
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
File: WYMt_ndUWn2J_bBhkVxnGef4K98.mft (raw, json)
Hash identifier: AwzyaCaH8hMOGTa+rUAln1Q+Ph61UxqPwix7L4kTh44=
Subject key identifier: 54:5D:19:A5:94:40:D3:47:43:32:73:83:C6:6D:6C:22:84:2A:7E:B0
Authority key identifier: 59:83:2D:FE:77:54:5A:7D:89:FD:B0:61:91:5C:67:19:E7:F8:2B:DF
Certificate issuer: /CN=A91D8601/serialNumber=59832DFE77545A7D89FDB061915C6719E7F82BDF
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
Manifest number: 1A
Signing time: Sun 01 Mar 2026 10:28:04 +0000
Manifest this update: Sun 01 Mar 2026 10:28:04 +0000
Manifest next update: Sun 08 Mar 2026 10:28:04 +0000
Files and hashes: 1: WYMt_ndUWn2J_bBhkVxnGef4K98.crl (hash: vMLbJ7lDzU7L9xUHSt5RrRCMtmAGCfqFxBjt9sPmaZA=)
2: CBF1F0FEF6AF11F09B571584436F56BC.roa (hash: Bawj5Qb3y5hud9s4mY4i7Q9eoq0uTVRDnGt9JTxtaYQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.crl
rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8601, serialNumber=59832DFE77545A7D89FDB061915C6719E7F82BDF
Validity
Not Before: Mar 1 10:28:04 2026 GMT
Not After : Mar 8 10:28:04 2026 GMT
Subject: CN=69a414b4-a311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f7:11:6b:5e:16:56:a4:34:1b:64:21:b2:0b:
54:a4:8d:22:8f:67:46:58:4e:45:b2:8f:5a:87:37:
b7:fa:f2:60:c3:8d:69:ed:da:2b:7b:4b:13:5f:cf:
51:ae:c0:d4:d9:5a:01:7b:fc:f3:6b:f9:65:bf:23:
3d:5e:60:8d:c5:ea:0c:e0:bb:f8:4d:a0:58:0e:95:
7f:70:ac:6f:67:8b:2b:33:08:58:18:e3:8c:30:e7:
89:75:e6:57:5d:7d:58:ff:b2:a4:92:a3:bc:b6:3e:
82:2f:86:a1:96:7e:6a:9f:56:e0:91:5b:b2:e3:f3:
4b:e3:61:a4:68:71:52:6b:de:b5:4f:d0:f0:47:2e:
44:2f:2c:19:14:2a:a2:28:31:87:6c:2c:22:92:9c:
4b:fe:48:13:33:23:9a:b2:73:34:8d:ee:d1:09:7b:
91:fa:a7:4f:48:66:7f:fe:95:42:c6:5c:34:95:2d:
9c:15:6d:a1:5f:12:11:8f:78:ff:b1:35:cd:da:26:
05:57:2d:c1:cb:29:70:1b:c2:df:24:13:16:6e:2f:
01:e0:ec:cb:57:9c:58:66:14:b7:e2:41:77:7d:af:
98:cb:e1:4c:2a:d3:e4:1d:ec:6a:fe:da:0a:d5:4e:
06:a1:6f:63:96:35:20:9e:52:c1:16:91:d8:77:3d:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5D:19:A5:94:40:D3:47:43:32:73:83:C6:6D:6C:22:84:2A:7E:B0
X509v3 Authority Key Identifier:
keyid:59:83:2D:FE:77:54:5A:7D:89:FD:B0:61:91:5C:67:19:E7:F8:2B:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:3e:74:78:af:e2:87:cb:fc:a1:df:94:f1:7a:06:b6:c0:16:
dd:b4:14:a1:69:d3:26:27:06:a2:44:64:fd:5c:e3:83:76:1c:
4f:96:d0:a0:a9:2f:17:ed:58:27:fa:64:9c:de:b1:82:5c:71:
08:e6:46:49:b1:2e:9b:ee:44:58:87:c0:d4:a3:0e:62:9c:4a:
f0:7b:52:87:1d:26:35:f2:1c:17:81:79:91:02:18:fe:3a:63:
84:40:cc:af:7e:1b:77:58:7c:e9:39:c0:a9:14:70:c2:1e:24:
25:6c:75:76:95:86:2b:14:51:94:f1:42:d2:1f:c0:f4:9a:e6:
8d:7f:2e:17:50:21:fb:7e:9f:b7:2a:86:80:05:a9:a7:64:84:
7f:80:41:ba:43:fd:d7:20:88:ce:83:5b:fb:6b:21:1e:07:88:
22:0e:dc:00:5b:6f:96:68:9c:e8:a8:24:17:fa:21:34:8f:3e:
14:85:7f:52:91:d7:4b:84:ac:38:1d:6b:93:19:f1:d5:f3:33:
17:d2:07:54:16:3d:4a:8f:cc:7a:53:2a:81:e3:b4:f1:6f:c3:
f1:63:05:ba:91:8b:02:ae:a1:29:20:00:91:07:e8:2a:7a:a3:
ae:ac:75:1e:48:c8:33:cb:ca:88:3f:ca:27:e9:18:c2:8e:cb:
b8:91:7d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:42:09 2026 by rpki-client