
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
File: W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft (raw, json)
Hash identifier: IWL/+tvBfMGXaO1ro7Xl95oF7wIH4tjJZvRa5YUrDD4=
Subject key identifier: 2A:FD:BB:29:C0:B6:64:AE:59:6C:AD:0B:42:20:52:EA:77:6C:0B:08
Authority key identifier: 5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
Certificate issuer: /CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Certificate serial: 0239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
Manifest number: 022C
Signing time: Mon 21 Sep 2026 02:44:51 +0000
Manifest this update: Mon 21 Sep 2026 02:44:50 +0000
Manifest next update: Mon 28 Sep 2026 02:44:50 +0000
Files and hashes: 1: W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl (hash: YcbXRMDj9AVHc4r1ny2aj64LNDNwQKSYXmtYrNGSBwg=)
2: E286BAA24B5611F0A987864DC4F9AE02.roa (hash: mERSRsM56zZVM538VlKpNkeRtK+AXD86sag0pr0Q6X4=)
3: 12C3947A66F611EE82864875C4F9AE02.roa (hash: AMUUmBAUXG3TqchlULyq4/LQSR5p+XXlHRR72xWw5jg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911069A, serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Validity
Not Before: Sep 21 02:44:50 2026 GMT
Not After : Sep 28 02:44:50 2026 GMT
Subject: CN=6ab09a23-d783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:2c:c7:59:23:bc:9b:22:1b:2f:94:f5:db:
ee:aa:72:96:55:53:c3:51:c1:a2:c5:a8:2a:33:71:
b3:6b:77:08:38:d1:3f:c2:04:db:a5:0d:8f:ab:7e:
a8:64:42:1b:4c:8b:43:d5:6a:5b:fd:0f:17:1a:3c:
75:46:1f:f5:8f:7e:82:f6:6b:5c:a4:d1:85:0a:b1:
a5:90:96:98:4b:29:5a:0a:26:b1:d6:34:27:b0:1a:
fb:67:78:13:4f:b8:54:86:47:97:fd:f6:9f:fa:0d:
ac:74:da:7e:30:7c:4c:66:ab:9f:e5:9d:3d:1b:5c:
e1:4f:d1:68:10:db:f6:0b:50:22:06:17:df:27:51:
73:f5:4a:c8:00:5c:82:58:ba:ea:e5:03:a2:b0:5e:
8f:e7:b6:0a:28:3e:04:7c:e4:b3:29:f2:67:91:ba:
bd:2d:4f:ef:d1:fb:a5:ff:e4:75:72:26:23:3b:4c:
a6:60:27:42:c1:f0:8a:59:67:0f:dc:1e:8d:6f:07:
80:36:72:69:14:0d:17:fd:fb:ae:e9:73:41:e0:ab:
7e:bd:85:24:e1:37:39:ab:7a:b8:40:04:e5:08:b9:
e6:28:58:22:e5:ed:15:8e:ab:86:49:3e:0f:03:f3:
1c:3a:41:21:d5:f1:ba:58:c6:b8:b4:66:55:90:0f:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FD:BB:29:C0:B6:64:AE:59:6C:AD:0B:42:20:52:EA:77:6C:0B:08
X509v3 Authority Key Identifier:
keyid:5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:5b:ea:8e:93:f4:be:b4:56:7e:c4:cd:05:4b:03:3f:bc:2c:
4e:cf:7b:7c:1e:80:42:2b:8c:9c:97:ee:90:df:39:3e:02:cd:
58:2e:77:df:ae:cb:5f:de:37:9b:96:73:2e:98:96:b1:33:6a:
68:47:ed:7c:2f:f2:c0:f7:ed:75:77:ac:0e:d6:1c:c4:6a:07:
93:2f:1e:4a:30:7f:84:e2:2d:97:cb:bf:6c:63:70:31:91:9e:
78:79:da:3b:ac:c2:64:0c:43:8f:54:18:9b:8d:ca:d2:a0:72:
3c:98:54:a0:cf:61:5b:58:71:7c:50:1f:39:0b:13:49:89:ef:
17:cb:60:5a:4c:e2:ef:49:fb:7b:66:b9:cc:fe:9e:d6:17:47:
50:c4:ce:7e:77:ff:d2:f9:fe:94:1f:6e:f4:c0:c4:ed:27:29:
07:16:d6:55:bd:7d:b1:b6:f2:de:e4:c5:ac:c9:0f:09:e7:e0:
d7:43:78:5f:7a:77:2d:58:a4:e7:cb:07:0c:fe:03:64:c0:fe:
9f:00:94:ed:7e:7d:bb:90:ff:59:a4:5a:cf:78:1a:c4:41:83:
2e:ab:59:80:3a:c3:06:a2:d0:29:2d:4b:b4:fc:dd:62:fb:50:
b3:b3:8a:30:c1:7c:49:d7:15:3e:f3:b8:25:c4:fb:ed:f1:1a:
4c:3b:a0:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA2OUExMTAvBgNVBAUTKDVCODJFODhDMDE0MTMyODIzRDAyMEQ1QzMwQTZCRkI2
RDVCNTAyMjEwHhcNMjYwOTIxMDI0NDUwWhcNMjYwOTI4MDI0NDUwWjAYMRYwFAYD
VQQDEw02YWIwOWEyMy1kNzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqUIsx1kjvJsiGy+U9dvuqnKWVVPDUcGixagqM3Gza3cIONE/wgTbpQ2Pq36o
ZEIbTItD1Wpb/Q8XGjx1Rh/1j36C9mtcpNGFCrGlkJaYSylaCiax1jQnsBr7Z3gT
T7hUhkeX/faf+g2sdNp+MHxMZquf5Z09G1zhT9FoENv2C1AiBhffJ1Fz9UrIAFyC
WLrq5QOisF6P57YKKD4EfOSzKfJnkbq9LU/v0ful/+R1ciYjO0ymYCdCwfCKWWcP
3B6NbweANnJpFA0X/fuu6XNB4Kt+vYUk4Tc5q3q4QATlCLnmKFgi5e0VjquGST4P
A/McOkEh1fG6WMa4tGZVkA84lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCr9uynA
tmSuWWytC0IgUup3bAsIMB8GA1UdIwQYMBaAFFuC6IwBQTKCPQINXDCmv7bVtQIh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDY5QS85NjFCMkE0NjY2
RjUxMUVFQTQzODRGNzRDNEY5QUUwMi9XNExvakFGQk1vSTlBZzFjTUthX3R0VzFB
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c0TG9qQUZCTW9JOUFnMWNNS2FfdHRXMUFpRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDY5QS85NjFCMkE0NjY2RjUxMUVFQTQzODRGNzRDNEY5QUUwMi9XNExvakFGQk1v
STlBZzFjTUthX3R0VzFBaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABVvqjpP0vrRWfsTNBUsDP7wsTs97fB6AQiuMnJfukN85PgLNWC53367LX943
m5ZzLpiWsTNqaEftfC/ywPftdXesDtYcxGoHky8eSjB/hOItl8u/bGNwMZGeeHna
O6zCZAxDj1QYm43K0qByPJhUoM9hW1hxfFAfOQsTSYnvF8tgWkzi70n7e2a5zP6e
1hdHUMTOfnf/0vn+lB9u9MDE7ScpBxbWVb19sbby3uTFrMkPCefg10N4X3p3LVik
58sHDP4DZMD+nwCU7X59u5D/WaRaz3gaxEGDLqtZgDrDBqLQKS1LtPzdYvtQs7OK
MMF8SdcVPvO4JcT77fEaTDugLQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:20:41 2026 by rpki-client