
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
File: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft (raw, json)
Hash identifier: WPEai4O6y1tDComZnElNLSnh+Dvw7yangD0KJxl2/Fw=
Subject key identifier: 57:9C:54:9D:77:31:CD:D0:3D:1F:B1:9A:46:06:D4:15:6A:F8:F8:B0
Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59
Certificate issuer: /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
Certificate serial: 05AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
Manifest number: 0598
Signing time: Tue 28 Apr 2026 23:42:19 +0000
Manifest this update: Tue 28 Apr 2026 23:42:18 +0000
Manifest next update: Tue 05 May 2026 23:42:18 +0000
Files and hashes: 1: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl (hash: 8yirHKrKTfG0v58AHyUQrwOlwsrORmdVMmGngv2KKYM=)
2: 7273624619B511EC98D2A883C4F9AE02.roa (hash: FBbiY2Z7A2gvB+/P385wAa7i305YOeNtcXS/9FCiDPc=)
3: 7EE93AAC893111EF824EA948C4F9AE02.roa (hash: PJ438y1c6II0FXqv0r3FpWjrqzyZo7X27AzYDDSNdT8=)
4: 387C18C819B811EC841B010DC4F9AE02.roa (hash: cO+o3Y1UXcuuxZYV6QVRRJQ+0dW/JHVUCXusTAIueTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl
rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 23:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1452 (0x5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED931, serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
Validity
Not Before: Apr 28 23:42:18 2026 GMT
Not After : May 5 23:42:18 2026 GMT
Subject: CN=69f145db-7be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:81:60:f4:e7:3a:bd:08:48:b1:ac:ab:77:
54:f1:d7:87:e9:6e:18:76:de:b2:b3:c3:f6:17:f2:
55:be:9c:60:e6:ed:a1:5f:3e:4b:26:08:42:55:ce:
3f:e7:13:68:d3:a8:4c:7d:12:1b:85:aa:bc:87:9b:
0e:44:a0:f1:55:2b:a7:c3:ba:c8:60:7f:77:c9:a8:
62:ec:7d:a8:54:ba:92:41:26:6f:89:d9:c4:7c:69:
a3:2a:79:24:cb:69:a9:7a:46:91:2f:16:b3:43:cd:
8c:e1:bb:30:34:a8:8b:09:6c:90:46:93:b7:c2:1a:
6a:9a:04:2f:cb:75:b1:40:0c:1b:fd:79:20:2d:38:
4c:f7:db:ff:2f:79:9f:dc:13:3f:19:c7:e4:bf:ff:
d9:c9:02:30:b2:78:b0:17:00:43:54:d1:7c:e2:02:
04:dc:fe:3f:7a:d0:6d:61:89:1d:5e:65:1a:4c:ce:
e5:d1:ee:4b:39:2f:34:94:d4:13:af:d9:98:a2:33:
c7:e2:bb:a1:97:98:9a:bc:f6:8f:77:e1:11:b5:34:
33:87:4a:ec:13:58:c0:64:01:71:d0:2f:09:31:ea:
82:30:5b:43:ff:92:47:0c:1f:59:b5:d6:ec:5c:6b:
6a:c0:78:db:b5:a8:94:e3:e5:b5:12:68:e3:36:6c:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9C:54:9D:77:31:CD:D0:3D:1F:B1:9A:46:06:D4:15:6A:F8:F8:B0
X509v3 Authority Key Identifier:
keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:e4:6c:3e:cd:1d:67:74:1b:8b:be:25:aa:ac:dd:f5:a2:30:
4b:04:17:af:44:1e:26:08:aa:e2:f2:bc:d6:4e:28:2c:26:2b:
db:aa:96:9d:bd:b4:26:24:88:68:ee:75:87:0e:64:67:27:2e:
00:4f:12:61:c1:92:9c:3d:a2:6e:9f:8f:6f:25:22:05:88:ac:
eb:c9:b2:ad:28:15:8c:d8:db:25:12:4c:2b:bc:47:14:2b:82:
88:69:23:01:11:ea:1b:e8:cb:f3:a1:2d:56:9e:7b:4f:76:4b:
3e:a5:42:4a:a7:29:5b:c5:1e:22:ac:50:39:60:66:ca:12:fa:
02:2c:74:09:ab:08:e1:28:b3:98:d8:0e:3d:38:e7:fd:0f:37:
ff:43:cf:ce:a9:da:58:15:43:62:28:18:e1:46:f5:29:f5:a2:
5e:dd:91:cd:08:c4:2e:b6:b1:03:b0:f7:f2:23:1f:77:1d:f5:
21:82:1c:c1:62:f5:e5:e7:fe:56:54:64:ac:5d:14:2a:79:41:
47:58:31:be:7e:0b:dd:3a:dc:e2:2c:8b:77:83:fe:72:64:fc:
24:a5:e9:f1:d8:dc:1f:5d:94:6d:ec:69:17:1e:23:c2:f4:91:
d4:6a:ac:fe:21:b7:54:e8:b0:60:48:66:3b:34:47:32:7f:a6:
54:0d:b1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 20:05:06 2026 by rpki-client