
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft
File: iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft (raw, json)
Hash identifier: a9UdEUwkJ52J15AAV02Ny53YOhzPxsqI4GBiHHxXpyU=
Subject key identifier: F4:5D:75:AA:F8:AA:1F:B5:19:63:80:A3:10:0A:3F:32:54:71:17:89
Authority key identifier: 8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33
Certificate issuer: /CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833
Certificate serial: 1219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft
Manifest number: 120D
Signing time: Thu 24 Sep 2026 17:06:39 +0000
Manifest this update: Thu 24 Sep 2026 17:06:39 +0000
Manifest next update: Thu 01 Oct 2026 17:06:39 +0000
Files and hashes: 1: iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl (hash: KDJwr21xT36vj7Ejvd0gew42u3+IGTux/nyRS/5Tos8=)
2: 6127B9001FE711ECB8454E83C4F9AE02.roa (hash: WXbttLnIbP2dS5ns2q85mnfryDdhOignXdZHx6svPT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl
rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4633 (0x1219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3078, serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833
Validity
Not Before: Sep 24 17:06:39 2026 GMT
Not After : Oct 1 17:06:39 2026 GMT
Subject: CN=6ab5589f-8047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:d7:a3:51:e0:c4:91:fc:99:3f:b9:75:28:
dc:1b:d5:a5:39:f3:c7:a8:03:71:ee:cb:3e:9e:0d:
7b:4e:e6:77:fb:f0:41:0d:b6:44:bf:a3:27:8f:30:
76:cd:c5:6d:1b:b7:6c:b1:2c:01:a6:ee:f4:c6:2d:
9a:d0:c7:c4:bf:bb:15:64:ed:16:da:e2:d0:0c:4a:
2f:18:61:80:37:9d:a0:ae:00:4b:39:68:78:e8:1d:
45:5f:38:fc:7e:e4:f0:38:83:88:d5:9c:39:fb:fa:
e2:2d:cc:0b:ad:a0:bb:64:05:f6:1f:86:a6:65:eb:
83:47:6c:19:c2:70:a8:8c:18:32:13:03:36:a6:18:
41:61:5c:93:2c:71:86:d4:ba:09:9b:89:30:62:ac:
5e:bf:52:ca:4b:5d:d6:a4:5c:f6:9b:d2:10:e7:5e:
29:5e:69:7e:75:5e:27:83:c0:ca:f6:8d:08:15:3d:
5a:2a:ac:75:fc:76:67:10:c8:da:1f:bb:47:fa:9d:
fd:f7:44:46:a5:6e:4d:ce:39:34:48:a4:c0:e8:7a:
ec:78:77:c5:b9:1d:c6:8e:b7:8e:3c:8a:e2:44:10:
bf:5c:11:01:59:27:0b:84:7b:55:29:75:45:fa:b8:
61:32:ef:a2:42:37:71:c9:62:b3:ca:ec:f8:16:ad:
e4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5D:75:AA:F8:AA:1F:B5:19:63:80:A3:10:0A:3F:32:54:71:17:89
X509v3 Authority Key Identifier:
keyid:8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:97:59:fb:a2:77:67:1b:8e:c4:61:7b:60:d3:2b:6b:ef:1d:
99:9d:c3:d7:36:2a:44:72:ad:74:49:8b:c6:b1:1f:9f:94:65:
5f:bf:d1:09:2b:05:e8:45:9e:f3:e5:8f:4e:90:89:4a:ca:cb:
89:23:02:50:43:88:42:2e:29:40:af:c7:b1:f0:a4:b8:a1:89:
e5:77:cf:e1:8e:15:bc:bf:04:5c:a2:8f:0a:cb:9f:20:00:bd:
55:b0:3f:7c:d3:78:54:3f:58:76:82:97:04:eb:6a:ad:f7:ca:
e1:ba:8b:69:cf:59:67:cc:2b:44:2e:fd:80:32:c5:ff:a7:f2:
fa:39:49:fe:64:5f:6a:26:b7:f9:c2:5e:65:29:44:e6:84:65:
91:5d:6c:80:45:0f:77:fd:29:62:d6:42:59:d4:4a:4b:eb:5d:
21:1e:85:65:c2:1d:ff:13:a9:42:0a:0f:83:2e:bd:70:eb:89:
68:09:24:35:e6:0d:0e:5f:b9:59:71:84:ce:77:16:07:91:c2:
93:e6:62:df:81:b5:5c:16:53:72:7e:32:31:6b:f6:2f:d2:32:
8b:1d:2d:0c:6d:a1:1c:6f:5a:68:9c:7d:8d:35:3c:0f:90:ef:
b7:b3:90:e9:29:c8:95:41:db:58:28:a5:60:ee:37:c5:94:94:
a3:7b:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:41:26 2026 by rpki-client