
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json)
Hash identifier: SwlkHAaVGIER8TBqX7eRQoO9hjPY86h4sSuQpgUsFHA=
Subject key identifier: F2:0C:C4:62:C8:49:04:0B:6C:B2:E9:B6:7A:0E:8A:07:FC:DD:B0:F0
Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Certificate serial: 0248
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
Manifest number: 0242
Signing time: Fri 17 Apr 2026 02:12:35 +0000
Manifest this update: Fri 17 Apr 2026 02:12:34 +0000
Manifest next update: Fri 24 Apr 2026 02:12:34 +0000
Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: bu0qQARDaNti74EDwFA/1ubFvI48pt1caP0w0oPAI8M=)
2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: 8F41x2fmLZ5M8u7RlY+aL2kU1d0Mkh7PiR5sgAseHxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Validity
Not Before: Apr 17 02:12:34 2026 GMT
Not After : Apr 24 02:12:34 2026 GMT
Subject: CN=69e19712-324f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:55:55:df:28:83:fd:de:7c:81:5b:9a:1f:
b3:f5:94:ca:8b:1a:82:f0:e2:2a:91:f7:51:8c:e9:
a8:f1:21:03:0b:98:8e:fe:41:c2:e3:82:5a:45:bf:
5e:8e:24:b1:ad:2c:6f:81:c0:a7:a4:f8:bc:8a:53:
48:bf:f4:cf:28:c2:20:7b:ba:c6:4e:48:91:56:84:
bd:cc:e1:62:01:71:b1:b1:d9:2c:56:6e:6c:dd:5e:
0d:60:83:af:8a:c6:c2:c8:04:38:fc:c2:0b:12:f9:
84:4b:58:a4:f2:43:f0:92:d2:d6:f6:a4:a9:18:80:
eb:ac:96:87:9a:63:e5:35:a8:3e:af:b5:f6:54:a2:
ef:1f:bf:e5:71:7c:cb:5a:69:e3:92:67:dc:64:d6:
62:23:cd:2c:2a:29:df:59:91:6a:e6:45:5f:40:54:
ed:3e:81:51:27:c3:e2:83:80:30:c0:97:e6:83:b7:
c3:27:f7:38:ff:11:d1:49:7d:30:19:70:86:40:04:
dd:82:e0:f2:a7:eb:93:29:64:2c:83:4f:ab:56:d5:
94:9b:37:32:6c:94:c7:70:4f:cc:54:c5:a5:e5:ae:
dc:83:81:cc:d7:67:b6:60:63:48:11:d0:c1:47:3d:
33:55:41:5f:c5:11:90:f3:fe:6b:39:d4:a6:db:38:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0C:C4:62:C8:49:04:0B:6C:B2:E9:B6:7A:0E:8A:07:FC:DD:B0:F0
X509v3 Authority Key Identifier:
keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:fa:ec:ab:95:16:9e:37:84:4a:98:1f:8b:ba:d6:01:bb:c4:
ac:1d:7c:8d:12:0f:b9:52:df:f7:85:27:f2:6c:7e:71:b9:c8:
8f:36:fe:5c:c1:ed:81:08:97:e0:0a:1e:ef:e3:ba:0b:08:b1:
13:24:68:84:e4:a3:f3:d7:c4:7a:46:04:c7:0d:7e:e4:26:8b:
5a:1c:e1:5f:8b:47:58:27:a6:96:38:e3:4d:48:d8:a9:84:1b:
23:dc:ff:85:0f:0a:be:b4:1f:1e:47:72:45:21:b9:0b:11:b9:
f5:41:44:11:28:a2:85:5e:cd:3f:bf:e5:db:10:80:03:1b:0b:
b2:09:07:16:81:43:5e:d4:92:23:c7:e0:62:6a:e6:c7:e5:b3:
3b:11:47:24:7c:70:e9:08:c0:d4:bb:07:ee:9d:9d:8e:48:88:
02:68:c1:0b:94:57:4f:5c:7f:26:c0:a6:e3:6e:96:9d:fa:d7:
80:f4:14:28:4f:49:79:31:c4:a5:a0:57:ea:31:fc:dd:1b:c2:
ba:35:57:42:9c:b1:2a:24:87:49:9a:c6:67:16:f3:24:6c:cc:
fe:59:22:c9:25:ed:3b:98:87:dd:8c:95:18:a4:16:cc:8e:e0:
42:f0:de:f6:b0:dd:3d:5f:11:10:06:6a:c8:80:3b:d7:19:4e:
a2:50:7c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:07:12 2026 by rpki-client