
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116882/F95B41CACC2511F1BAA7195AFB65CEF9/WDYWqHTdgq0EUdvnBGfCPbVUMcQ.mft
File: WDYWqHTdgq0EUdvnBGfCPbVUMcQ.mft (raw, json)
Hash identifier: GE7Yp5n6kaQEm12d2wx87RSffauNQCzeXJx26p42IUU=
Subject key identifier: 29:40:05:B3:D3:C8:13:BF:FC:AB:48:FA:65:BA:F8:56:DD:49:2B:56
Authority key identifier: 58:36:16:A8:74:DD:82:AD:04:51:DB:E7:04:67:C2:3D:B5:54:31:C4
Certificate issuer: /CN=A9116882/serialNumber=583616A874DD82AD0451DBE70467C23DB55431C4
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WDYWqHTdgq0EUdvnBGfCPbVUMcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116882/F95B41CACC2511F1BAA7195AFB65CEF9/WDYWqHTdgq0EUdvnBGfCPbVUMcQ.mft
Manifest number: 11
Signing time: Sun 15 Nov 2026 09:17:27 +0000
Manifest this update: Sun 15 Nov 2026 09:17:26 +0000
Manifest next update: Sun 22 Nov 2026 09:17:26 +0000
Files and hashes: 1: WDYWqHTdgq0EUdvnBGfCPbVUMcQ.crl (hash: 59KmkSEk0x+IjI7bJ3R9WF0Q7YW/CQMQ1nJYqmo2muQ=)
2: CQsPeW9wdY3nk68ocBodriopk0w.asa (hash: cZ7WY6q9NZNx0AzSmIfO00uNwVx9epC63HxbbAialEQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116882/F95B41CACC2511F1BAA7195AFB65CEF9/WDYWqHTdgq0EUdvnBGfCPbVUMcQ.crl
rsync://rpki.apnic.net/member_repository/A9116882/F95B41CACC2511F1BAA7195AFB65CEF9/WDYWqHTdgq0EUdvnBGfCPbVUMcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WDYWqHTdgq0EUdvnBGfCPbVUMcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 09:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116882, serialNumber=583616A874DD82AD0451DBE70467C23DB55431C4
Validity
Not Before: Nov 15 09:17:26 2026 GMT
Not After : Nov 22 09:17:26 2026 GMT
Subject: CN=6af978a7-599d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e1:42:d1:ac:07:92:50:81:e4:8d:b3:e2:96:
61:83:9f:87:2d:17:99:b3:1f:92:f7:63:09:9d:20:
20:10:15:90:4a:2e:24:b6:04:c8:ca:68:45:49:50:
52:f4:a4:38:38:27:b7:3b:19:58:ae:0a:30:43:55:
8e:fe:06:b4:2b:06:79:2d:d2:ab:a8:f6:fa:5a:8a:
c1:9a:c2:45:31:01:c2:16:8a:18:d9:7c:c3:e1:04:
0c:5f:84:70:dc:08:b3:c2:34:4f:8d:b0:cb:50:70:
a1:99:74:ca:e7:e3:6e:c5:eb:e2:6d:95:14:c3:07:
5b:ac:a0:1c:fa:73:ed:e2:96:11:9e:cc:9d:7c:af:
37:b2:2f:7b:59:17:50:7f:00:e8:65:7d:0a:fa:d0:
b8:a5:67:57:14:f2:7e:78:ff:11:be:2f:28:35:c7:
57:79:56:79:3b:22:03:0b:98:4e:7d:5f:ff:13:e0:
ef:ff:89:00:1e:e4:aa:5a:07:35:04:e2:c6:a1:b7:
9b:0d:db:6a:dd:44:a4:54:1d:83:00:ec:5d:f7:b6:
cd:f4:62:27:a2:c5:6c:6c:53:31:d0:64:c7:f2:98:
cf:f3:8b:13:f1:cd:4f:85:2d:d5:7b:56:9a:24:11:
7e:5f:6b:fc:b3:96:a6:be:97:7c:96:3a:e2:7a:c3:
b6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:40:05:B3:D3:C8:13:BF:FC:AB:48:FA:65:BA:F8:56:DD:49:2B:56
X509v3 Authority Key Identifier:
