
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
File: WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json)
Hash identifier: i2ZjMTczxOTTijR9WtIVh62KBvKafuEDg/qeh0M37kg=
Subject key identifier: 32:CD:29:D2:55:DD:5C:46:55:69:94:BA:BA:CE:7D:A9:93:BB:33:B0
Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Certificate serial: 0273
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
Manifest number: 0269
Signing time: Mon 21 Sep 2026 02:16:50 +0000
Manifest this update: Mon 21 Sep 2026 02:16:49 +0000
Manifest next update: Mon 28 Sep 2026 02:16:49 +0000
Files and hashes: 1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: +Cmn82mz7OazldJwcaEdaeovkKcsp/AtRVGxdmqL64U=)
2: 7893F3DC0B8511F086B2C121C4F9AE02.roa (hash: 9KBHLvNc1i33Xdbf2e61LIwQjlRB8zXSVmEA1MYeogM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl
rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 627 (0x273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Validity
Not Before: Sep 21 02:16:49 2026 GMT
Not After : Sep 28 02:16:49 2026 GMT
Subject: CN=6ab09392-865f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:e3:f2:eb:e6:98:89:5b:89:4f:52:05:95:
e7:06:b1:e1:ae:64:d1:f6:e7:e0:06:98:3c:c4:fe:
01:51:b8:d2:78:73:ec:1b:7f:de:c3:a7:7b:b7:78:
a7:af:65:72:20:e4:81:65:ab:2a:c4:95:b7:05:dc:
50:e9:b8:0f:78:08:29:bb:31:2d:2b:d2:ce:6c:2d:
8a:52:85:7a:00:2d:5d:4b:b0:3e:a7:09:1b:bf:85:
88:20:f8:1d:82:1d:35:45:6d:0c:72:84:6d:30:20:
00:25:e8:6b:de:99:5c:33:23:69:11:d6:ba:a0:6d:
1e:7b:e2:b6:1c:e6:cf:99:fe:fe:cf:51:a7:35:67:
ec:36:3e:41:fe:e1:fe:23:b7:81:bb:1d:81:47:6f:
e7:dd:00:cd:02:43:2f:4f:d8:67:f3:37:f5:71:5c:
0f:e2:2e:90:84:cd:43:1b:2d:2a:ee:c5:c4:9f:b8:
f3:c5:3a:f9:c2:71:e5:3d:ee:5f:72:11:b0:91:e5:
39:23:c8:73:2d:57:80:82:0d:f2:4f:c9:35:7f:66:
bf:7d:f2:28:1f:99:ee:e7:96:ed:fa:83:7c:a2:0f:
f5:34:ad:75:07:aa:37:b0:22:be:cb:2f:df:9d:29:
f0:4b:fc:c6:46:a3:a8:a9:86:df:6f:89:8d:3c:e7:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CD:29:D2:55:DD:5C:46:55:69:94:BA:BA:CE:7D:A9:93:BB:33:B0
X509v3 Authority Key Identifier:
keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:b8:a7:16:0c:1b:cb:d4:89:d0:dd:58:de:f0:4e:e6:94:2d:
74:53:b4:0d:dc:0d:03:6f:ec:16:1a:9b:0d:9e:ec:0c:1c:19:
43:99:61:ac:97:51:c0:c9:93:99:bf:aa:74:69:dc:ec:a3:6a:
3f:2c:f5:c2:8c:d3:44:8e:6d:ed:98:1c:e0:1e:06:9c:13:7f:
c9:80:cc:07:bc:48:37:c4:83:0b:dc:ef:41:79:12:6a:62:96:
9b:b5:12:60:83:66:3b:29:45:36:5c:10:99:a2:81:0a:ed:0c:
b8:d3:fc:fa:88:2c:1b:cc:af:9d:a3:c2:5f:41:d8:c6:5b:e9:
39:75:67:9b:6e:86:3a:7b:7e:03:88:25:28:65:0a:93:0c:d3:
5a:a0:5b:42:7f:dd:19:a0:a3:48:1b:24:16:ac:25:81:f1:96:
e9:da:7b:bb:bc:76:d7:fe:bd:e6:49:5f:13:6d:31:6d:90:66:
d6:55:43:78:72:40:48:14:8c:49:33:e0:3a:19:25:3f:31:25:
20:ac:0a:20:a7:cc:2b:00:0e:1f:71:c4:16:7b:ab:0e:f8:b3:
1c:c6:1d:3a:df:26:02:61:3a:14:02:81:d9:0a:81:37:f4:f6:
c7:b8:7b:6d:28:fa:7e:4c:0a:fb:c3:ad:e9:a1:5b:3a:06:3f:
ea:ea:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:09:52 2026 by rpki-client