: Mar 13 01:29:24 2026 GMT
Not After : Mar 20 01:29:24 2026 GMT
Subject: CN=69b36875-0c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:4a:cc:9c:53:c1:a9:1e:ca:4c:41:9c:4e:
01:fc:d9:ff:6d:0b:5c:bc:57:00:3a:0b:13:0a:de:
0a:3b:d9:14:a2:3f:e8:a9:01:ad:70:f9:8a:35:ad:
ee:98:77:8e:e9:6f:44:f8:bd:be:18:d1:f8:9b:a7:
08:61:08:33:1b:a3:93:f1:26:14:8e:da:a9:74:83:
ca:bf:1b:1c:0c:2c:67:17:80:e9:fd:18:1e:e5:ef:
7e:77:e9:7e:ba:4e:d1:66:d9:15:0a:d7:93:74:fe:
08:b2:70:44:6e:5f:fb:e8:d8:66:76:45:73:02:bd:
17:02:6d:bc:b3:f7:10:63:e7:0f:20:2b:6b:ad:20:
df:c6:ec:d6:2e:49:36:1e:2c:56:1c:1d:7f:69:0c:
0e:ad:6d:8f:33:8f:ea:11:91:9a:d9:32:16:67:ac:
dd:2f:f6:ce:0f:ce:22:36:69:53:46:f1:14:de:43:
7b:21:6e:ca:8f:1c:0c:48:39:aa:e5:be:b6:2f:88:
00:f9:b8:f6:c9:2f:3d:51:bc:e9:05:be:6d:d1:6c:
95:ff:ab:74:29:d7:bb:78:8f:5d:e7:68:fa:d7:a0:
e3:fd:58:8c:64:e9:e9:7c:91:74:e5:3f:14:22:eb:
eb:f9:1a:9f:87:80:39:ac:a7:2a:8f:8f:7b:08:8b:
68:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C8:73:5B:B1:40:6F:0F:FD:5C:69:1F:64:7B:EF:34:89:0B:01:D2
X509v3 Authority Key Identifier:
keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:46:9b:76:35:94:87:b5:e9:2a:cb:30:6d:0b:4f:15:b8:72:
a4:7f:02:7c:7f:a2:f8:16:ff:bb:a6:43:38:ef:a1:39:74:ac:
b3:9d:ee:20:3d:d3:39:db:f5:f8:c3:59:1e:58:58:fe:5d:b0:
ba:ff:2d:2c:34:b4:c1:c4:cd:93:a8:95:da:da:70:46:41:0b:
20:62:b7:cf:3a:88:54:ff:02:4e:de:6d:1f:b8:7c:61:3a:64:
bf:31:b3:4d:e4:3e:83:ec:d1:cf:74:fb:c2:b1:94:72:2c:eb:
94:64:ff:26:83:0b:c3:60:1c:f1:53:1a:9f:d2:72:27:78:4b:
74:97:e7:b1:47:49:c3:d4:e0:bc:a9:54:07:3a:76:27:e6:7a:
ad:8a:39:e9:b4:2d:46:e9:98:ef:29:0a:86:8d:c6:b1:20:86:
20:4e:7b:9d:23:5f:56:bd:69:41:db:9b:fd:5b:98:f9:e9:51:
dd:fd:7d:c9:82:f9:4d:7f:47:39:1f:81:2a:82:85:f5:8e:21:
7a:d4:7f:f5:6f:6e:15:7d:c1:23:a3:38:39:51:64:72:1b:d4:
88:15:a5:5a:ee:9f:6e:60:65:c9:51:ae:d3:43:e9:5b:48:59:
86:77:56:3e:87:22:de:25:9f:97:68:a2:c2:bc:f5:41:58:d8:
1a:6d:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 00:18:15 2026 by rpki-client