
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
File: WY9YPfrp_JTaoww3iyFr7JcOM5g.mft (raw, json)
Hash identifier: VWzdy0nyhlMQ3Mi3TPi9g3xuRwIiWpFdWNTE0H9JyLk=
Subject key identifier: B7:24:7E:24:18:FB:20:36:F5:A5:16:68:CA:E5:EE:3C:11:64:76:C9
Authority key identifier: 59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98
Certificate issuer: /CN=A91EBD8F/serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
Manifest number: A1
Signing time: Wed 07 Oct 2026 07:50:22 +0000
Manifest this update: Wed 07 Oct 2026 07:50:22 +0000
Manifest next update: Wed 14 Oct 2026 07:50:22 +0000
Files and hashes: 1: WY9YPfrp_JTaoww3iyFr7JcOM5g.crl (hash: 0za15dONqCVth36hbCfILI/x7VjPh0CW5yljus5d8bc=)
2: 54F9E058D97F11F0B42EB3E75ED3641D.roa (hash: IbfmTJT4slGXqqy5jBNMbpSI8oHXqAY0nysJ/plorU0=)
3: 53EF3992D97F11F0B42EB3E75ED3641D.roa (hash: CB3oUxbQq+oYolrrHdTJzTMonbK2g+QTxJH/oX6hwkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl
rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBD8F, serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
Validity
Not Before: Oct 7 07:50:22 2026 GMT
Not After : Oct 14 07:50:22 2026 GMT
Subject: CN=6ac5f9be-351a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bc:9e:32:18:5b:01:30:87:9c:11:71:ef:06:
6b:c0:71:ca:5a:22:0a:eb:d2:5e:24:46:09:ec:af:
2f:01:e7:67:20:fa:9b:99:6e:04:1a:ca:29:de:fc:
7e:66:5f:50:fa:72:48:19:85:0e:eb:1c:a3:11:0e:
99:8c:b1:37:a4:77:d9:5a:86:cc:84:24:ef:a1:fd:
35:84:2b:2f:a5:a6:94:25:8e:e2:bd:06:10:9d:1d:
99:f8:dd:50:01:fc:07:cb:4d:fe:2a:21:f7:3e:7f:
2c:7d:c2:45:54:24:38:18:75:a1:f1:43:a3:b0:ab:
4b:21:17:bd:cf:4c:2b:40:3c:1e:5e:49:5f:e9:c5:
46:9c:34:f9:6b:f9:fc:0d:08:73:11:13:23:40:3b:
8d:80:29:fe:41:62:c8:76:98:53:c0:24:83:8a:07:
e5:30:6c:15:09:b8:64:22:b3:44:d5:58:17:90:c6:
0f:dc:08:c1:0b:f7:a9:19:da:e3:0e:53:11:91:6f:
f2:54:c9:08:d1:e1:4d:7f:d3:08:eb:9c:4c:f6:95:
1a:f9:55:4a:63:e2:ea:6d:45:2d:10:4f:5e:f2:a4:
26:95:b6:3d:c6:d2:bc:bf:f8:5c:07:b4:e7:8c:c8:
80:89:9d:ff:98:ec:ba:40:90:02:48:28:69:21:ab:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:24:7E:24:18:FB:20:36:F5:A5:16:68:CA:E5:EE:3C:11:64:76:C9
X509v3 Authority Key Identifier:
keyid:59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0d:ca:04:0e:98:4f:a1:74:3b:88:b8:8a:3c:12:54:e6:0e:
