
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
File: Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft (raw, json)
Hash identifier: rYiyj1sw+9WEqofxUgRgXOvC6zaHqGds6NCTXcjprlM=
Subject key identifier: E9:C4:8F:F8:09:9D:4B:CF:D8:F7:24:B6:42:7A:BF:43:6B:A0:0E:E2
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Certificate issuer: /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial: 114E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
Manifest number: 10D2
Signing time: Sat 20 Jun 2026 17:17:11 +0000
Manifest this update: Sat 20 Jun 2026 17:17:10 +0000
Manifest next update: Sat 27 Jun 2026 17:17:10 +0000
Files and hashes: 1: Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl (hash: O0qTMtwqBK8gLgXzsCjEdh6QThIGS9wcZmKltz8vcPg=)
2: CC320712ACE011EAB535D034C4F9AE02.roa (hash: ATSoIcgvhIoB1w29pbN50AH77sAvyF3PhL5dixTk+JA=)
3: ED4C74EC5B2911EDAC608856C4F9AE02.roa (hash: c4KIZ7sVtzVDPX25+FzQ/O+y1BOxGSAb3CkDDL2gT68=)
4: 04C5DE76FF2711EAB7D5F235C4F9AE02.roa (hash: eb3+tHV1wRLLEmC3kj0RQw3MnpJ2PGa07z+N4EUcBA8=)
5: 9DE197A2168511EAB282BB44C4F9AE02.roa (hash: okPNLIYHqUe2+LRXDuE5SiF4zzmmje5rGzctyXR1y8I=)
6: F34FF6B69C3B11EABC59DA11C4F9AE02.roa (hash: OLxb4szEa42sVAsVtahDW9OACGax9w0AvXegNjux5TA=)
7: 9D164714168511EAB282BB44C4F9AE02.roa (hash: DSZNEJ4bi4o5CgyqC1+84x7Rm378M2iKs/nwItolD0A=)
8: 884A03F4447111EC83674068C4F9AE02.roa (hash: MesMGQxH0Xw4s7Fn2Idh7Qa7VWkhHaWaah+Jq/emd28=)
9: 727F33429FAD11EAAD1A6744C4F9AE02.roa (hash: juU4sbQRoi0FHuryZbA2eU5v383vXepIosrtYBH3gtg=)
10: B7D67B4ECC3011EA9B54C679C4F9AE02.roa (hash: EE7xiFt8zHUSdbXxMdyXG6Wpd6uFiY1gYTraSn4pB98=)
11: F47561669C3B11EABC59DA11C4F9AE02.roa (hash: x8RxxSceiWsll8aKdp4onnVgfhxxvJp6geOEYhZHJgc=)
12: A8DA1B1E9EE511EA890A7220C4F9AE02.roa (hash: wWSjcw2Ok0AjX38Jalp5jeYRBwKOimHHIAdxglDe+3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Jun 2026 17:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4430 (0x114e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Validity
Not Before: Jun 20 17:17:10 2026 GMT
Not After : Jun 27 17:17:10 2026 GMT
Subject: CN=6a36cb17-17dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:bd:29:d3:ec:51:e4:fd:da:7f:90:5e:c1:
ed:f7:55:ec:d9:54:12:14:00:24:6c:81:b7:46:68:
bf:69:7a:b6:2b:ad:e5:77:6a:fe:a5:af:04:2e:b6:
66:d8:40:6a:6d:ff:9a:45:fe:c9:b7:7b:13:6d:13:
79:ab:11:28:c0:cb:26:c4:0e:01:b3:d5:f1:51:70:
cf:f8:b8:01:91:0b:d4:df:e9:e1:f3:b7:61:59:66:
5d:3e:97:c3:73:cc:f1:71:36:fd:ba:cb:95:22:95:
7d:02:45:cd:87:f0:f4:09:2f:72:b5:0d:af:c5:10:
3c:98:ad:b1:78:b7:1b:64:f4:f8:0d:83:20:d0:02:
7c:7c:80:c5:21:63:a1:e3:8d:8d:eb:ff:cb:21:5d:
ac:c2:57:2a:21:50:b2:1a:1f:6b:1d:d0:05:e8:ad:
8c:68:b7:d6:1d:8c:d2:54:0b:e1:f1:c8:68:92:42:
bf:b2:53:02:65:ed:9d:29:70:54:5f:04:4b:a1:5b:
ff:69:4b:0a:18:69:ea:8c:c2:1a:56:0b:c9:61:5c:
b2:4a:2d:7c:f9:88:ba:ba:59:04:bc:85:13:ff:80:
00:0c:85:7f:39:73:4c:04:6d:1d:e6:82:7a:d9:72:
27:6d:da:39:a4:3c:e4:55:74:c1:b8:f1:1b:07:96:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C4:8F:F8:09:9D:4B:CF:D8:F7:24:B6:42:7A:BF:43:6B:A0:0E:E2
X509v3 Authority Key Identifier:
keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:20:ad:82:7d:a2:a9:79:56:ec:2d:0a:c0:10:39:7a:85:a6:
2e:6c:73:f1:fc:b1:64:0c:d1:7e:d4:8c:d3:df:24:cc:0a:21:
ee:53:8e:26:d8:c2:ed:8e:76:3b:d2:c0:89:92:67:26:f1:a9:
1c:52:1b:6c:5e:fa:ec:84:40:5c:55:00:d6:af:e1:7c:19:4e:
7c:09:b5:5d:0e:8a:b4:ff:aa:ed:74:b9:f0:66:d8:5c:d2:68:
f9:f8:43:f5:df:6b:ae:f9:df:6c:4c:66:c0:6e:ae:1f:27:9c:
70:b5:c8:a2:63:0f:2b:40:f0:82:c7:2d:21:b2:e5:ac:47:7c:
ee:1a:f6:1c:89:e0:e0:75:e9:41:69:35:b4:c2:0d:35:44:88:
9a:96:3e:cf:ed:b9:3b:f7:da:7b:ce:97:81:06:8e:72:62:88:
9d:0c:3f:f2:c3:f5:d0:88:4f:4e:b6:3f:73:6b:c7:ba:8e:e5:
e2:0c:9d:78:70:73:68:fc:fc:67:03:21:a6:7c:51:fe:0d:98:
1b:1b:09:fe:f7:69:82:38:89:3e:15:4b:86:78:10:05:c7:ff:
90:b5:13:2f:0c:1d:1e:61:21:bd:25:a5:b5:ed:86:0f:c8:56:
b4:60:c7:10:51:8c:01:9b:40:eb:5f:6f:a4:27:ae:64:97:75:
9b:14:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 07:15:45 2026 by rpki-client