
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft
File: W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json)
Hash identifier: WjhE+mZ8nt2sBOAnK1Lv6Bzyv4X4vFYoYJZr02uVLQs=
Subject key identifier: 32:20:27:75:FC:3E:7B:F9:6A:FE:1D:58:AC:DE:E9:88:8E:51:4E:E6
Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD
Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD
Certificate serial: 01EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft
Manifest number: 01D9
Signing time: Mon 01 Jun 2026 04:35:16 +0000
Manifest this update: Mon 01 Jun 2026 04:35:16 +0000
Manifest next update: Mon 08 Jun 2026 04:35:16 +0000
Files and hashes: 1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: fXsNjvF83rNZhmeWr2ohpOCMhehavpq3QsGYa7RaWwA=)
2: 2D55C84C25CE11F0A36ACB18C4F9AE02.roa (hash: ubJqUF2IGrFRV6LySQWZVQd1AO/BSkWfNqfrHnBZLZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl
rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122DC4, serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD
Validity
Not Before: Jun 1 04:35:16 2026 GMT
Not After : Jun 8 04:35:16 2026 GMT
Subject: CN=6a1d0c04-e78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:27:b9:48:7e:65:df:8f:52:e2:f2:fe:0e:
6e:c6:91:42:7e:d0:79:90:7c:b4:df:5f:9c:62:07:
d7:e1:db:64:7a:c1:c4:61:a1:3c:61:06:01:c6:31:
d8:d9:29:a9:3a:03:a2:94:1a:01:8a:d7:39:08:52:
a1:d8:b7:32:9f:17:09:40:3e:c7:3b:4f:af:e9:6d:
d3:33:2a:0a:6c:10:e5:f2:e8:0e:70:69:ad:67:2d:
89:8f:f6:d4:81:93:31:60:65:d6:1a:bf:be:15:c7:
c6:5e:bc:af:84:84:22:f5:cd:07:da:d6:42:38:49:
36:78:31:16:11:28:22:79:8c:75:43:38:78:c4:e5:
59:3f:89:0d:af:18:8d:6d:64:6a:08:51:48:ba:4b:
fa:bf:a7:f6:f1:d7:da:49:fd:30:20:86:13:1e:84:
79:bc:1f:71:18:bc:7b:89:99:d2:46:d6:f1:f7:c0:
a9:0b:83:b3:bd:2e:58:ec:af:11:d0:f4:97:20:94:
8d:f9:96:cf:00:84:f8:ed:f4:73:03:ee:74:7d:d2:
e3:ea:69:9d:fb:8d:95:af:ef:6e:76:ff:81:43:c2:
6a:e7:c5:92:df:57:e3:74:a9:cd:8d:6d:50:14:09:
31:00:39:63:09:bd:f8:05:2e:89:7e:ce:1b:1f:2c:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:27:75:FC:3E:7B:F9:6A:FE:1D:58:AC:DE:E9:88:8E:51:4E:E6
X509v3 Authority Key Identifier:
keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:8c:5f:2d:15:03:10:57:bf:0a:23:62:88:51:78:2a:39:72:
e3:db:b8:5a:f6:a7:b8:f9:0f:e0:50:ca:3e:ed:5d:20:f3:f9:
5d:4b:9c:60:0c:c5:fb:f7:e0:94:09:a2:f2:ab:ca:d9:e2:f3:
f9:76:b9:ea:66:86:fb:7d:0e:50:7d:bd:cb:54:a2:23:d5:e8:
2e:92:24:44:0d:53:17:a9:b4:f2:e4:e1:1c:f5:41:0f:64:b8:
92:73:5e:e0:8c:8f:33:d7:16:e1:56:9a:fa:c5:4e:90:e0:71:
6b:80:47:30:66:3e:dc:42:cd:33:1c:20:21:dc:54:96:cf:9c:
fd:bd:4c:59:4d:35:a2:2f:75:31:6e:fa:71:82:83:83:26:c0:
81:9d:63:da:48:bb:5c:c5:d4:01:0a:98:eb:0a:24:81:b8:91:
09:e9:39:8a:f7:7f:13:b3:9b:b7:0a:f2:ab:38:ac:6b:a8:47:
1b:7d:df:f1:af:8d:17:10:57:01:56:86:2c:fc:c4:d2:ee:81:
93:4c:00:4a:6a:6e:3a:e0:eb:ea:a2:ad:db:f3:dc:cd:27:71:
19:95:74:62:69:b3:da:33:6a:52:c6:dd:58:5a:93:90:c3:21:
3e:66:23:19:fe:67:49:3b:99:4c:f9:d6:93:9d:24:35:36:09:
63:4b:50:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJEQzQxMTAvBgNVBAUTKDVCNDMwMEZFNDlBRUUwRTQxNUNDNjE5NzZDMDJCNUI5
QzAyMDRBQUQwHhcNMjYwNjAxMDQzNTE2WhcNMjYwNjA4MDQzNTE2WjAYMRYwFAYD
VQQDEw02YTFkMGMwNC1lNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx5EnuUh+Zd+PUuLy/g5uxpFCftB5kHy031+cYgfX4dtkesHEYaE8YQYBxjHY
2SmpOgOilBoBitc5CFKh2LcynxcJQD7HO0+v6W3TMyoKbBDl8ugOcGmtZy2Jj/bU
gZMxYGXWGr++FcfGXryvhIQi9c0H2tZCOEk2eDEWESgieYx1Qzh4xOVZP4kNrxiN
bWRqCFFIukv6v6f28dfaSf0wIIYTHoR5vB9xGLx7iZnSRtbx98CpC4OzvS5Y7K8R
0PSXIJSN+ZbPAIT47fRzA+50fdLj6mmd+42Vr+9udv+BQ8Jq58WS31fjdKnNjW1Q
FAkxADljCb34BS6Jfs4bHyxatwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDIgJ3X8
Pnv5av4dWKze6YiOUU7mMB8GA1UdIwQYMBaAFFtDAP5JruDkFcxhl2wCtbnAIEqt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkRDNC81QkVERDA1NEIz
MTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRPUVZ6R0dYYkFLMXVjQWdT
cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1cwTUFfa211NE9RVnpHR1hiQUsxdWNBZ1NxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkRDNC81QkVERDA1NEIzMTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRP
UVZ6R0dYYkFLMXVjQWdTcTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVoxfLRUDEFe/CiNiiFF4Kjly49u4WvanuPkP4FDKPu1dIPP5XUucYAzF+/fg
lAmi8qvK2eLz+Xa56maG+30OUH29y1SiI9XoLpIkRA1TF6m08uThHPVBD2S4knNe
4IyPM9cW4Vaa+sVOkOBxa4BHMGY+3ELNMxwgIdxUls+c/b1MWU01oi91MW76cYKD
gybAgZ1j2ki7XMXUAQqY6wokgbiRCek5ivd/E7Obtwryqzisa6hHG33f8a+NFxBX
AVaGLPzE0u6Bk0wASmpuOuDr6qKt2/PczSdxGZV0Ymmz2jNqUsbdWFqTkMMhPmYj
Gf5nSTuZTPnWk50kNTYJY0tQRA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:17:24 2026 by rpki-client