
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json)
Hash identifier: H1D6mc3uBLwAIm26t768O13ge++VTRQq6T7gwDG0fp0=
Subject key identifier: 86:81:B7:F8:E9:73:E8:04:AD:58:39:D9:D2:9D:5D:12:37:24:DA:7E
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
Manifest number: 0202
Signing time: Sat 13 Jun 2026 03:12:40 +0000
Manifest this update: Sat 13 Jun 2026 03:12:40 +0000
Manifest next update: Sat 20 Jun 2026 03:12:40 +0000
Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: dfL8xPOx6HOo0MfHwaMX0Sg10mheUoKDDdYlxMRAWow=)
2: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: ZCeCkuNAMK9rwX4/TECTij2fUOVdG//HOrl/aGbqzoQ=)
3: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: lnol3FDE+TIgmDpE8Hb5zoS0uAhkzs2Kf9xTWAAdaZg=)
4: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: j8XwNmKzHtxOYC1qN4eC3Mdd11Pr7Jsabm08Gp7iA9o=)
5: A6F6E9E43C6E11F19CBF2AC991833773.roa (hash: 46x0HcGyg5ZqbRk9Z/I39DBeqCVUcYGSuLiYKPf2rpo=)
6: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: A4JCozIWp8wr/poP9Jp6dNkVfMHGLYtzZMkqHhGl4c8=)
7: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: TRYBWoWB1+O1h6++uHuCXlTu4HpKrVeUUMhvWRHclCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Validity
Not Before: Jun 13 03:12:40 2026 GMT
Not After : Jun 20 03:12:40 2026 GMT
Subject: CN=6a2ccaa8-ed97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f8:38:bf:d8:72:66:a6:5c:ef:a6:14:0d:8a:
db:c2:a4:36:cd:ad:71:e0:e7:b8:06:57:0a:f0:c4:
2b:b0:e2:74:35:4a:3a:de:76:d7:a2:0b:9d:14:3c:
84:79:d3:34:46:64:8c:08:76:66:f8:fd:11:1c:e4:
da:d0:0e:87:1a:1f:ff:eb:5a:1a:3d:9d:ee:66:42:
d5:4e:ba:dc:3d:9a:38:da:11:e4:a7:a7:40:1a:02:
ad:59:51:e2:f0:b7:95:94:02:cf:af:07:fd:12:a1:
49:ad:73:df:d0:72:da:59:df:3c:28:87:72:54:04:
25:a3:29:ef:e1:48:dc:1b:b7:57:d1:53:fa:d0:7e:
6c:42:8b:3c:42:6c:e1:c6:de:8c:fc:ee:bd:93:9f:
dd:24:9f:49:2c:a9:c5:21:0d:8a:22:82:3f:61:ac:
dc:01:b4:c0:ba:b2:3e:81:c9:58:27:59:a7:9a:ea:
1a:c5:46:d6:bb:8c:09:2c:bb:a8:84:7b:76:a4:7e:
4e:37:05:12:ae:12:3a:6f:8b:c3:5f:13:68:f1:85:
d6:15:62:6e:eb:48:3c:1c:c7:da:61:51:89:d1:8a:
ce:e3:59:c0:3d:e0:90:7a:68:22:d7:05:38:05:17:
53:60:30:fd:ed:82:62:7a:36:8d:8f:11:f6:9f:d3:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:81:B7:F8:E9:73:E8:04:AD:58:39:D9:D2:9D:5D:12:37:24:DA:7E
X509v3 Authority Key Identifier:
keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:3e:4e:9e:b3:32:23:26:9c:19:f9:b5:39:a5:45:50:4b:8d:
8a:09:7a:a0:37:39:dd:5a:23:bd:99:f3:16:06:6b:6e:3a:16:
3e:47:9f:fc:15:8b:14:c2:61:92:f6:8c:ae:c3:25:59:13:81:
72:bc:ec:61:12:a5:e6:3c:f8:bf:4d:e1:90:0d:d5:96:06:77:
12:f3:99:56:bd:f2:e8:2f:8a:1c:00:9f:4e:cb:09:d8:e5:fd:
28:51:95:0b:33:d7:88:e7:26:8e:d3:93:6e:e1:4c:6b:55:6f:
03:58:73:9c:ce:7c:4d:6a:f3:4d:bf:27:e3:cb:4b:e9:c6:a6:
e0:f8:6f:60:84:2f:63:51:dc:e8:98:27:75:8b:a4:cf:26:e1:
05:35:1b:8f:8b:fd:03:21:ee:1e:17:7a:fe:5f:6f:85:24:7e:
64:a7:98:39:2c:82:55:75:cc:09:27:c3:6f:79:0b:3a:47:d1:
4b:5c:45:cd:6c:d5:5b:4e:60:46:db:69:c3:5b:e3:f7:97:63:
58:7c:db:18:79:ce:f9:5e:ad:37:cc:7b:bf:90:74:8e:af:f3:
bd:02:91:ff:a2:77:9c:89:5b:9a:ee:92:49:03:65:68:84:d7:
bd:57:90:5c:4b:54:dc:42:15:ad:c6:7f:2f:1a:ac:4a:c4:a8:
a8:30:bd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:22 2026 by rpki-client