
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.mft
File: wZkkVVtxmo3OX4gfEKzcCjWyBSw.mft (raw, json)
Hash identifier: Owc38zyl5UkIo7ANgXUtLQlS/x95Ve7FpuGYNdLKgp8=
Subject key identifier: E3:67:C0:86:1F:CE:2C:96:91:1C:39:44:AD:BA:2F:9E:AC:53:5E:08
Authority key identifier: C1:99:24:55:5B:71:9A:8D:CE:5F:88:1F:10:AC:DC:0A:35:B2:05:2C
Certificate issuer: /CN=A91F146E/serialNumber=C19924555B719A8DCE5F881F10ACDC0A35B2052C
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZkkVVtxmo3OX4gfEKzcCjWyBSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.mft
Manifest number: 4B
Signing time: Tue 27 Oct 2026 08:40:13 +0000
Manifest this update: Tue 27 Oct 2026 08:40:13 +0000
Manifest next update: Tue 03 Nov 2026 08:40:13 +0000
Files and hashes: 1: wZkkVVtxmo3OX4gfEKzcCjWyBSw.crl (hash: n41IHijCutTVaHPIlA5bsg4nk+bwpsTkxL9KKe3VoTo=)
2: 973AF3EC63C411F1B54905C17D47A888.roa (hash: 8HfNf9fSdlgZ+8O3B5tGK8aEM/aA/Z7fXET6ooG+NGM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.crl
rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZkkVVtxmo3OX4gfEKzcCjWyBSw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F146E, serialNumber=C19924555B719A8DCE5F881F10ACDC0A35B2052C
Validity
Not Before: Oct 27 08:40:13 2026 GMT
Not After : Nov 3 08:40:13 2026 GMT
Subject: CN=6ae0636d-6bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:e4:14:57:54:da:74:62:91:8d:35:a3:8b:
ed:67:6d:c5:98:a6:ed:05:dd:e8:d9:f4:25:66:b8:
b0:0b:d2:12:aa:88:5b:b5:9e:e7:28:ce:df:ed:72:
d8:9a:e9:bc:91:17:e9:7d:a8:ee:3e:f9:35:93:c2:
ea:d5:dd:f7:db:1d:a7:04:35:a9:7a:cb:5f:f6:b0:
17:2f:07:82:f7:04:8d:09:d6:fc:af:f4:dd:24:74:
be:9a:3a:df:ba:7b:90:95:1f:0e:c7:49:00:a5:2d:
ec:0a:f2:9f:74:04:d1:15:35:44:c9:94:1f:65:c6:
a9:3f:b4:82:ba:c9:f7:07:86:08:b4:36:44:31:fc:
19:fc:b5:b0:05:b1:8b:fb:26:a1:6e:be:2e:a2:a4:
a8:bb:33:7a:91:31:ff:ab:85:28:9a:e8:9a:a7:82:
df:f0:3d:7c:81:41:d3:4b:40:c5:a5:4c:b9:e8:57:
17:6d:c2:1e:81:ee:14:90:8a:17:1e:f7:ea:c8:f0:
6b:0c:6c:e5:b5:16:be:b4:66:f1:ca:2a:92:fd:9c:
25:e0:37:52:2b:0d:57:76:1a:52:99:78:43:6b:66:
ac:93:43:ff:fa:07:00:fd:46:ca:e8:3c:e2:27:a5:
1f:86:c4:b8:41:e4:6e:ff:98:12:8e:b1:86:46:7c:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:C0:86:1F:CE:2C:96:91:1C:39:44:AD:BA:2F:9E:AC:53:5E:08
X509v3 Authority Key Identifier:
keyid:C1:99:24:55:5B:71:9A:8D:CE:5F:88:1F:10:AC:DC:0A:35:B2:05:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZkkVVtxmo3OX4gfEKzcCjWyBSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9b:d0:4c:b8:bb:0f:82:b9:51:cc:4c:63:0d:7d:55:a5:6c:
c2:5a:cc:51:f0:fc:a2:9b:3c:11:ae:68:0f:de:60:ee:be:3c:
b7:0d:47:dc:e1:a6:cd:75:33:24:b2:21:24:9a:2e:bb:f5:b3:
3f:c7:09:9b:5a:d2:f0:57:00:e5:39:22:a1:85:a3:29:a1:30:
ef:b9:5d:af:0d:e4:09:eb:4e:70:f6:7e:b1:48:7e:ce:ec:ac:
f3:93:19:f0:85:3d:1e:0c:19:9a:d7:67:c0:41:a5:24:6b:1c:
fe:ac:dd:22:d5:f6:8f:46:5b:98:ac:65:ac:0c:ab:6d:a4:e4:
51:ba:5d:f4:00:ea:2c:a7:c0:7d:26:e6:59:34:05:a2:1e:03:
f7:8b:c2:fe:6d:9d:b1:2a:6b:27:35:3e:97:d2:e2:2f:b3:74:
76:e4:58:25:0e:16:29:9b:3c:04:d1:27:6c:4e:5b:05:9d:f9:
4c:28:46:77:78:40:fc:0b:c4:39:ec:f4:43:59:e9:1f:e3:e2:
c0:cd:f9:d4:6a:aa:08:a0:8a:74:1b:64:59:b1:14:af:7e:27:
03:e1:fe:51:bb:db:90:86:eb:43:88:a0:f5:38:ca:e3:36:bd:
ef:dc:c7:65:c0:57:81:83:c1:d7:30:9e:bb:2b:57:14:25:75:
a7:c0:3e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:53:37 2026 by rpki-client