
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json)
Hash identifier: 2Gy6F5meAWOi9ksA7qLniZyeggDhpbmoF4RDpm+FfpM=
Subject key identifier: 35:9C:D5:E8:90:B8:38:85:B8:92:B7:60:AE:8D:60:6A:1A:F7:37:4C
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0C25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
Manifest number: 0BC9
Signing time: Thu 16 Apr 2026 18:59:48 +0000
Manifest this update: Thu 16 Apr 2026 18:59:47 +0000
Manifest next update: Thu 23 Apr 2026 18:59:47 +0000
Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: uLyAQg1G3jwYgZjcJdLkWikmcvKIO7mSdAv223zxesc=)
2: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: OT9brcicmctK+apt1pWBL6MJ8CCpv1ESq3NW6ajmaY8=)
3: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: uKOTbNBLAeF55zkPNPreuMeOCu0FLlIbOK5YGifFFXY=)
4: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: OeaYPNBUtTPvim9HMxt2o8TBmHEZXyqHblAeC5l7mS0=)
5: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: RUrsKpZBh2bHefYwp4oJVAW6UCst5icc8lXVG39cTUM=)
6: 12BE5F962DA511F1AB5ACB70A2833773.roa (hash: nvQami5BEJoZvrDF1xZRqzGeIWI8jjq/huhtnN4wEMw=)
7: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: M3o2rbRfq9TsNUJCS4ZbyowL8r51/zxaOuBDAztIJG0=)
8: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: vQQV0G1oE2RonZYgcaeEDVU+ZU9gw3CgzN6h3bxF4OI=)
9: A30B6882B3DE11F0B2D83330C4F9AE02.roa (hash: N1gpxY1Qmu9TXM+UsBN7G4a19/a7C7ui0EX50hEj8GE=)
10: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: zmT4huKs28Qo4c8cgWG60cK/QVsyyHKfdVgREmP58ec=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:59:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3109 (0xc25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Apr 16 18:59:47 2026 GMT
Not After : Apr 23 18:59:47 2026 GMT
Subject: CN=69e131a4-967e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e5:0e:15:57:d9:7b:25:13:52:ae:84:c4:56:
49:1a:39:4e:f6:d6:39:4f:33:7b:c0:48:c1:c5:de:
0e:e1:5c:f0:be:32:5b:5f:1a:e8:57:44:06:26:0b:
39:ba:dc:61:0e:10:4c:bb:54:d4:e1:2f:e6:f7:46:
ac:37:bb:5e:96:df:0c:e0:df:ac:c9:f1:7e:7c:6e:
0d:dd:44:2b:98:b9:a7:9d:7a:b1:9e:f1:70:d2:63:
00:9e:c8:b4:65:87:9a:76:f9:ae:2c:65:5e:a4:54:
f2:9a:59:31:de:ac:68:15:63:7f:88:97:57:42:f5:
c2:ea:f3:43:4d:1e:24:b6:16:f3:15:fe:e2:ec:a9:
83:5f:ba:91:44:c9:51:b4:eb:d3:83:3f:a8:ee:6f:
f6:a8:40:49:03:28:f6:36:33:4a:08:53:9f:90:ba:
19:58:5a:66:1e:cb:7f:fc:83:d1:6e:d7:dc:c3:af:
3e:b6:5b:71:01:52:2d:4c:ca:cc:44:03:32:ef:b0:
b8:91:2d:d0:80:58:cb:9e:e3:a3:c1:dc:7d:04:21:
5e:44:c7:ba:1b:2a:19:3d:40:10:30:fe:77:b7:49:
e5:db:6f:ad:c3:09:78:43:a3:79:1e:df:08:0b:ab:
ea:c5:0d:05:06:a2:ce:36:a8:d0:5a:b5:62:c5:d9:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9C:D5:E8:90:B8:38:85:B8:92:B7:60:AE:8D:60:6A:1A:F7:37:4C
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:da:8c:09:04:53:97:ec:8c:98:db:d6:b9:85:46:7d:46:70:
d7:53:b7:71:59:17:48:44:d1:66:4d:27:62:8f:70:75:a9:be:
4d:64:a0:e1:d6:d2:0d:44:69:2c:86:e3:bd:4f:5b:6a:fc:ce:
f9:27:b3:e9:17:20:9d:0e:b4:cd:5f:99:60:35:e5:0d:a7:84:
85:35:5d:03:56:34:44:7d:e1:ee:ed:96:34:51:c1:21:04:d4:
ad:8c:d4:33:db:7d:85:c6:00:de:ea:31:16:3a:b8:b6:a5:3c:
5b:bc:86:e2:49:22:98:01:90:9f:43:d0:71:63:b9:45:d0:65:
c7:51:c3:ab:ed:5a:a7:8b:7e:15:cf:c3:da:99:ec:8c:7d:26:
a6:0c:18:07:78:71:cc:9e:73:72:8a:ae:77:67:36:6b:c6:6d:
ef:51:2c:fb:be:b9:48:6d:a4:70:37:09:4a:0f:fd:4e:e4:91:
c6:31:25:9d:20:5e:dd:3a:84:36:2b:58:d0:0f:80:95:51:44:
2c:1e:b4:d0:c8:d4:b0:de:f0:d5:28:09:d7:aa:85:aa:10:87:
00:6f:59:86:f5:d8:50:fd:e4:67:ec:7a:4a:2a:e5:41:6a:49:
a9:af:ac:c2:11:e1:fc:51:1c:ad:e7:12:ac:60:0b:66:1a:72:
ad:09:d0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:59 2026 by rpki-client