
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
File: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft (raw, json)
Hash identifier: ZQiQt0a8d6vfwMIcZmgQ+b34JPt+xytuZgML4Vcooms=
Subject key identifier: 56:3E:BA:7C:B6:7E:11:33:6B:9A:68:EF:BA:3C:ED:67:87:EC:F4:E8
Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
Certificate issuer: /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Certificate serial: 0CDF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
Manifest number: 0C9A
Signing time: Sun 20 Sep 2026 18:39:31 +0000
Manifest this update: Sun 20 Sep 2026 18:39:31 +0000
Manifest next update: Sun 27 Sep 2026 18:39:31 +0000
Files and hashes: 1: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl (hash: a7Ed2H2LpAjESwsMFQ4N6iIQU/ODAJQVDREygIccNjo=)
2: 1495D7EE854B11EAACB2FE39C4F9AE02.roa (hash: 91pBfBg++OiSpm3dXFfKRY31Pfjw1Y5YqIqUFxD8Hhs=)
3: 474DC6748C2B11EA90152018C4F9AE02.roa (hash: TiR/THxTv+8Q4xjFCU9Crz8ZRBbuW10DJLAKMkvQPtc=)
4: 140D52F2854B11EAACB2FE39C4F9AE02.roa (hash: NJ/7oIBGXC/PxDjKoZF+pd55TEkTum40/RwHEfCwL4Y=)
5: 0D71045E446F11F199E2CB159A833773.roa (hash: JGOzhC40R+5tpKY/DJrlqw941gH/K3YdrzRh7icEYrY=)
6: 21A731506C9B11ED93A7513AC4F9AE02.roa (hash: +MbypgVzLHUTjgMkgZKJV+5xplqp/2u1VVeYBMIe3Jw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3295 (0xcdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Validity
Not Before: Sep 20 18:39:31 2026 GMT
Not After : Sep 27 18:39:31 2026 GMT
Subject: CN=6ab02863-34cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:c5:79:5e:47:25:8d:9e:be:4e:0b:6d:b7:
44:0c:ab:ef:dd:d3:df:8c:01:c3:f5:97:15:90:56:
01:76:04:bb:43:48:5f:6d:d1:3d:23:fd:48:f1:07:
2b:c6:d0:9c:a1:f2:5f:e3:35:1f:60:94:65:21:f5:
97:db:ed:9e:f2:5b:e7:b8:02:6c:cf:2b:5a:86:d0:
54:8a:14:56:da:54:40:29:fa:69:e4:4a:85:8a:6d:
71:b3:40:2e:02:ed:0d:0a:ba:1b:82:22:19:b8:13:
76:86:f8:e0:82:e4:21:7d:97:57:54:2d:aa:5f:6b:
c4:ac:be:3e:62:5e:aa:7d:a4:15:a3:14:b8:94:75:
44:75:d4:6a:c5:d6:ce:bd:78:e0:bd:2b:3a:a9:8a:
47:ae:4d:5c:bc:92:30:c1:07:1e:50:2b:84:46:86:
c1:2e:23:08:36:68:14:c1:ae:cd:45:ad:37:61:60:
5a:d1:d5:f3:2e:cc:66:c2:12:51:c2:3e:a7:6c:78:
01:42:56:19:66:f4:70:e0:5b:f2:44:db:46:6c:26:
3c:2d:c5:27:77:7f:10:a1:13:7d:7c:0f:b4:8d:4b:
a0:ec:c5:ef:93:25:bb:cf:c6:8d:ae:f1:14:4b:ea:
47:5e:f7:6a:93:b8:e3:df:7c:16:6d:9f:b8:44:27:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3E:BA:7C:B6:7E:11:33:6B:9A:68:EF:BA:3C:ED:67:87:EC:F4:E8
X509v3 Authority Key Identifier:
keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0f:82:50:17:3f:ea:9f:59:79:ad:fe:f9:64:40:53:ee:c5:
f6:2a:1e:fb:02:34:00:82:c6:5c:35:2e:76:98:a1:17:8d:d1:
20:64:f1:5f:c1:c9:7e:6a:51:31:ce:18:89:b6:98:a7:d0:0d:
ac:f1:61:0b:c6:b9:d3:1f:62:9d:73:14:8f:b9:eb:ab:aa:5f:
fb:7a:5e:7e:54:97:c4:00:4a:71:ab:34:a2:13:44:a2:4a:4c:
df:fe:fe:f3:1c:09:37:42:a7:17:03:4a:7b:39:47:83:8e:c0:
d2:ce:d0:39:53:dd:48:a9:be:bb:3f:63:18:09:fe:76:1d:9d:
e7:42:5a:c6:47:89:69:38:b0:d9:8b:69:34:c1:46:b7:67:63:
3d:bc:8b:09:f7:2c:0f:4b:fe:42:39:cc:b2:87:20:3e:06:9f:
8d:03:ad:a3:cf:8f:96:d1:3b:a2:2c:2f:c1:8b:ac:be:87:3f:
55:43:b5:b9:59:e3:d4:e4:7c:bb:fe:c0:3c:f3:71:31:99:b9:
90:0e:b8:76:2c:ff:a9:c7:8e:66:e9:2c:13:c8:fa:14:38:2c:
6f:8f:f4:7f:e6:d3:f7:a4:b6:d4:f3:56:7c:31:b6:1e:38:ad:
02:2e:9d:72:f4:b5:7f:3d:49:99:0b:35:d1:ce:61:35:5c:19:
ad:7a:42:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:43:37 2026 by rpki-client