
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
File: wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json)
Hash identifier: qnPSRS1BxW5Ypovl8FP0s3EaqX+hGO8t8IQp2sPvxs0=
Subject key identifier: B3:B3:E2:DB:F7:C5:DF:0B:5F:09:10:82:54:98:A6:0C:A9:A8:AD:7B
Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72
Certificate issuer: /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272
Certificate serial: 0490
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
Manifest number: 0489
Signing time: Sun 20 Sep 2026 23:49:05 +0000
Manifest this update: Sun 20 Sep 2026 23:49:04 +0000
Manifest next update: Sun 27 Sep 2026 23:49:04 +0000
Files and hashes: 1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: 0XL+/SLwUHKSotsFegsotM4tvWPmA1A4ajh6pAG08K0=)
2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: r355JtbsChvpKdcC5nW7ewoVZ03Rj0iVIbKKdmTNzQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl
rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1168 (0x490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91365B9, serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272
Validity
Not Before: Sep 20 23:49:04 2026 GMT
Not After : Sep 27 23:49:04 2026 GMT
Subject: CN=6ab070f0-4f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:51:ca:fe:14:bf:61:21:2c:d8:3d:26:bd:
07:a6:7f:72:f5:4a:64:a2:a7:04:1b:f5:5b:48:53:
13:af:38:86:d3:1d:9c:7d:33:01:84:b2:a7:16:3f:
78:4a:8b:8a:f3:b5:80:56:95:38:9e:ce:db:db:62:
6e:65:f0:07:1c:15:73:cd:94:a6:27:5c:f6:f2:7f:
c0:ac:23:9f:0e:c7:a4:c6:a3:a9:a9:a0:3e:58:ba:
2c:c5:df:8a:cf:95:c3:31:09:41:b4:f2:fa:7c:16:
33:cf:04:da:e6:2d:3e:fa:b6:f6:f8:55:67:6f:f3:
78:44:1b:40:74:d1:fb:ec:0f:6f:c9:8c:fe:e3:32:
95:9b:a4:52:40:67:17:b4:93:5d:a5:61:d0:87:4a:
3b:b1:e9:b6:dd:11:2e:38:c2:c6:f7:ce:58:6f:f3:
3e:99:37:0e:33:97:87:2d:3a:23:c1:95:bc:db:02:
77:d4:02:4e:9b:e0:31:40:75:a4:e2:c1:ba:ce:ef:
e2:d8:bf:1c:2f:ac:fb:e0:f0:81:f8:3f:8b:76:d6:
35:5d:27:07:73:38:8c:ee:8d:d0:b0:9a:a9:ef:a1:
bc:d3:c3:fb:a2:df:0e:6e:99:01:b5:2f:e4:57:f0:
bf:7f:7f:d9:64:61:70:f9:f7:f6:94:b9:a8:ca:a5:
8a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B3:E2:DB:F7:C5:DF:0B:5F:09:10:82:54:98:A6:0C:A9:A8:AD:7B
X509v3 Authority Key Identifier:
keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:09:7c:26:cc:c5:01:53:c5:9f:c9:c8:61:32:47:dd:96:2c:
d1:fb:51:94:e3:2c:dc:81:d9:f2:c8:17:5d:0a:0d:4d:74:1c:
03:0d:99:ac:d0:a0:c7:73:b6:f2:c4:e3:4e:a3:04:c0:db:01:
0c:88:ba:85:7a:31:4b:fe:72:ab:3b:72:43:cd:f5:99:57:65:
41:2f:04:d8:8c:d4:74:9d:91:27:68:c4:98:a7:50:a2:77:d6:
a5:8c:52:4a:b3:dd:14:63:8c:0f:61:28:d0:27:9f:82:03:68:
f1:35:24:fc:88:18:e8:21:0a:83:4d:35:ce:ab:1b:fb:3c:fb:
f1:35:42:b4:c4:7b:00:fd:72:13:13:5d:89:28:d9:86:eb:f0:
e8:fe:21:26:14:23:08:9f:28:89:71:0d:c4:db:b6:9a:01:b2:
d0:fd:c4:62:14:b2:42:10:81:6f:5a:f8:aa:89:fc:59:9d:91:
ea:ed:7a:d6:58:e9:42:61:90:3e:ee:40:6d:34:a2:f9:77:b3:
40:6e:9b:b2:f5:98:6a:2f:b4:64:e6:26:d7:33:84:20:00:bb:
3e:f8:8f:0c:ff:e3:b7:6e:63:c9:a3:06:0d:4b:b2:4b:ce:af:
90:66:f7:2d:a2:d5:fc:46:b7:bf:fe:3a:4f:b7:6b:a9:bc:2d:
ce:8a:6b:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY1QjkxMTAvBgNVBAUTKEMyQTJFQjRDRjkxMDI3NzhBNDJFMTVDQ0QyMEE1ODRF
RENFREMyNzIwHhcNMjYwOTIwMjM0OTA0WhcNMjYwOTI3MjM0OTA0WjAYMRYwFAYD
VQQDEw02YWIwNzBmMC00ZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz3xRyv4Uv2EhLNg9Jr0Hpn9y9UpkoqcEG/VbSFMTrziG0x2cfTMBhLKnFj94
SouK87WAVpU4ns7b22JuZfAHHBVzzZSmJ1z28n/ArCOfDsekxqOpqaA+WLosxd+K
z5XDMQlBtPL6fBYzzwTa5i0++rb2+FVnb/N4RBtAdNH77A9vyYz+4zKVm6RSQGcX
tJNdpWHQh0o7sem23REuOMLG985Yb/M+mTcOM5eHLTojwZW82wJ31AJOm+AxQHWk
4sG6zu/i2L8cL6z74PCB+D+LdtY1XScHcziM7o3QsJqp76G808P7ot8ObpkBtS/k
V/C/f3/ZZGFw+ff2lLmoyqWKjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOz4tv3
xd8LXwkQglSYpgypqK17MB8GA1UdIwQYMBaAFMKi60z5ECd4pC4VzNIKWE7c7cJy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjVCOS83NDVENzcwMjlF
QjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUozaWtMaFhNMGdwWVR0enR3
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dxTHJUUGtRSjNpa0xoWE0wZ3BZVHR6dHduSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjVCOS83NDVENzcwMjlFQjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUoz
aWtMaFhNMGdwWVR0enR3bkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtgl8JszFAVPFn8nIYTJH3ZYs0ftRlOMs3IHZ8sgXXQoNTXQcAw2ZrNCgx3O2
8sTjTqMEwNsBDIi6hXoxS/5yqztyQ831mVdlQS8E2IzUdJ2RJ2jEmKdQonfWpYxS
SrPdFGOMD2Eo0CefggNo8TUk/IgY6CEKg001zqsb+zz78TVCtMR7AP1yExNdiSjZ
huvw6P4hJhQjCJ8oiXENxNu2mgGy0P3EYhSyQhCBb1r4qon8WZ2R6u161ljpQmGQ
Pu5AbTSi+XezQG6bsvWYai+0ZOYm1zOEIAC7PviPDP/jt25jyaMGDUuyS86vkGb3
LaLV/Ea3v/46T7drqbwtzoprsg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:59:14 2026 by rpki-client