
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
File: 0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json)
Hash identifier: dXsKvltrqq/cXuqYjd4Q7dEV1vw0BZmnxxoQcvYuvlU=
Subject key identifier: 6C:70:71:A2:49:C4:E4:32:05:BD:63:26:D8:BD:03:AE:73:CB:7B:A8
Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A
Certificate issuer: /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
Certificate serial: 078F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
Manifest number: 0788
Signing time: Wed 20 May 2026 21:35:58 +0000
Manifest this update: Wed 20 May 2026 21:35:57 +0000
Manifest next update: Wed 27 May 2026 21:35:57 +0000
Files and hashes: 1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: mC2IlvMP8ciUm020PF9l2FVU2sju0lBYu9SR+b05EHE=)
2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: fDbOklqIjVzAmy9iGzSfTYuMC8JuKAGFbb5Bt0TrNgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl
rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935 (0x78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
Validity
Not Before: May 20 21:35:57 2026 GMT
Not After : May 27 21:35:57 2026 GMT
Subject: CN=6a0e293e-be3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f4:71:4d:b3:c4:5b:eb:ba:ff:76:5c:b5:ce:
39:af:d1:7d:76:b7:d5:02:4a:2c:1b:5b:34:67:3c:
5b:7b:2d:41:6b:96:4d:c9:be:97:d8:20:48:d5:36:
02:66:45:ae:5d:69:bb:b9:aa:d6:48:0d:c2:47:e3:
e4:98:a4:8a:0b:87:43:c6:a9:72:7f:04:54:5d:65:
80:ab:f9:c2:69:39:d7:d6:ed:d2:df:63:14:2f:b3:
da:03:8b:22:37:39:c5:7e:47:43:11:3c:fc:21:e4:
49:7f:50:39:b6:9f:0a:99:56:a5:70:16:ac:7e:c1:
c7:d3:f2:58:65:72:d5:d6:4b:8c:2f:d5:e3:60:46:
49:24:4e:42:85:18:3b:08:22:73:b7:9f:33:f5:5b:
6e:cb:d5:7b:d8:41:7a:3c:89:b3:2c:d3:90:86:1e:
06:89:fe:50:9e:3f:74:2d:6c:90:7f:04:81:6e:94:
96:de:a8:48:ef:c2:a7:50:6a:40:4e:2a:ed:46:a2:
ba:d4:0f:48:8e:83:b1:f8:5c:9b:fc:a6:41:31:0d:
9c:4a:7a:b7:ca:4e:de:55:21:6a:33:0d:9d:33:a8:
02:e9:51:b4:ae:9f:01:d5:ce:7e:7c:dc:a9:f7:59:
d5:c1:b8:58:2c:5c:72:ca:0b:0e:11:72:30:e8:c2:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:70:71:A2:49:C4:E4:32:05:BD:63:26:D8:BD:03:AE:73:CB:7B:A8
X509v3 Authority Key Identifier:
keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:38:34:ba:99:83:b7:12:47:51:0b:08:0a:59:e4:04:6d:03:
85:f7:3d:3a:7a:9f:b0:89:2e:0f:1d:9b:6c:d3:10:e2:97:53:
52:37:53:2f:f9:fa:b4:54:9f:4e:9d:c8:f1:c1:68:f4:b6:05:
e2:e5:1a:c6:7d:53:a3:40:bf:d4:b3:ff:1d:29:17:46:38:37:
05:04:5d:c8:01:1b:ac:14:ab:0e:ac:46:d5:20:78:be:26:92:
f4:db:d3:db:81:bd:28:af:4f:c7:6f:5a:1d:90:a2:61:d4:37:
fa:fd:52:1e:58:ab:f5:ea:e6:15:96:ea:3d:10:30:9c:70:76:
d6:7d:b8:1f:1d:61:ca:24:8e:07:e7:5a:9d:f5:f1:e7:f0:52:
fe:89:e7:7c:97:53:38:46:99:3c:b6:89:49:36:f5:89:44:d6:
97:1d:19:39:aa:79:04:f7:26:ad:1b:45:da:c9:77:88:20:b7:
09:ad:72:0b:e5:30:71:94:f2:51:ca:70:47:71:20:a0:e6:22:
24:71:aa:fe:dd:01:b9:98:42:b2:dc:d4:9f:e9:14:7e:52:2c:
cc:2d:19:0d:32:13:94:50:74:e8:d5:5e:63:09:a7:78:74:ec:
ba:0c:7c:d2:0c:81:58:7d:4d:2b:50:c3:05:de:90:21:fd:11:
e5:7b:7a:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURFQzgxMTAvBgNVBAUTKEQzMEI4MDRENDJBQjdEMDIwQzVGMUY3NkYzQjNERDFG
MjkyRDg2NkEwHhcNMjYwNTIwMjEzNTU3WhcNMjYwNTI3MjEzNTU3WjAYMRYwFAYD
VQQDEw02YTBlMjkzZS1iZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5PRxTbPEW+u6/3Zctc45r9F9drfVAkosG1s0Zzxbey1Ba5ZNyb6X2CBI1TYC
ZkWuXWm7uarWSA3CR+PkmKSKC4dDxqlyfwRUXWWAq/nCaTnX1u3S32MUL7PaA4si
NznFfkdDETz8IeRJf1A5tp8KmValcBasfsHH0/JYZXLV1kuML9XjYEZJJE5ChRg7
CCJzt58z9Vtuy9V72EF6PImzLNOQhh4Gif5Qnj90LWyQfwSBbpSW3qhI78KnUGpA
TirtRqK61A9IjoOx+Fyb/KZBMQ2cSnq3yk7eVSFqMw2dM6gC6VG0rp8B1c5+fNyp
91nVwbhYLFxyygsOEXIw6MLVOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxwcaJJ
xOQyBb1jJti9A65zy3uoMB8GA1UdIwQYMBaAFNMLgE1Cq30CDF8fdvOz3R8pLYZq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREVDOC84QTA1MDk4ODU2
RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZRSU1YeDkyODdQZEh5a3Ro
bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB3dUFUVUtyZlFJTVh4OTI4N1BkSHlrdGhtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
REVDOC84QTA1MDk4ODU2RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZR
SU1YeDkyODdQZEh5a3RobW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHjg0upmDtxJHUQsIClnkBG0Dhfc9OnqfsIkuDx2bbNMQ4pdTUjdTL/n6tFSf
Tp3I8cFo9LYF4uUaxn1To0C/1LP/HSkXRjg3BQRdyAEbrBSrDqxG1SB4viaS9NvT
24G9KK9Px29aHZCiYdQ3+v1SHlir9ermFZbqPRAwnHB21n24Hx1hyiSOB+danfXx
5/BS/onnfJdTOEaZPLaJSTb1iUTWlx0ZOap5BPcmrRtF2sl3iCC3Ca1yC+UwcZTy
UcpwR3EgoOYiJHGq/t0BuZhCstzUn+kUflIszC0ZDTITlFB06NVeYwmneHTsugx8
0gyBWH1NK1DDBd6QIf0R5Xt66g==
-----END CERTIFICATE-----
Generated at Thu May 21 09:36:02 2026 by rpki-client