
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
File: wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json)
Hash identifier: uOhTAaO4emEl8tzXqMqx2cfsHpSi78K0Us7hMPCqnU8=
Subject key identifier: BB:E4:40:3C:AF:FC:81:61:92:31:2C:B2:43:5B:B8:A1:90:93:87:B9
Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
Certificate issuer: /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Certificate serial: 0846
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
Manifest number: 083D
Signing time: Fri 06 Mar 2026 20:35:29 +0000
Manifest this update: Fri 06 Mar 2026 20:35:28 +0000
Manifest next update: Fri 13 Mar 2026 20:35:28 +0000
Files and hashes: 1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: df+WWymG8MKkunLXOziejcXEfQS+b18HZg39DBwS22w=)
2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: uWkp09s7yGSzXGuY3Dy3+U0rw2K9bYSVVtki+9GQvL0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 20:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2118 (0x846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Validity
Not Before: Mar 6 20:35:28 2026 GMT
Not After : Mar 13 20:35:28 2026 GMT
Subject: CN=69ab3a91-5c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:56:80:b1:d8:8d:cb:01:96:5b:5c:24:1a:5a:
3e:a5:08:34:e4:57:8d:30:7f:15:f5:19:12:6a:8c:
1e:dd:20:69:4c:b3:5e:0b:45:18:24:b9:48:49:36:
ed:3c:60:2f:a0:93:6e:5f:93:de:98:b4:ce:0c:76:
5d:1d:b8:43:13:bd:63:4f:ce:01:47:06:e0:c4:47:
56:29:f5:95:37:1b:28:23:48:89:91:e4:7a:62:ce:
96:eb:31:05:4b:84:06:41:c6:dd:5e:2b:2a:e7:53:
cb:a5:62:bf:e4:dd:61:cf:f3:7a:1e:30:82:60:9b:
94:6d:76:e3:04:68:47:3f:95:a4:75:a4:d8:db:5d:
86:8b:31:13:70:1d:c9:db:a7:6a:e8:2f:92:82:7f:
49:7c:7e:ca:5b:e9:2b:53:40:e7:f4:9d:51:0f:54:
88:75:41:7e:23:72:40:4d:83:24:a4:f8:38:1e:4b:
7d:b7:d8:0b:b4:2e:19:87:56:72:49:96:54:bb:75:
5a:b0:cc:63:3f:f1:51:ae:50:f5:8f:4b:a2:7f:80:
a1:62:e1:df:ec:04:29:92:e6:e6:8c:f4:cf:33:8a:
be:31:25:2c:96:fa:8a:63:b3:11:c5:5c:ab:cc:18:
00:90:d7:e3:e0:fc:37:ce:ab:0a:d8:37:dd:7c:ca:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E4:40:3C:AF:FC:81:61:92:31:2C:B2:43:5B:B8:A1:90:93:87:B9
X509v3 Authority Key Identifier:
keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:2d:83:a3:46:fc:e9:12:d6:2b:33:9c:a5:0a:d8:81:d0:bb:
06:95:89:4e:23:05:c1:65:9f:0c:c5:fe:a8:31:89:fb:4c:a4:
47:b5:c8:2e:dd:a7:d0:59:8b:a7:8e:97:bc:2c:7d:b1:2e:ef:
61:03:e7:9d:de:52:34:27:50:e1:d1:59:6b:14:e5:df:3b:bb:
52:eb:b1:08:38:bc:5b:04:4c:08:6d:ca:a0:2d:06:1f:74:f1:
0b:e8:91:13:38:e3:2d:a6:ce:80:2d:44:d9:da:58:53:f3:ee:
a0:cc:5c:63:fe:a5:5f:f7:d9:d5:ea:45:34:35:2f:05:7f:4c:
57:b3:1d:ce:d7:4b:a7:8d:2b:a1:d6:da:58:ab:a3:5c:aa:50:
36:ba:e3:e6:44:09:b8:db:97:93:e9:8a:6f:6c:9c:f3:e5:62:
65:95:5a:93:5f:eb:eb:a4:60:db:4b:45:a8:47:13:92:b6:77:
9b:57:40:8d:32:6c:5f:cc:6e:19:ce:9e:c4:d2:a3:e3:fb:c9:
b5:5c:cc:73:9c:f2:21:73:05:81:79:33:7c:0b:33:01:02:fc:
a2:a0:af:fc:ec:ee:3f:20:7f:75:4c:01:92:18:72:1c:88:9b:
58:23:d6:61:ab:f5:23:47:e2:d4:fd:02:49:33:9f:7b:45:6e:
5c:74:9d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:37:15 2026 by rpki-client