
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json)
Hash identifier: ZrMPjOKhbwjG5e2aGgXT66fp8y2NIeg/kjlWIRjTwxU=
Subject key identifier: FF:42:94:B5:A8:55:18:1B:24:2E:44:D3:31:B8:91:F0:75:11:5A:C5
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0C0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
Manifest number: 0BAF
Signing time: Mon 02 Mar 2026 01:23:52 +0000
Manifest this update: Mon 02 Mar 2026 01:23:50 +0000
Manifest next update: Mon 09 Mar 2026 01:23:50 +0000
Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: fY79lY4CqYdDx8qF2MVcSws3o0IKev7DLdvUdyG8O/M=)
2: A30B6882B3DE11F0B2D83330C4F9AE02.roa (hash: N1gpxY1Qmu9TXM+UsBN7G4a19/a7C7ui0EX50hEj8GE=)
3: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: zmT4huKs28Qo4c8cgWG60cK/QVsyyHKfdVgREmP58ec=)
4: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: M3o2rbRfq9TsNUJCS4ZbyowL8r51/zxaOuBDAztIJG0=)
5: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: vQQV0G1oE2RonZYgcaeEDVU+ZU9gw3CgzN6h3bxF4OI=)
6: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: uKOTbNBLAeF55zkPNPreuMeOCu0FLlIbOK5YGifFFXY=)
7: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: OeaYPNBUtTPvim9HMxt2o8TBmHEZXyqHblAeC5l7mS0=)
8: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: RUrsKpZBh2bHefYwp4oJVAW6UCst5icc8lXVG39cTUM=)
9: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: OT9brcicmctK+apt1pWBL6MJ8CCpv1ESq3NW6ajmaY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3082 (0xc0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Mar 2 01:23:50 2026 GMT
Not After : Mar 9 01:23:50 2026 GMT
Subject: CN=69a4e6a8-059b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:ad:7a:df:0a:5c:73:43:1b:9a:00:6c:ba:
52:42:92:56:eb:43:26:6e:23:4a:02:71:6a:b8:73:
95:9d:69:c1:98:1c:b4:21:20:af:11:94:db:74:cb:
58:e1:61:cc:86:b5:ee:cb:99:0b:a8:e3:6b:6d:51:
a5:65:b1:45:c2:c6:ab:70:b8:dc:6e:12:39:d7:62:
d7:8c:44:31:34:d1:b0:77:b7:24:0c:a4:f2:73:0f:
ab:18:8f:9d:c3:2e:48:61:bd:e2:5d:61:8f:79:85:
14:25:e1:29:b2:46:66:49:4c:e5:98:7d:4f:2e:32:
20:9f:ed:7a:dd:15:9f:0a:74:18:b6:65:18:20:77:
52:2c:c3:33:fb:4b:a5:9a:37:0b:3b:01:a9:13:ed:
99:ff:13:be:dd:61:f2:c8:80:d4:e2:7b:1c:38:73:
50:3c:13:e6:05:1e:b2:d9:84:a0:17:24:34:16:a7:
eb:df:7a:22:f5:0c:62:ac:58:04:0d:6e:53:68:bf:
31:8d:96:ea:21:94:d5:a0:3b:d2:c0:2f:34:14:b1:
fe:2c:a4:74:b0:ad:64:14:ae:55:38:e7:72:ac:e0:
bc:d1:3e:40:fa:04:69:c0:33:81:00:2c:3e:f9:40:
21:2a:28:5b:c8:45:a6:16:0e:30:5f:c2:21:e7:68:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:42:94:B5:A8:55:18:1B:24:2E:44:D3:31:B8:91:F0:75:11:5A:C5
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:22:53:c4:3f:b8:8f:bd:1a:13:f8:4a:8b:61:8a:22:c6:91:
f3:17:8b:26:e2:42:76:ad:47:59:69:a8:3e:7f:4d:bc:70:35:
3d:1d:15:b9:47:4b:4d:5c:c5:c2:bc:f5:6b:13:e8:33:7e:9a:
46:83:88:bd:3c:85:f6:79:f5:7e:ce:5f:60:4b:cd:10:6e:f5:
51:8b:4b:a4:ca:e8:96:23:0f:32:2e:97:0f:82:ca:47:df:70:
df:31:f1:26:40:8a:dd:11:d6:17:07:72:7e:9e:5c:a8:1c:c7:
af:a7:07:cf:44:1f:b5:b3:0b:a2:b3:72:0a:f0:f3:55:2a:77:
6c:8f:a6:bd:3d:91:76:b3:20:b1:e6:65:6a:28:20:aa:22:88:
a1:a0:cc:be:25:5b:fa:e9:56:82:73:c1:5f:99:f4:5f:c5:6d:
92:21:f2:26:a1:13:f7:8d:b5:e9:c1:eb:ec:6e:df:a6:5a:7e:
4f:a2:d1:6e:e9:6e:85:1b:2a:7b:14:88:d8:24:61:83:e3:22:
dc:24:e4:15:cc:55:5f:04:f6:75:8d:c0:3d:43:75:e9:4b:62:
93:c9:74:01:01:db:36:86:78:55:a0:07:34:6f:b5:1d:9c:88:
ce:2c:28:25:50:38:b3:c8:ac:f1:e7:b1:ec:e7:9f:9f:f9:1e:
58:1a:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:13 2026 by rpki-client