
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
File: W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json)
Hash identifier: /hgIVC8/bjexE9rO35hyhq5tJR6gsMc3xZvi/hX3P9U=
Subject key identifier: C5:4E:C0:2A:58:CD:9B:6E:17:BE:00:77:A5:58:9F:D8:5D:53:2E:DD
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial: 0431
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
Manifest number: 0421
Signing time: Sun 11 Oct 2026 00:22:07 +0000
Manifest this update: Sun 11 Oct 2026 00:22:07 +0000
Manifest next update: Sun 18 Oct 2026 00:22:07 +0000
Files and hashes: 1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: oKYPC9AjLWDUZ96zW9X7n0WfKs0yXATcAa4IkIRVx3k=)
2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: hZYrCpklqd9PCFPEadJ7jkWv+ryJ31eleAk679Pe1vI=)
3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: jrQWyurRzRFwiCnUirXmO3JOWscdHg4B5w17/r4/CUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 00:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1073 (0x431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Validity
Not Before: Oct 11 00:22:07 2026 GMT
Not After : Oct 18 00:22:07 2026 GMT
Subject: CN=6acad6af-49d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:4f:66:78:9e:1d:4a:7c:a9:b4:ba:ac:64:
4e:92:a8:66:ee:d1:f6:65:b4:59:3f:3d:46:b0:2c:
77:14:f9:d4:f8:4d:48:80:00:40:73:a9:9d:79:8a:
d9:bd:37:b4:6a:29:1b:30:b2:63:cc:75:a5:fb:31:
4a:71:42:5a:5d:31:75:a3:38:e4:93:62:58:36:20:
bb:99:b5:5f:12:dc:fb:28:28:20:85:1f:27:4c:ab:
78:e7:32:6e:e6:36:67:2d:17:d0:e4:cc:b4:6b:a5:
bb:5a:33:ca:46:68:c7:ee:9a:cd:b8:eb:1f:17:69:
79:8a:e8:43:39:88:2c:88:b5:85:91:12:cf:d9:00:
b4:17:de:5c:37:a0:72:14:41:07:e3:14:5e:64:d4:
31:96:36:ed:4b:68:cc:ec:16:d4:db:08:9a:78:bb:
24:54:97:26:db:ab:05:af:23:fb:0c:2a:00:81:ab:
e2:a0:6d:c1:f1:dd:66:bd:5f:5b:8e:02:56:31:43:
4b:3f:5a:8a:d7:4f:98:45:b2:0f:db:e6:6a:70:3b:
9a:e3:86:9d:05:83:bd:a7:e7:4a:d5:c8:d1:fe:5f:
3a:ff:fd:44:0b:9d:4c:5a:e6:79:0b:2e:4b:a2:5b:
3d:68:8e:b8:44:93:de:32:cc:be:d3:c8:71:ac:0f:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4E:C0:2A:58:CD:9B:6E:17:BE:00:77:A5:58:9F:D8:5D:53:2E:DD
X509v3 Authority Key Identifier:
keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:f6:00:3f:26:55:f7:d2:8c:53:4e:cb:dc:8e:66:d4:2e:d8:
54:74:a4:e8:a5:83:ee:3a:77:34:93:1a:0d:b2:cd:d9:e8:8a:
ee:ae:ef:d6:d5:66:d5:0f:3e:8f:7e:3a:dc:40:29:de:36:a8:
b1:6b:47:23:98:9c:34:5c:2e:7a:69:79:48:88:01:b0:bc:c7:
12:04:df:00:da:a9:1e:a1:f3:1c:c2:aa:39:be:23:49:33:5c:
04:f5:2a:c1:66:45:1f:a1:56:78:2f:9f:83:2e:39:aa:09:c6:
8f:7b:2c:25:f9:ef:c8:80:31:43:1a:6c:29:a7:c9:3d:c3:ca:
76:62:68:60:81:59:55:2f:71:f3:fa:20:69:64:2d:78:ef:13:
18:58:55:39:6d:b0:5b:23:82:8d:c3:98:57:c8:80:57:79:83:
4f:8d:74:7a:42:fd:68:00:f8:99:d4:1b:a1:74:f6:7c:a6:ec:
51:29:e1:66:f1:ac:45:f8:21:32:75:ca:e0:c0:b8:78:ec:ef:
d8:6b:5c:08:bd:5a:3c:c0:3c:1c:d3:47:79:9f:9c:0c:c4:91:
dd:38:46:3d:44:9a:7d:82:60:62:6a:6a:a5:4c:3b:04:03:99:
7d:92:ca:14:d8:9f:92:e6:86:a0:26:dd:e7:1b:42:f0:db:17:
1c:ed:d7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 14:56:43 2026 by rpki-client