
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json)
Hash identifier: yUemPGOolJdyit9K6VNFHKt2+mHBw9J22s9yAU7msZY=
Subject key identifier: 09:C4:B4:81:C6:E1:55:F7:D8:34:A8:56:63:56:4D:04:58:BD:39:D8
Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Certificate serial: 0672
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
Manifest number: 0669
Signing time: Sat 26 Sep 2026 22:41:16 +0000
Manifest this update: Sat 26 Sep 2026 22:41:16 +0000
Manifest next update: Sat 03 Oct 2026 22:41:16 +0000
Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: seCxIeuZmaiFC13T7teZDTiEsUgFgmQGhtRM98Tbzek=)
2: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (hash: hM4BPVux9YYhFTFUn31M+wA3pgU5Mg1/NkcXZA6rsfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 22:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1650 (0x672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Validity
Not Before: Sep 26 22:41:16 2026 GMT
Not After : Oct 3 22:41:16 2026 GMT
Subject: CN=6ab84a0c-f767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:a7:43:30:db:f7:46:af:3c:44:f7:46:43:
60:65:22:5e:19:95:de:6f:58:c2:24:e3:2b:8c:16:
fe:f6:47:00:e5:dd:2b:1b:b7:59:c1:5b:6d:ce:0e:
85:4b:72:81:19:76:d4:b1:fc:a0:cf:e9:13:3d:a9:
67:54:3e:0b:02:1f:44:c5:ac:43:23:af:f9:bd:0f:
e7:09:73:df:8d:f4:03:e8:4b:4a:75:e9:35:a1:71:
90:7f:95:3a:34:9a:a4:46:a8:bf:2a:7b:31:45:ad:
76:56:8a:dd:59:e8:34:54:d7:fc:28:9c:4e:93:c2:
f4:87:22:de:2e:f9:68:d4:0a:9a:68:e1:a9:50:5a:
49:5f:a7:3f:64:2c:04:9c:14:cc:7a:43:5a:2e:86:
c0:cc:c1:e9:54:d0:87:67:63:a8:8d:d5:3a:ca:04:
7b:8f:ff:72:fa:61:d8:d4:8e:e3:18:df:73:b2:71:
4c:de:45:aa:91:25:cb:98:aa:7f:90:33:d4:1e:33:
3e:77:14:d9:3c:cb:19:78:36:88:1b:ec:43:17:c2:
47:28:9b:a5:82:5e:a9:ec:d9:6d:c3:1a:af:f4:4d:
36:33:e0:6c:4d:24:8c:3d:1d:17:6a:5a:f2:f7:27:
f7:c1:38:a6:bf:4f:e9:26:df:3c:5f:51:9d:1d:62:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C4:B4:81:C6:E1:55:F7:D8:34:A8:56:63:56:4D:04:58:BD:39:D8
X509v3 Authority Key Identifier:
keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:b5:0c:7d:5f:96:8a:5f:5a:55:9f:14:a4:cd:e1:6e:1b:a6:
47:43:e0:13:26:c5:59:21:49:18:91:4d:47:56:cf:69:cc:3a:
70:54:71:76:f2:1d:50:98:e3:b4:f6:d4:3a:ac:a4:cb:11:54:
1c:93:b7:dc:8b:ce:ad:42:91:48:2d:f5:7e:4d:b3:fd:48:68:
30:75:4e:40:d1:4b:1d:20:e4:91:18:b9:62:6f:28:ef:b1:79:
f8:9f:bc:82:e4:a0:dd:b6:23:f9:7a:05:50:b6:13:5d:d5:02:
a1:3d:d1:b1:71:dc:16:78:86:0e:af:10:51:f4:0a:c8:ed:08:
09:95:8f:b8:03:88:ad:8a:d6:82:6a:3b:f3:41:5e:b8:01:df:
18:cf:a5:56:30:29:bd:99:64:e5:64:20:ad:17:3b:c7:c6:42:
d4:96:4a:48:01:d5:6b:33:8c:4c:5d:74:23:51:07:9d:67:95:
10:76:4a:85:e8:5a:33:1f:9e:bc:46:99:52:b4:03:2d:c3:93:
85:1e:a7:61:55:42:d4:59:cc:df:9a:3c:a7:8c:da:46:fc:7d:
38:de:64:a4:bb:55:b5:80:8f:0a:ca:29:ad:35:93:f9:8a:b2:
e6:b8:32:c6:e9:9a:38:a3:35:49:fc:5c:e1:cb:84:44:c7:8a:
4c:e3:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:28:52 2026 by rpki-client