
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
File: vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft (raw, json)
Hash identifier: IoUkH+QZIzw1WyQ29F7nbeRGcz3yi8NVbke5fSwncRg=
Subject key identifier: BA:8A:69:BD:17:DA:20:56:59:06:36:33:9B:2F:02:BE:36:DA:A2:16
Authority key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6
Certificate issuer: /CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6
Certificate serial: 0999
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
Manifest number: 098E
Signing time: Sun 20 Sep 2026 19:56:37 +0000
Manifest this update: Sun 20 Sep 2026 19:56:36 +0000
Manifest next update: Sun 27 Sep 2026 19:56:36 +0000
Files and hashes: 1: vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl (hash: QFkcNuqqOb5j03jnP9oVXMnUQtYQPW3IPLLCObyYsqY=)
2: 1D0E6A7027FC11EDB69DF17AC4F9AE02.roa (hash: L0sYWPo+9IUvL/Wn9f+p+luxm7X2c3QL9dFRe3ip7Y4=)
3: 7B2341589D0011F1B7A126D43911F970.roa (hash: seypajfan+jU4R7iWH7EkcudjzVJ0dsqKFh//ATEkbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl
rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2457 (0x999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B03C3, serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6
Validity
Not Before: Sep 20 19:56:36 2026 GMT
Not After : Sep 27 19:56:36 2026 GMT
Subject: CN=6ab03a75-4e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:97:1e:02:3d:ce:3f:36:6a:9f:54:6b:42:
5a:ed:c4:f3:6d:ad:51:6b:8c:1c:f0:7b:28:f9:7e:
00:a3:d3:17:af:25:3d:a7:9a:c4:fe:03:0d:d0:e3:
59:f0:9a:01:4a:86:ac:61:22:17:cd:26:db:f2:65:
80:d5:33:b2:f6:fe:67:f0:e7:28:82:f3:a9:3c:59:
b9:f3:2a:27:75:cf:96:77:be:18:77:83:59:c0:7c:
11:3e:32:4c:6e:97:e7:d1:a6:59:d4:b6:10:78:92:
1e:fb:d2:ec:51:28:ed:0c:c9:1b:53:65:4b:c1:b7:
66:03:4d:f3:05:5b:56:85:f2:c0:50:27:a9:40:c6:
34:af:3d:d0:de:dd:73:39:ee:a9:43:f1:bc:29:5e:
c2:d9:7d:50:4b:16:70:08:41:b9:a3:3f:53:dc:3f:
98:be:a6:c4:62:14:48:61:7a:f5:56:f3:45:91:b0:
26:5c:59:dc:7e:c4:8c:aa:9e:b8:32:9a:d2:18:7a:
d5:2a:63:2e:34:40:30:d0:9e:fa:a5:47:ff:e2:89:
0f:22:eb:ec:f7:01:52:c7:42:84:96:5c:e3:8a:34:
b1:b9:59:6c:fc:10:97:94:7b:83:e2:88:66:3a:ca:
7b:8e:df:46:32:7c:c6:6e:20:7c:fd:f0:f6:6a:3a:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8A:69:BD:17:DA:20:56:59:06:36:33:9B:2F:02:BE:36:DA:A2:16
X509v3 Authority Key Identifier:
keyid:BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:64:fb:37:c0:db:3e:0c:70:d5:ff:cc:68:52:df:61:fb:a4:
9c:34:74:10:0a:e1:82:68:d6:17:f2:6f:7e:4b:c4:8f:da:55:
bd:31:bd:ee:82:ea:34:e2:04:90:9f:50:3e:6b:ae:83:5e:b3:
bc:a6:64:a4:97:ca:16:57:7f:d4:c9:04:03:42:8c:df:2c:ec:
71:f5:00:fe:be:b2:6f:71:76:62:d9:b2:2d:09:d1:50:8b:2d:
b7:b0:a3:e9:9b:3e:aa:d0:74:9a:99:5c:e0:10:4f:a4:09:10:
20:3a:6e:80:6c:2c:3a:cb:83:cd:0a:68:e6:3e:62:22:44:08:
17:1b:4c:b1:bf:af:0f:ea:87:53:dc:3b:bf:6c:30:4b:f6:29:
63:ae:c5:51:ae:73:e8:49:3a:4b:11:4c:d7:e3:fc:f1:b9:f3:
9f:d3:d4:ad:73:2c:e1:70:11:31:85:3e:f8:97:67:d2:9a:b9:
2a:98:b1:0e:3f:f5:47:ea:32:22:a0:29:ae:46:80:c4:eb:42:
73:90:df:2d:69:55:f3:0c:67:2b:ff:14:e5:2b:57:20:6f:34:
39:30:11:15:46:7e:b3:ef:2b:fb:d0:b8:05:fa:02:57:fa:61:
4a:f2:0a:1f:ce:be:9a:af:47:51:0e:4f:fc:7e:83:c9:65:c4:
b5:25:64:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAzQzMxMTAvBgNVBAUTKEJENjA5NjYzRTM5NjMyRTJFN0I3NEZEQ0QzNzJBN0RD
QzVGMDI5QTYwHhcNMjYwOTIwMTk1NjM2WhcNMjYwOTI3MTk1NjM2WjAYMRYwFAYD
VQQDEw02YWIwM2E3NS00ZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJOXHgI9zj82ap9Ua0Ja7cTzba1Ra4wc8Hso+X4Ao9MXryU9p5rE/gMN0ONZ
8JoBSoasYSIXzSbb8mWA1TOy9v5n8OcogvOpPFm58yondc+Wd74Yd4NZwHwRPjJM
bpfn0aZZ1LYQeJIe+9LsUSjtDMkbU2VLwbdmA03zBVtWhfLAUCepQMY0rz3Q3t1z
Oe6pQ/G8KV7C2X1QSxZwCEG5oz9T3D+YvqbEYhRIYXr1VvNFkbAmXFncfsSMqp64
MprSGHrVKmMuNEAw0J76pUf/4okPIuvs9wFSx0KEllzjijSxuVls/BCXlHuD4ohm
Osp7jt9GMnzGbiB8/fD2ajok8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqKab0X
2iBWWQY2M5svAr422qIWMB8GA1UdIwQYMBaAFL1glmPjljLi57dP3NNyp9zF8Cmm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDNDMy85OEQ4NTAwNkJD
RTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011TG50MF9jMDNLbjNNWHdL
YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZXQ1dZLU9XTXVMbnQwX2MwM0tuM01Yd0thWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDNDMy85OEQ4NTAwNkJDRTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011
TG50MF9jMDNLbjNNWHdLYVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiGT7N8DbPgxw1f/MaFLfYfuknDR0EArhgmjWF/JvfkvEj9pVvTG97oLqNOIE
kJ9QPmuug16zvKZkpJfKFld/1MkEA0KM3yzscfUA/r6yb3F2YtmyLQnRUIstt7Cj
6Zs+qtB0mplc4BBPpAkQIDpugGwsOsuDzQpo5j5iIkQIFxtMsb+vD+qHU9w7v2ww
S/YpY67FUa5z6Ek6SxFM1+P88bnzn9PUrXMs4XARMYU++Jdn0pq5KpixDj/1R+oy
IqAprkaAxOtCc5DfLWlV8wxnK/8U5StXIG80OTARFUZ+s+8r+9C4BfoCV/phSvIK
H86+mq9HUQ5P/H6DyWXEtSVkXw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:32:10 2026 by rpki-client