keyid:58:36:16:A8:74:DD:82:AD:04:51:DB:E7:04:67:C2:3D:B5:54:31:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116882/F95B41CACC2511F1BAA7195AFB65CEF9/WDYWqHTdgq0EUdvnBGfCPbVUMcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WDYWqHTdgq0EUdvnBGfCPbVUMcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116882/F95B41CACC2511F1BAA7195AFB65CEF9/WDYWqHTdgq0EUdvnBGfCPbVUMcQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:64:e0:9a:e3:53:bb:f0:1a:b9:5e:a2:5d:61:1c:43:b5:6d:
20:1f:b8:45:cc:74:a3:71:c4:58:f4:4c:75:b6:70:73:a0:9d:
e2:b6:2d:c6:85:cf:23:94:4d:c6:b2:b8:b7:91:e5:6f:03:b5:
b2:fc:80:d5:b1:df:4a:2d:8b:f1:be:ae:e7:ab:b7:6a:e0:f5:
19:0d:68:ec:0a:39:33:2c:ff:c3:1f:11:c8:c0:8b:21:a2:b3:
25:75:3d:ee:c3:d7:1f:68:09:b0:0b:20:db:7b:de:72:8b:7f:
6b:1a:4f:b8:82:76:f9:95:1d:de:76:73:a8:fb:2c:d8:b4:08:
10:d3:15:65:d5:b9:d9:a6:dc:aa:e8:3e:52:71:da:6e:be:91:
55:be:ec:53:ad:cf:46:26:da:69:71:5a:e0:01:dd:6f:5e:2c:
52:5d:59:3e:6f:58:2a:08:fe:b4:ae:cb:6a:85:1b:85:07:ec:
ab:72:93:3c:41:44:ba:92:db:0d:ee:38:67:7f:f6:3f:f1:78:
f4:b2:97:fe:cc:1e:47:fd:3f:25:f6:68:d6:f1:aa:73:7c:0a:
ba:e8:56:3c:95:b4:11:7f:8b:ac:63:f5:26:e4:15:b1:f5:02:
5c:4a:ef:68:15:16:1f:84:09:8a:6f:00:fa:71:89:b8:89:0e:
b4:b8:d5:9a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Njg4MjExMC8GA1UEBRMoNTgzNjE2QTg3NEREODJBRDA0NTFEQkU3MDQ2N0MyM0RC
NTU0MzFDNDAeFw0yNjExMTUwOTE3MjZaFw0yNjExMjIwOTE3MjZaMBgxFjAUBgNV
BAMTDTZhZjk3OGE3LTU5OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC94ULRrAeSUIHkjbPilmGDn4ctF5mzH5L3YwmdICAQFZBKLiS2BMjKaEVJUFL0
pDg4J7c7GViuCjBDVY7+BrQrBnkt0quo9vpaisGawkUxAcIWihjZfMPhBAxfhHDc
CLPCNE+NsMtQcKGZdMrn427F6+JtlRTDB1usoBz6c+3ilhGezJ18rzeyL3tZF1B/
AOhlfQr60LilZ1cU8n54/xG+Lyg1x1d5Vnk7IgMLmE59X/8T4O//iQAe5KpaBzUE
4saht5sN22rdRKRUHYMA7F33ts30YieixWxsUzHQZMfymM/zixPxzU+FLdV7Vpok
EX5fa/yzlqa+l3yWOuJ6w7azAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKUAFs9PI
E7/8q0j6Zbr4Vt1JK1YwHwYDVR0jBBgwFoAUWDYWqHTdgq0EUdvnBGfCPbVUMcQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2ODgyL0Y5NUI0MUNBQ0My
NTExRjFCQUE3MTk1QUZCNjVDRUY5L1dEWVdxSFRkZ3EwRVVkdm5CR2ZDUGJWVU1j
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV0RZV3FIVGRncTBFVWR2bkJHZkNQYlZVTWNRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2
ODgyL0Y5NUI0MUNBQ0MyNTExRjFCQUE3MTk1QUZCNjVDRUY5L1dEWVdxSFRkZ3Ew
RVVkdm5CR2ZDUGJWVU1jUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAgZOCa41O78Bq5XqJdYRxDtW0gH7hFzHSjccRY9Ex1tnBzoJ3iti3Ghc8jlE3G
sri3keVvA7Wy/IDVsd9KLYvxvq7nq7dq4PUZDWjsCjkzLP/DHxHIwIshorMldT3u
w9cfaAmwCyDbe95yi39rGk+4gnb5lR3ednOo+yzYtAgQ0xVl1bnZptyq6D5Scdpu
vpFVvuxTrc9GJtppcVrgAd1vXixSXVk+b1gqCP60rstqhRuFB+yrcpM8QUS6ktsN
7jhnf/Y/8Xj0spf+zB5H/T8l9mjW8apzfAq66FY8lbQRf4usY/Um5BWx9QJcSu9o
FRYfhAmKbwD6cYm4iQ60uNWa
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:32:34 2026 by rpki-client