
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json)
Hash identifier: N9o1+zD4wsoJyR471T4Hgz60ViV4CWymUQ5r2Mxg1M0=
Subject key identifier: 65:D6:0C:D5:B6:88:55:63:E4:FB:6D:4F:5A:20:02:11:41:4A:F9:9C
Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
Manifest number: 022A
Signing time: Mon 02 Mar 2026 00:13:13 +0000
Manifest this update: Mon 02 Mar 2026 00:13:11 +0000
Manifest next update: Mon 09 Mar 2026 00:13:11 +0000
Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: WGuuD+lQ+GnAIp7y0yujtm2fL1TM6ZXxSMAo+BmqVRs=)
2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: 8F41x2fmLZ5M8u7RlY+aL2kU1d0Mkh7PiR5sgAseHxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Validity
Not Before: Mar 2 00:13:11 2026 GMT
Not After : Mar 9 00:13:11 2026 GMT
Subject: CN=69a4d619-7735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:6c:10:a2:2e:78:fb:63:57:80:64:f8:44:
3e:0b:cf:65:0b:68:79:77:48:db:56:73:b6:4b:7d:
60:88:3b:17:b7:86:12:5f:7e:43:30:cb:23:34:37:
4d:99:18:53:0c:b4:9b:64:59:06:1d:61:18:5e:43:
f9:e6:2b:0e:33:b8:df:d1:69:3d:9c:96:ad:06:20:
6d:29:78:ad:6f:a8:07:42:97:b6:4c:9f:ef:fb:b2:
3a:a6:48:03:ce:b8:25:0f:4f:ab:45:1c:52:53:24:
7b:7d:03:90:4d:16:fc:99:01:ba:dc:a2:51:c5:b4:
c0:87:1b:dd:55:2a:7e:59:dc:42:a9:da:27:7a:92:
40:96:b1:48:34:f5:55:fd:9e:13:bd:44:04:7a:9a:
f2:14:00:07:cd:d9:29:52:fc:30:36:6f:c0:36:b6:
83:81:f8:af:9e:7f:c7:fb:11:f2:12:f9:c4:f9:e5:
f3:91:8d:7f:96:c5:1e:23:5f:f0:0a:c6:cc:aa:5c:
b1:42:b2:b0:6f:94:3c:da:6e:76:f4:74:f4:a0:d5:
c9:e9:e7:cb:48:3f:7c:5b:87:1e:fc:71:cb:2d:3b:
93:c8:e1:5d:7c:72:f7:48:8e:a3:73:a0:b6:67:98:
11:2e:47:3a:11:c0:a2:aa:82:f7:b8:05:50:25:a4:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D6:0C:D5:B6:88:55:63:E4:FB:6D:4F:5A:20:02:11:41:4A:F9:9C
X509v3 Authority Key Identifier:
keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:20:4f:ca:c1:04:3a:9f:6a:0c:49:b5:0c:92:ee:0f:ba:a4:
44:a5:8b:95:44:d2:40:02:50:8f:92:91:bc:a7:5f:4b:23:3a:
d6:72:9d:98:a0:4a:ec:7c:44:5a:df:b1:56:ff:b4:0b:47:f2:
42:76:fa:2f:a4:8b:5e:53:f4:ff:66:3c:3c:14:bf:98:d1:c5:
ac:1c:75:24:ec:27:ab:a1:db:4a:ca:ad:ee:73:bb:84:e9:5c:
54:7a:59:d1:e8:2a:04:1f:ef:ce:51:e8:fb:a9:ca:55:61:b2:
9a:08:8f:5b:69:3e:7f:0f:81:e8:99:84:10:e7:07:aa:3f:fc:
60:73:0a:aa:5f:8d:de:23:73:f7:88:1e:74:75:a1:17:6d:69:
2e:a3:20:7f:a3:05:4f:00:d7:87:4d:de:5d:4c:2d:da:7f:cf:
12:65:a0:88:fa:84:53:14:ce:66:82:67:22:e5:9c:57:4f:ed:
06:92:2b:74:f1:ab:e8:ac:d5:67:7b:88:7a:05:c6:40:e6:0b:
a9:ac:be:db:02:e1:e5:7f:d2:12:64:6b:4a:12:49:13:b5:11:
8d:18:ef:20:0b:22:73:eb:14:49:eb:00:1d:32:1d:73:15:8e:
8e:57:4d:34:55:95:87:0d:fe:b6:fa:32:b9:9b:cc:ba:e1:ae:
54:74:da:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:13 2026 by rpki-client