
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json)
Hash identifier: rbnmNmYgvDtxrihhg0hH6lEUG42E9wpBoF5jWNzdAvg=
Subject key identifier: 00:6F:98:66:8E:3B:96:F3:40:AA:AC:1D:EE:A9:50:10:7B:42:77:75
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0C7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
Manifest number: 0C18
Signing time: Thu 10 Sep 2026 18:55:10 +0000
Manifest this update: Thu 10 Sep 2026 18:55:09 +0000
Manifest next update: Thu 17 Sep 2026 18:55:09 +0000
Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: HR84Ig86H9BQG2MFq1MBHGy0RbH0PNycOuES6zf0NDA=)
2: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: w3uOUeW/FatR7+z01Z2HvN2GffooWt+q9F95kyByhRI=)
3: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: C1lJZU5Iy+mNJL9oPivtxsIEriNMccsRSKnbZ5DSjo4=)
4: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: FSDVyAO7ku9OlFpBuuGsvn65dxJw/I6Sh44G8o9Hakw=)
5: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: foBCGIBz0chOGLnj+WF0iY+sCw/0L3oyHMk8x+gdNIk=)
6: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: FHAY3Htwxch2FFTA3f0b/wxleH7q9MS7UbS2oOU+tmc=)
7: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: /0M2k5A9D07fvk6xgy1fvur/gcuYQ+EgRMIrK3fZt+g=)
8: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: x3tN005H61P1/+QDbepYrTGCbgsygiXxYL2KOeh1kJw=)
9: 12BE5F962DA511F1AB5ACB70A2833773.roa (hash: R5zAoICV1Khp7ZSKr9zmuPdSSnluyaeLcZGrxGttx1M=)
10: A30B6882B3DE11F0B2D83330C4F9AE02.roa (hash: EMvRGH6droakZyNHqPZRY7LB/x9Bj+nru0EHjbDXrOA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3198 (0xc7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Sep 10 18:55:09 2026 GMT
Not After : Sep 17 18:55:09 2026 GMT
Subject: CN=6aa2fd0e-e247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:07:e7:19:89:b8:c4:c0:f3:34:09:8e:37:
a0:5a:ec:f9:df:27:cd:07:de:63:49:84:c7:e9:9e:
ca:53:1c:e8:6c:bb:b8:29:b5:a1:83:4f:0f:24:02:
7c:42:13:a8:ac:1c:e2:6d:04:0d:e1:00:df:65:fa:
39:fc:f4:c7:60:c3:5a:45:02:40:eb:3e:0d:5c:e5:
8e:4b:6c:14:7f:ca:65:8d:e6:96:b6:7c:2b:35:66:
cd:2c:a1:84:98:6b:27:bd:38:d2:2d:bf:d8:7d:8d:
f6:ed:67:20:e1:f3:9b:bf:1e:35:a5:b3:15:42:af:
fe:af:50:c3:41:b6:0e:5e:f1:40:e3:48:24:1d:d3:
a0:be:42:cc:8c:16:9f:23:a7:e7:e0:61:ae:a3:ed:
2c:93:7d:a2:64:85:eb:3e:71:6e:b4:d5:2d:00:8b:
ec:1e:1f:af:d5:75:a7:f6:fe:18:20:25:40:12:f0:
c1:bb:49:a7:b8:29:7e:82:a2:8e:a5:89:61:1e:c6:
d4:e3:d1:9a:dc:48:f8:f2:9e:f1:f4:31:35:bb:0c:
5a:e8:fa:90:e5:2d:cb:ac:c2:c7:0d:1a:2d:7e:ff:
49:49:ab:6b:b6:d0:f0:3b:94:e6:ee:b4:99:11:a2:
a1:ef:37:0e:67:e6:e6:6b:b0:85:75:ff:6a:41:96:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6F:98:66:8E:3B:96:F3:40:AA:AC:1D:EE:A9:50:10:7B:42:77:75
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:4e:27:c1:d4:89:cb:17:03:f1:de:82:39:bf:32:75:1b:84:
26:59:4d:a0:f5:2a:0e:48:5f:91:88:ce:ca:e1:34:07:e1:28:
1a:f6:9a:b3:a9:46:49:be:f9:66:8b:44:00:b7:2a:8b:32:80:
c8:a3:fc:c0:5d:14:ec:49:cf:38:2e:66:d1:aa:a5:ed:8f:fb:
67:20:79:ec:56:c0:51:27:23:8b:08:b6:5b:ea:e2:09:ff:78:
fc:a7:51:94:c1:a3:d6:3f:7a:68:78:e4:a4:f7:52:b9:3e:a5:
a9:ec:19:33:14:10:df:f6:46:98:12:84:94:b7:e4:95:b4:a3:
89:f6:c6:6f:18:4e:87:a6:d0:4c:ec:6e:d4:75:68:f4:90:dd:
7d:92:26:66:09:d2:fb:fb:4d:26:3c:e4:e0:cb:dd:35:40:4f:
92:c7:8c:39:5c:a8:0f:e5:eb:90:e4:ae:d2:e6:1f:0d:37:d5:
62:97:0c:08:3a:fb:21:77:76:3f:01:51:4d:db:64:f7:cc:b1:
13:85:d9:5b:ce:0d:03:04:89:98:4f:89:f5:92:66:9c:af:d3:
77:2d:34:fc:cb:c7:94:27:fa:8c:67:4a:03:50:d7:9d:32:e3:
1e:74:e2:10:ef:3d:5a:99:8d:84:0a:54:90:31:f8:9b:a6:a1:
31:33:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:00:54 2026 by rpki-client