
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json)
Hash identifier: SofG3ocu+9wkQjWC8L4P5zP62iqi3b+R5/RS8JcKWwI=
Subject key identifier: 87:44:A3:F9:BF:B0:BB:08:0F:76:1F:B9:20:74:B8:51:66:79:8D:57
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial: 024D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
Manifest number: 0234
Signing time: Sat 19 Sep 2026 02:47:30 +0000
Manifest this update: Sat 19 Sep 2026 02:47:29 +0000
Manifest next update: Sat 26 Sep 2026 02:47:29 +0000
Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: 2WhsJV11oM6yfgOEalWw7kOaKfYJnTVtHhrrDl5jmfA=)
2: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: TRYBWoWB1+O1h6++uHuCXlTu4HpKrVeUUMhvWRHclCc=)
3: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: j8XwNmKzHtxOYC1qN4eC3Mdd11Pr7Jsabm08Gp7iA9o=)
4: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: lnol3FDE+TIgmDpE8Hb5zoS0uAhkzs2Kf9xTWAAdaZg=)
5: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: A4JCozIWp8wr/poP9Jp6dNkVfMHGLYtzZMkqHhGl4c8=)
6: A6F6E9E43C6E11F19CBF2AC991833773.roa (hash: 46x0HcGyg5ZqbRk9Z/I39DBeqCVUcYGSuLiYKPf2rpo=)
7: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: ZCeCkuNAMK9rwX4/TECTij2fUOVdG//HOrl/aGbqzoQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Validity
Not Before: Sep 19 02:47:29 2026 GMT
Not After : Sep 26 02:47:29 2026 GMT
Subject: CN=6aadf7c2-cfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:a0:de:cf:26:2c:57:20:e6:b0:4d:89:f2:
5a:28:d4:e2:0a:c1:c5:0f:85:b3:8c:96:d9:77:92:
5c:25:8e:f3:13:5c:3b:2e:38:a3:1d:fe:eb:70:00:
d8:e6:da:42:fb:21:50:de:d2:8a:ff:83:2e:9f:c5:
5e:1b:d0:d9:55:1b:a0:b4:5f:a2:0c:d0:5b:d0:08:
96:fd:31:bb:f6:bb:9a:ba:7a:56:ef:51:2f:8f:8a:
03:fb:c2:c6:4f:ff:af:a3:e1:b1:52:26:fe:44:49:
76:d6:b3:5d:b1:fb:1c:28:35:b7:31:61:88:3c:c6:
14:42:f7:52:8d:7e:e4:f0:46:dd:3c:f2:d4:e7:db:
0b:18:c2:66:c1:2a:03:2c:30:d0:d7:a1:bf:c6:10:
f2:98:eb:c7:1d:b4:17:45:04:f5:3d:e6:29:88:53:
e6:d6:ab:d0:1d:16:80:49:17:a0:0b:bf:5b:cd:bf:
18:b5:9e:15:c2:5f:18:da:a7:e7:00:6e:2e:63:84:
47:c7:93:44:66:83:4b:ec:f2:09:99:05:7c:68:16:
9d:73:8e:28:d5:fe:17:96:38:a4:67:e5:ec:64:3a:
0d:27:f1:10:49:01:f8:bb:50:78:2f:39:97:d4:60:
09:dd:0e:cb:b5:f3:e9:88:78:7e:fd:a4:03:0f:5b:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:44:A3:F9:BF:B0:BB:08:0F:76:1F:B9:20:74:B8:51:66:79:8D:57
X509v3 Authority Key Identifier:
keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:29:43:b4:77:60:67:f4:69:ad:5e:ab:e5:3a:13:a5:f4:01:
16:e3:a3:7b:0a:68:a0:f1:f9:69:b1:9b:14:f4:75:a1:26:15:
09:10:6b:6e:a9:51:ff:e6:f1:cb:3c:bb:e1:5c:4a:b6:2f:2c:
06:98:cb:87:c1:73:da:95:ed:30:df:56:52:63:f2:bd:be:db:
2d:4b:51:02:d8:04:19:4a:46:3d:39:f4:81:02:ee:43:c7:01:
b6:07:b6:95:09:5e:6d:ae:36:bf:d3:af:16:e5:48:90:56:e9:
fb:0b:bd:0f:d8:fd:b5:e8:91:b2:7c:80:72:88:8c:d8:ad:73:
c0:84:cd:f7:48:43:3f:b5:95:a1:bd:ae:98:72:47:1c:ee:80:
18:2b:58:e2:38:ec:bc:27:69:38:6d:e9:ed:63:cb:9c:cf:75:
d6:31:6e:1b:56:31:68:40:15:b2:98:28:9d:54:87:5a:ef:8e:
ab:b5:9c:9e:90:73:38:93:bd:4d:4a:03:ea:76:04:d5:12:17:
44:c5:25:5d:c0:dd:b8:b0:ef:28:f6:db:f5:49:f4:72:54:a2:
8f:ae:d0:ea:5e:84:86:f2:bc:dd:00:b9:4d:24:64:6e:0c:df:
25:b4:d2:99:55:3b:e8:40:7c:05:e9:82:ca:da:5b:8c:0a:94:
8d:9d:c7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:18:44 2026 by rpki-client