
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json)
Hash identifier: XUk6JLNmnetDPDhrNEkGS4x4wRQ1F67rKgY5Hu7sWtI=
Subject key identifier: 5A:FE:78:FE:2C:CB:5D:CC:A8:AA:58:BA:71:FF:49:0F:FA:F1:77:0A
Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Certificate serial: 0A9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
Manifest number: 0A6E
Signing time: Tue 28 Jul 2026 19:59:53 +0000
Manifest this update: Tue 28 Jul 2026 19:59:52 +0000
Manifest next update: Tue 04 Aug 2026 19:59:52 +0000
Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: 1A0EyQqmS/CpLTo9KUrfFNXKXwoCUq+Kyo8IOZGX6vc=)
2: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: vExhqYfIkomdDV7xNalk44Q9UiS8pz94A5xmO/cMcTw=)
3: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60m3ux9qQuI8sAbqkpMf6ZbChso/+JAfGKgLBlRXOY4=)
4: 3D96FCE64D1C11F19558AE18BA833773.roa (hash: fWrnDRf0ygF/bELqyvqgRKiyxFoBJGTEgo2RIONYsM0=)
5: D68A6AA64D1B11F1887430DDB9833773.roa (hash: RbJva28JL0oRQGNXfDxaa35qEtDL+UO0626spMk2ark=)
6: C86AB87A4D2711F1906BF3DDBE833773.roa (hash: SKrWdYrl9KleuCmzcfglzGlBQ52LXQEO3/LUYZ1Seeg=)
7: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: wCl7rXzm53xP5orlsNl4KHMAfPJ5TI2KsLBB3PbjkDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2715 (0xa9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Validity
Not Before: Jul 28 19:59:52 2026 GMT
Not After : Aug 4 19:59:52 2026 GMT
Subject: CN=6a690a39-f0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:38:d1:66:3e:de:22:aa:50:8b:16:f9:4c:
bd:15:75:29:b5:a2:45:36:3d:a5:ca:d5:89:1d:b3:
87:b1:47:43:83:5a:37:86:a2:b9:43:c7:0f:07:73:
24:3c:f2:c9:ab:91:8f:49:89:55:55:dd:a9:27:82:
f6:f2:e6:07:b6:8a:61:da:8b:b4:88:8e:54:29:93:
52:41:05:ac:4b:22:c1:b0:22:be:29:41:11:38:64:
29:04:a9:54:a7:62:ae:11:01:60:a6:17:f9:03:88:
bf:f3:9f:e0:cd:e7:6c:c1:35:35:40:a4:8e:ed:8e:
5b:4e:ba:4c:3d:3b:6f:60:88:4d:04:cd:00:d0:10:
6e:c9:97:51:75:98:52:a0:59:47:ea:d6:f4:64:10:
8a:a3:b3:c3:cd:63:fa:03:63:2d:d6:45:ed:eb:d0:
9d:0b:37:dd:8f:eb:b6:1a:3f:ba:47:19:03:a8:d1:
4d:34:29:a8:0d:e7:12:26:1e:5b:da:d2:1e:b0:9c:
a4:63:90:f5:03:f4:4d:5a:bd:71:94:51:13:38:9d:
f5:75:c7:85:75:53:d4:65:02:f1:94:23:92:8e:e7:
5b:cf:be:3b:b6:71:22:00:02:d4:72:7a:a7:90:77:
24:1d:79:29:dd:9a:a2:ff:10:c5:77:d8:55:b6:8f:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FE:78:FE:2C:CB:5D:CC:A8:AA:58:BA:71:FF:49:0F:FA:F1:77:0A
X509v3 Authority Key Identifier:
keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:f3:06:92:cf:26:f4:54:6a:63:28:6d:2a:21:ca:d7:00:bb:
63:34:9d:47:86:76:0c:d8:cd:e5:fe:fd:3f:df:9c:64:42:c3:
e7:98:31:80:fb:be:98:36:cd:5c:20:80:f4:0f:ef:2d:8c:0a:
30:c8:ac:e1:12:0a:3a:de:83:fb:e8:0c:53:fd:db:2b:44:f1:
aa:cd:6b:18:cf:18:16:c3:e8:09:b9:cc:3d:ec:bd:99:62:95:
d5:4a:e4:5e:38:d1:3c:ae:d4:4e:ca:57:18:56:03:5e:92:cc:
9e:67:d2:5b:38:2c:b8:6b:09:ad:eb:56:5e:e4:19:2b:aa:d2:
81:10:18:5f:14:d8:a8:d2:b1:16:bb:be:a6:f4:40:64:72:74:
c6:09:c0:32:27:c9:0d:55:5c:cd:dd:88:5e:20:62:cb:c9:3b:
01:cf:10:e1:95:fa:aa:47:30:1d:58:96:e0:b3:38:d6:5f:3c:
a1:1a:65:25:38:8e:b6:4b:0a:34:e8:23:26:a3:d6:08:6a:e4:
09:27:c7:52:50:2b:7e:fb:af:f4:c9:c8:98:5f:6d:fd:e4:e6:
58:bc:28:ea:39:57:99:13:58:88:ba:cb:1c:66:11:a7:08:77:
32:da:90:b9:d0:88:4e:81:97:a8:b1:2d:0b:5f:65:8b:a3:c1:
6b:dd:66:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:36:47 2026 by rpki-client