
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json)
Hash identifier: TACP9mCinWPvszRj/fgn5aLQPtNJkNN4gJKtkLNRVuA=
Subject key identifier: E0:8F:60:BA:08:CA:C9:9D:EC:DF:27:C0:E9:1E:45:06:57:05:F8:85
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0C82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
Manifest number: 0C1C
Signing time: Fri 18 Sep 2026 18:55:37 +0000
Manifest this update: Fri 18 Sep 2026 18:55:36 +0000
Manifest next update: Fri 25 Sep 2026 18:55:36 +0000
Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: NpQ5FcKRrd0HDFAjKT7dky8TQ2kYSeCC1ZNWkADbf2w=)
2: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: w3uOUeW/FatR7+z01Z2HvN2GffooWt+q9F95kyByhRI=)
3: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: /0M2k5A9D07fvk6xgy1fvur/gcuYQ+EgRMIrK3fZt+g=)
4: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: FSDVyAO7ku9OlFpBuuGsvn65dxJw/I6Sh44G8o9Hakw=)
5: 12BE5F962DA511F1AB5ACB70A2833773.roa (hash: R5zAoICV1Khp7ZSKr9zmuPdSSnluyaeLcZGrxGttx1M=)
6: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: FHAY3Htwxch2FFTA3f0b/wxleH7q9MS7UbS2oOU+tmc=)
7: A30B6882B3DE11F0B2D83330C4F9AE02.roa (hash: EMvRGH6droakZyNHqPZRY7LB/x9Bj+nru0EHjbDXrOA=)
8: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: foBCGIBz0chOGLnj+WF0iY+sCw/0L3oyHMk8x+gdNIk=)
9: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: x3tN005H61P1/+QDbepYrTGCbgsygiXxYL2KOeh1kJw=)
10: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: C1lJZU5Iy+mNJL9oPivtxsIEriNMccsRSKnbZ5DSjo4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3202 (0xc82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Sep 18 18:55:36 2026 GMT
Not After : Sep 25 18:55:36 2026 GMT
Subject: CN=6aad8928-5e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a5:d5:e6:8e:ad:6e:56:d6:8c:16:39:79:7d:
40:63:14:fd:80:43:f6:b0:f7:ec:98:2e:ff:73:5c:
87:e4:d1:7b:bf:c1:4a:61:d0:55:1f:38:cd:8a:84:
2d:b6:12:27:a1:dc:86:e3:1c:35:3a:01:87:f0:ab:
71:66:1c:23:ca:9c:bf:2f:d6:ad:1f:e4:cf:68:88:
ce:d2:22:27:fa:01:51:8e:95:f2:45:3d:31:1c:57:
28:34:11:96:0a:2c:51:d5:3e:12:e2:b0:ab:f8:fe:
a3:b3:8f:86:b5:af:6a:4e:5a:8d:96:fc:3b:1d:34:
8c:f0:c5:11:c6:9e:c8:67:e5:2e:32:a3:11:a5:d9:
f3:eb:a6:ca:21:1d:ef:a5:05:23:c7:ff:23:a3:de:
03:0c:30:3c:2d:a1:d8:c1:89:9a:b6:fd:7e:50:9d:
6a:23:91:f2:50:a6:ce:d1:de:a8:48:5c:35:53:38:
c1:4a:15:6d:db:dd:5d:b3:17:ff:6b:ff:02:0b:24:
bd:62:27:ad:00:f4:d3:49:a3:eb:46:50:fd:ea:fa:
8c:d6:1c:ea:92:33:31:43:c3:70:0d:ec:05:d2:71:
7e:2c:5f:c5:c5:c7:70:c5:d2:4c:e4:e6:dd:41:ff:
d1:e0:2b:65:82:4b:73:ff:9a:c9:02:30:37:3c:5b:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8F:60:BA:08:CA:C9:9D:EC:DF:27:C0:E9:1E:45:06:57:05:F8:85
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1c:2b:49:c1:95:04:a2:dc:b8:5c:9d:7f:2f:cc:bb:e5:fd:
9b:1c:f3:bf:18:d7:54:42:8c:e0:2d:0a:49:87:3d:18:f5:39:
05:cf:1b:ab:8d:6a:7c:bc:6a:0d:a5:69:c4:2c:33:44:11:86:
ca:6c:81:58:83:99:c4:84:70:e3:3d:28:e5:2d:7d:9d:64:fb:
72:de:a0:3e:55:d5:e0:cc:af:47:7a:ab:a1:d1:f5:3d:c6:11:
bc:ea:f4:e6:34:d4:66:f6:e3:19:11:23:fa:39:11:c1:f3:84:
5f:81:b1:da:04:9d:6c:e5:ff:02:16:37:e7:92:27:99:71:94:
3e:27:c0:cb:9c:b9:b6:de:3b:b6:b6:9a:9d:ec:13:58:0c:b4:
d5:09:36:a5:2e:bc:6f:2c:d9:7d:f3:a3:da:6e:57:e8:d9:9b:
d6:ce:a1:cb:83:b3:d1:8d:9f:b4:17:da:34:49:29:81:ac:ba:
5d:94:eb:ee:ad:52:fe:aa:63:a3:f5:17:d1:46:90:c9:59:11:
14:d5:46:5c:10:16:51:58:33:ee:84:b1:3b:4f:69:9b:eb:c9:
d0:d6:f3:55:92:9e:88:13:6d:0b:f7:a1:45:7e:25:1e:ef:01:
f2:f2:46:3c:3f:8a:16:27:3d:d3:ad:6d:bd:a5:f3:92:ca:4a:
55:a0:11:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:51:27 2026 by rpki-client