0d:76:56:b1:05:1d:e7:b0:44:fd:99:4b:f3:d9:3c:41:1f:60:
dc:86:4c:c1:fa:a6:1e:ac:ad:d6:b4:37:eb:90:4a:81:5d:9a:
32:dc:83:0f:eb:81:5e:46:ff:49:cb:38:ab:b0:eb:2b:d6:ff:
7e:46:39:37:37:0d:b0:d4:96:d7:f5:0d:5f:5e:2c:e2:b1:c5:
9f:58:d5:19:0b:1d:cc:d8:d0:74:0d:00:f4:e7:58:5f:16:f7:
3d:32:03:86:24:39:f9:8b:99:48:49:b5:e1:dc:01:11:5b:2a:
56:b0:fb:4d:2c:03:e0:bb:fe:6f:22:d2:a1:61:ed:67:3d:10:
5f:72:92:44:3e:3d:09:3c:e5:84:e3:1c:45:b2:78:79:c6:29:
41:fd:d9:a7:b4:1b:35:87:9c:61:70:c5:00:e3:bd:a2:5a:67:
37:59:1e:48:82:e6:c4:a0:ae:92:d4:81:b0:6b:fb:18:e7:8b:
e7:e4:67:c3:c6:bf:dc:4b:69:d8:9e:34:24:18:c7:83:71:54:
19:14:0e:95:85:37:2f:80:f5:46:8d:3a:f4:31:3a:bd:ec:eb:
ff:d1:0d:ac:da:53:9f:78:95:82:d2:fa:7d:ee:03:5c:3f:7f:
45:28:43:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJEOEYxMTAvBgNVBAUTKDU5OEY1ODNERkFFOUZDOTREQUEzMEMzNzhCMjE2QkVD
OTcwRTMzOTgwHhcNMjYxMDA3MDc1MDIyWhcNMjYxMDE0MDc1MDIyWjAYMRYwFAYD
VQQDEw02YWM1ZjliZS0zNTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA77yeMhhbATCHnBFx7wZrwHHKWiIK69JeJEYJ7K8vAednIPqbmW4EGsop3vx+
Zl9Q+nJIGYUO6xyjEQ6ZjLE3pHfZWobMhCTvof01hCsvpaaUJY7ivQYQnR2Z+N1Q
AfwHy03+KiH3Pn8sfcJFVCQ4GHWh8UOjsKtLIRe9z0wrQDweXklf6cVGnDT5a/n8
DQhzERMjQDuNgCn+QWLIdphTwCSDigflMGwVCbhkIrNE1VgXkMYP3AjBC/epGdrj
DlMRkW/yVMkI0eFNf9MI65xM9pUa+VVKY+LqbUUtEE9e8qQmlbY9xtK8v/hcB7Tn
jMiAiZ3/mOy6QJACSChpIavspQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLckfiQY
+yA29aUWaMrl7jwRZHbJMB8GA1UdIwQYMBaAFFmPWD366fyU2qMMN4sha+yXDjOY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkQ4Ri9BOTVFOUEyOEQw
RUExMUYwOTE3Rjc5NDBDNEY5QUUwMi9XWTlZUGZycF9KVGFvd3czaXlGcjdKY09N
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dZOVlQZnJwX0pUYW93dzNpeUZyN0pjT001Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkQ4Ri9BOTVFOUEyOEQwRUExMUYwOTE3Rjc5NDBDNEY5QUUwMi9XWTlZUGZycF9K
VGFvd3czaXlGcjdKY09NNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADw3KBA6YT6F0O4i4ijwSVOYODXZWsQUd57BE/ZlL89k8QR9g3IZMwfqmHqyt
1rQ365BKgV2aMtyDD+uBXkb/Scs4q7DrK9b/fkY5NzcNsNSW1/UNX14s4rHFn1jV
GQsdzNjQdA0A9OdYXxb3PTIDhiQ5+YuZSEm14dwBEVsqVrD7TSwD4Lv+byLSoWHt
Zz0QX3KSRD49CTzlhOMcRbJ4ecYpQf3Zp7QbNYecYXDFAOO9olpnN1keSILmxKCu
ktSBsGv7GOeL5+Rnw8a/3Etp2J40JBjHg3FUGRQOlYU3L4D1Ro069DE6vezr/9EN
rNpTn3iVgtL6fe4DXD9/RShDNw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:26:50 2026 by rpki-client