
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
File: Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft (raw, json)
Hash identifier: CEc0Hcx8gEqS1drUuB31f+5AgRM6QWpk+Xwyrvi+8Nc=
Subject key identifier: 46:E5:64:AB:AB:86:AA:3B:38:B1:C5:4A:7B:40:53:55:EB:59:33:2A
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Certificate issuer: /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial: 112D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
Manifest number: 10B1
Signing time: Thu 16 Apr 2026 17:18:01 +0000
Manifest this update: Thu 16 Apr 2026 17:18:00 +0000
Manifest next update: Thu 23 Apr 2026 17:18:00 +0000
Files and hashes: 1: Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl (hash: TeMjc1FrjNl0DENMRPotMaIXp72avmT5r1JGvrIgUbA=)
2: 04C5DE76FF2711EAB7D5F235C4F9AE02.roa (hash: eb3+tHV1wRLLEmC3kj0RQw3MnpJ2PGa07z+N4EUcBA8=)
3: 727F33429FAD11EAAD1A6744C4F9AE02.roa (hash: juU4sbQRoi0FHuryZbA2eU5v383vXepIosrtYBH3gtg=)
4: B7D67B4ECC3011EA9B54C679C4F9AE02.roa (hash: EE7xiFt8zHUSdbXxMdyXG6Wpd6uFiY1gYTraSn4pB98=)
5: ED4C74EC5B2911EDAC608856C4F9AE02.roa (hash: c4KIZ7sVtzVDPX25+FzQ/O+y1BOxGSAb3CkDDL2gT68=)
6: 9D164714168511EAB282BB44C4F9AE02.roa (hash: DSZNEJ4bi4o5CgyqC1+84x7Rm378M2iKs/nwItolD0A=)
7: 9DE197A2168511EAB282BB44C4F9AE02.roa (hash: okPNLIYHqUe2+LRXDuE5SiF4zzmmje5rGzctyXR1y8I=)
8: A8DA1B1E9EE511EA890A7220C4F9AE02.roa (hash: wWSjcw2Ok0AjX38Jalp5jeYRBwKOimHHIAdxglDe+3Y=)
9: 884A03F4447111EC83674068C4F9AE02.roa (hash: MesMGQxH0Xw4s7Fn2Idh7Qa7VWkhHaWaah+Jq/emd28=)
10: F47561669C3B11EABC59DA11C4F9AE02.roa (hash: x8RxxSceiWsll8aKdp4onnVgfhxxvJp6geOEYhZHJgc=)
11: F34FF6B69C3B11EABC59DA11C4F9AE02.roa (hash: OLxb4szEa42sVAsVtahDW9OACGax9w0AvXegNjux5TA=)
12: CC320712ACE011EAB535D034C4F9AE02.roa (hash: ATSoIcgvhIoB1w29pbN50AH77sAvyF3PhL5dixTk+JA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4397 (0x112d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Validity
Not Before: Apr 16 17:18:00 2026 GMT
Not After : Apr 23 17:18:00 2026 GMT
Subject: CN=69e119c9-2d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:8a:07:29:4c:eb:76:7e:01:fb:75:a2:76:
59:d9:73:f8:a5:3d:3d:e8:1d:e4:08:80:b0:39:71:
e5:6c:0a:76:d9:72:b4:b8:cf:f8:7f:2d:c6:85:e5:
d8:4e:68:1f:2d:72:98:84:aa:ab:2d:bb:ca:34:58:
8a:74:96:3c:73:dc:37:8b:cb:a7:cc:92:79:8d:0f:
62:a9:63:0e:2b:9b:d6:0e:2f:3e:b9:e4:57:37:8c:
11:ee:3e:58:1f:47:08:35:6b:d7:e4:88:56:21:33:
a8:f6:97:d3:36:88:6a:61:0a:fb:da:f8:9e:94:f7:
26:26:78:54:43:4f:7e:b6:ae:4a:2e:d3:0f:f4:1e:
aa:fd:ff:0a:89:c1:f3:21:82:72:d9:20:fa:4b:23:
53:6e:f5:a8:52:dd:d9:28:ef:0b:d5:07:79:ad:3b:
9f:bf:0a:3e:c0:34:86:3c:34:61:76:66:52:8d:7d:
28:60:f8:ff:f5:b6:fb:4b:4a:fe:ac:34:92:e5:9b:
d3:b7:71:79:ae:3f:d7:45:9d:85:cc:72:f8:c3:54:
f8:a1:91:57:7f:e2:df:a5:a4:28:86:57:ba:66:b5:
b0:e8:d9:f8:72:dd:96:67:8e:3f:1f:a2:25:7f:70:
ce:4b:cb:82:95:ab:79:af:2e:13:79:61:0b:71:f5:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E5:64:AB:AB:86:AA:3B:38:B1:C5:4A:7B:40:53:55:EB:59:33:2A
X509v3 Authority Key Identifier:
keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:98:f0:16:6d:05:9f:da:86:2d:3c:42:4e:28:67:86:9b:86:
c3:40:44:1f:46:8c:27:74:23:1c:65:ff:a8:22:cb:a5:31:ae:
19:8c:b9:2c:2e:1e:5b:66:46:71:e0:3b:fd:0e:72:6b:b3:77:
0a:88:60:65:45:c3:dc:5f:8f:d8:ae:88:58:82:27:93:1c:e5:
a5:2a:ac:6f:71:af:14:b0:8b:d3:cf:e7:24:ab:58:79:ca:46:
d9:2e:81:bb:9a:f8:e0:93:ec:83:3d:ef:c0:d9:19:37:86:ec:
ca:bb:58:a0:91:5a:a9:0c:0d:bc:55:ae:7b:3b:5d:8a:bd:e3:
90:d6:ef:33:e9:a9:6f:47:1b:0e:aa:42:14:88:f6:e4:04:c2:
3c:77:c9:7b:85:c3:ff:c8:7e:0c:6a:ca:56:33:02:c5:86:7c:
df:e3:ce:87:20:27:e9:f7:be:a3:33:00:10:c3:37:a4:39:22:
94:24:08:a3:12:ee:70:2c:8c:91:4a:b0:c6:33:25:d2:4a:d0:
89:9e:7c:54:15:95:0d:bc:a6:e7:b2:41:17:94:1c:be:98:56:
93:75:43:ba:1d:bc:75:60:07:0a:36:46:f4:c6:9a:e2:da:18:
1f:27:b1:72:d2:37:d9:f4:19:18:2a:5d:f5:5d:29:4a:98:42:
1f:be:89:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:42:16 2026 by rpki-client