
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft
File: iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft (raw, json)
Hash identifier: 0CHO0llvFuNrkkrdFqz/xB8vbVisjstTw0iI5qmUKns=
Subject key identifier: FD:3F:2E:35:D3:9B:8C:C7:FA:17:6B:9F:30:16:B8:63:B8:1E:C9:EB
Authority key identifier: 8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33
Certificate issuer: /CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833
Certificate serial: 11C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft
Manifest number: 11B9
Signing time: Thu 16 Apr 2026 17:07:10 +0000
Manifest this update: Thu 16 Apr 2026 17:07:10 +0000
Manifest next update: Thu 23 Apr 2026 17:07:10 +0000
Files and hashes: 1: iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl (hash: 2uATTvGuCXvZy1yhRGhEMgAivNmHVB7jFVABTGM1DzM=)
2: 6127B9001FE711ECB8454E83C4F9AE02.roa (hash: SXnpFOe0vmH6ZhEOUBoFfqwqIICiKNDRMjwx5BrPeMo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl
rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4548 (0x11c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3078, serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833
Validity
Not Before: Apr 16 17:07:10 2026 GMT
Not After : Apr 23 17:07:10 2026 GMT
Subject: CN=69e1173e-914b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e7:ce:c6:0d:78:4c:28:a9:bd:1b:2e:d4:ac:
6d:53:db:c4:a9:e2:cc:d1:09:1b:3e:b0:20:44:a0:
20:a5:1a:7e:60:f2:a0:14:d6:5d:ca:0f:1b:87:ac:
66:68:17:fb:95:05:60:ef:3e:b6:e5:5a:dd:b2:b5:
60:6d:d1:8c:7d:76:2f:87:25:6c:66:97:21:43:ee:
43:4d:4f:21:98:d5:81:aa:c1:ef:dd:a7:04:2c:cc:
c5:52:5c:58:d1:cc:8b:6a:78:8c:1a:60:38:cc:ee:
3d:0c:20:33:e9:8f:7c:2c:c7:47:d7:af:cb:58:d9:
e4:40:17:86:a3:ff:4e:33:3d:d9:e4:b9:e8:be:0a:
17:c2:c7:54:d1:1e:90:37:f5:32:73:af:e3:f9:d5:
ab:2a:c8:28:72:bf:56:ad:ce:25:f1:3b:cb:80:20:
3b:d6:d2:2d:43:5f:0d:d7:3e:b8:b9:13:3e:9e:45:
0d:65:05:9f:dd:23:26:d6:c6:15:79:64:b4:84:a6:
c9:18:c7:b0:2b:d9:3c:e8:56:6b:3c:85:3d:51:2d:
cb:06:1c:50:09:ed:b0:1e:48:d9:be:bc:4d:5e:d1:
53:dd:db:47:b4:39:6a:9a:79:8c:12:fb:2b:4e:c1:
c8:8a:eb:09:25:d0:69:ed:2c:89:f7:06:17:cd:0c:
d3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:2E:35:D3:9B:8C:C7:FA:17:6B:9F:30:16:B8:63:B8:1E:C9:EB
X509v3 Authority Key Identifier:
keyid:8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:48:98:56:6b:1b:14:0b:de:ca:3e:5c:6e:71:26:a3:5e:37:
6b:28:18:46:73:f6:f1:5f:be:5a:f2:13:ca:1e:cf:ed:11:20:
f3:3b:8a:1f:96:d7:75:3f:4a:60:c7:43:08:3e:5b:72:39:74:
99:36:61:9e:99:d6:bd:6c:48:6f:ec:fa:6c:ba:77:a7:ce:71:
b1:e2:2c:1b:e4:e1:fb:50:e6:e6:43:99:92:83:f0:f0:2c:db:
3a:fd:a1:69:b9:07:f3:cc:1f:1b:92:df:32:a7:25:63:6e:e1:
c8:82:3f:18:27:f2:bf:0a:89:ff:76:a7:71:fa:10:15:63:cd:
13:c0:d2:c9:d9:1b:81:9d:1e:51:09:25:54:6f:9a:03:32:48:
9b:f6:98:4f:12:b6:36:ba:88:45:bd:97:c6:41:d7:b4:4d:90:
31:bf:71:8c:ec:46:90:9f:12:64:2c:1a:ce:d3:f6:82:4f:e8:
fe:77:27:a3:eb:fc:88:00:14:68:98:58:31:58:4e:01:b8:df:
09:4a:cc:0e:7b:f4:9c:a4:47:ea:2a:59:a7:c8:90:6e:88:d4:
a6:3d:02:b6:5b:88:9f:86:e5:a3:ec:76:d5:ea:87:59:32:33:
c7:e2:de:16:b2:c2:db:4a:c1:94:69:62:da:cf:28:63:2a:3a:
6f:30:e7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:11 2026 by rpki-client