
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft
File: wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft (raw, json)
Hash identifier: 8KTQG5fux9ZiWzjfMTxrU0hHFDaC3Qarza4FWiowORg=
Subject key identifier: 2D:4D:5A:6B:67:93:B3:28:52:2C:C5:32:4A:FA:4D:C3:D3:F2:18:41
Authority key identifier: C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A
Certificate issuer: /CN=A917FED9/serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A
Certificate serial: 0263
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft
Manifest number: 025C
Signing time: Fri 25 Sep 2026 02:17:36 +0000
Manifest this update: Fri 25 Sep 2026 02:17:35 +0000
Manifest next update: Fri 02 Oct 2026 02:17:35 +0000
Files and hashes: 1: wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl (hash: ZVxGswvwy2qtMmCox3QXodRJZbEy4B3vaLK9Z6cKHsg=)
2: 32503D0625FC11EE9A575E36C4F9AE02.roa (hash: ix29bsGlLpd8X3I5lYtgyW8aauIK9oofMObGbc/Vtng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl
rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FED9, serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A
Validity
Not Before: Sep 25 02:17:35 2026 GMT
Not After : Oct 2 02:17:35 2026 GMT
Subject: CN=6ab5d9bf-bad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fd:02:fb:80:cc:5f:0a:a0:d6:2b:f6:10:f3:
b2:bf:e8:15:bf:df:20:05:09:6e:23:33:fc:26:5e:
a1:1e:53:fe:13:4d:b1:e4:9b:4f:22:29:97:ad:28:
dc:ca:09:b8:60:5e:2a:b8:c2:7d:42:37:7e:18:5b:
a1:75:01:a1:71:3a:a6:16:0f:30:c8:97:cb:6c:df:
59:ca:61:a2:81:b4:ab:55:c8:28:c4:4f:6e:ac:d7:
b0:50:91:0e:e7:75:3b:0e:d2:82:46:61:0e:e0:85:
7d:d0:37:57:db:88:3c:d6:03:aa:19:f1:19:5a:35:
3c:4b:e8:cf:e8:9a:de:46:ff:c8:8d:7b:8c:2e:30:
bc:1d:64:53:a6:26:c2:2d:88:c2:f8:54:92:88:00:
95:39:6f:ac:6f:b1:77:2c:8c:6a:87:9b:d3:aa:ca:
6e:0f:6c:96:00:3a:af:15:d2:f9:09:bd:4b:a4:77:
f1:26:aa:cd:a0:fb:5e:88:00:42:cc:a7:1a:61:2c:
71:ad:9d:e3:64:13:4a:eb:16:20:d4:48:bb:f3:af:
08:f6:be:f2:67:1d:ad:aa:cf:ee:9b:b2:84:3d:72:
f2:c5:4c:d0:4d:04:b4:5b:64:b1:11:1b:61:1f:8d:
b2:e5:c2:61:a5:26:04:c6:41:56:8a:f9:c3:23:db:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4D:5A:6B:67:93:B3:28:52:2C:C5:32:4A:FA:4D:C3:D3:F2:18:41
X509v3 Authority Key Identifier:
keyid:C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:08:51:b5:55:24:99:a7:0d:f8:bb:ed:a1:a4:45:88:8b:7f:
82:0d:c4:4f:5d:e5:a1:e9:2e:05:eb:6e:91:ca:d5:04:c8:8e:
83:18:c9:fc:de:6d:da:0a:31:da:ff:fc:01:8c:15:f1:d2:75:
35:68:3a:66:f8:0f:d8:30:eb:f3:6e:22:1f:ba:1c:2c:cf:ec:
0a:4d:c9:72:87:d8:5f:77:58:24:16:73:6e:9a:3e:24:81:6e:
b4:76:7f:c4:61:5d:fa:8a:2d:17:b7:78:38:c2:f8:33:1b:0e:
8e:a8:57:80:d5:9c:8f:b0:98:bc:5b:b4:8d:10:18:1e:6d:7e:
b8:e9:54:86:4f:98:a9:43:6d:32:15:b6:27:5e:c9:e0:2b:48:
68:08:bb:3b:5c:bf:a4:5b:bd:3d:a3:3b:1f:1e:f4:df:c8:b2:
6a:2c:6a:3e:2a:58:cd:6a:db:4a:ec:85:1b:b5:e7:9b:d1:70:
73:18:51:3a:87:01:a7:88:a3:a2:13:3a:80:f2:f2:cd:37:e1:
93:d0:49:86:23:d6:be:dc:cc:55:55:c3:f1:98:b1:41:97:a7:
b5:49:3c:03:71:ad:60:72:1c:2b:b2:d4:e5:3d:29:94:81:97:
05:49:9f:7b:ed:ef:af:1d:f5:ee:0c:d0:68:f9:68:14:ac:fa:
7d:aa:66:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0ZFRDkxMTAvBgNVBAUTKEMxM0E5RjYyQTE0QjA1MTAzQzVBQzU3NTZGOTc2NTky
ODg4QTQ5NUEwHhcNMjYwOTI1MDIxNzM1WhcNMjYxMDAyMDIxNzM1WjAYMRYwFAYD
VQQDEw02YWI1ZDliZi1iYWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5/0C+4DMXwqg1iv2EPOyv+gVv98gBQluIzP8Jl6hHlP+E02x5JtPIimXrSjc
ygm4YF4quMJ9Qjd+GFuhdQGhcTqmFg8wyJfLbN9ZymGigbSrVcgoxE9urNewUJEO
53U7DtKCRmEO4IV90DdX24g81gOqGfEZWjU8S+jP6JreRv/IjXuMLjC8HWRTpibC
LYjC+FSSiACVOW+sb7F3LIxqh5vTqspuD2yWADqvFdL5Cb1LpHfxJqrNoPteiABC
zKcaYSxxrZ3jZBNK6xYg1Ei7868I9r7yZx2tqs/um7KEPXLyxUzQTQS0W2SxERth
H42y5cJhpSYExkFWivnDI9uQiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC1NWmtn
k7MoUizFMkr6TcPT8hhBMB8GA1UdIwQYMBaAFME6n2KhSwUQPFrFdW+XZZKIikla
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVEOS9DMEJBOEFBRTIy
MUIxMUVFQTUwOEQ2MkVDNEY5QUUwMi93VHFmWXFGTEJSQThXc1YxYjVkbGtvaUtT
Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dUcWZZcUZMQlJBOFdzVjFiNWRsa29pS1NWby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RkVEOS9DMEJBOEFBRTIyMUIxMUVFQTUwOEQ2MkVDNEY5QUUwMi93VHFmWXFGTEJS
QThXc1YxYjVkbGtvaUtTVm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfQhRtVUkmacN+LvtoaRFiIt/gg3ET13loekuBetukcrVBMiOgxjJ/N5t2gox
2v/8AYwV8dJ1NWg6ZvgP2DDr824iH7ocLM/sCk3JcofYX3dYJBZzbpo+JIFutHZ/
xGFd+ootF7d4OML4MxsOjqhXgNWcj7CYvFu0jRAYHm1+uOlUhk+YqUNtMhW2J17J
4CtIaAi7O1y/pFu9PaM7Hx7038iyaixqPipYzWrbSuyFG7Xnm9FwcxhROocBp4ij
ohM6gPLyzTfhk9BJhiPWvtzMVVXD8ZixQZentUk8A3GtYHIcK7LU5T0plIGXBUmf
e+3vrx317gzQaPloFKz6fapmZQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:50:39 2026 by rpki-client