
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json)
Hash identifier: 2rmm5blEte6d40UTpvQAeb8QbbENeaTkShVDKZFLaLs=
Subject key identifier: 86:03:0E:CC:D6:25:A4:CA:B0:72:E4:8B:E6:AA:C2:63:2A:0A:E6:4B
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0C2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
Manifest number: 0BCE
Signing time: Sun 26 Apr 2026 18:58:52 +0000
Manifest this update: Sun 26 Apr 2026 18:58:51 +0000
Manifest next update: Sun 03 May 2026 18:58:51 +0000
Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: eJiinJsi25/NSSCQK4gXM2jyqo6dGX8MmA9wlrcbFGo=)
2: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: M3o2rbRfq9TsNUJCS4ZbyowL8r51/zxaOuBDAztIJG0=)
3: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: zmT4huKs28Qo4c8cgWG60cK/QVsyyHKfdVgREmP58ec=)
4: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: vQQV0G1oE2RonZYgcaeEDVU+ZU9gw3CgzN6h3bxF4OI=)
5: A30B6882B3DE11F0B2D83330C4F9AE02.roa (hash: N1gpxY1Qmu9TXM+UsBN7G4a19/a7C7ui0EX50hEj8GE=)
6: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: uKOTbNBLAeF55zkPNPreuMeOCu0FLlIbOK5YGifFFXY=)
7: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: OeaYPNBUtTPvim9HMxt2o8TBmHEZXyqHblAeC5l7mS0=)
8: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: RUrsKpZBh2bHefYwp4oJVAW6UCst5icc8lXVG39cTUM=)
9: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: OT9brcicmctK+apt1pWBL6MJ8CCpv1ESq3NW6ajmaY8=)
10: 12BE5F962DA511F1AB5ACB70A2833773.roa (hash: nvQami5BEJoZvrDF1xZRqzGeIWI8jjq/huhtnN4wEMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 18:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3114 (0xc2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Apr 26 18:58:51 2026 GMT
Not After : May 3 18:58:51 2026 GMT
Subject: CN=69ee606c-12d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2f:28:83:17:c3:11:7c:24:90:03:60:88:ad:
85:8e:1f:f2:57:fb:63:a6:e9:96:76:40:27:0d:42:
c0:6a:8a:4e:00:b3:f2:dd:74:2f:49:e9:ea:87:de:
4a:25:9c:82:b8:a8:f7:9b:15:f6:bb:19:17:d3:1b:
0d:74:0f:0e:92:fd:a0:35:65:57:b4:67:ff:db:fb:
8d:38:73:31:cc:07:a7:e8:73:65:ed:ad:6d:4d:7c:
75:01:0b:41:5a:40:4c:de:52:8d:c9:9e:c9:95:a9:
25:ff:ed:6a:a4:0e:06:77:ae:59:28:ff:31:ed:f1:
8b:cf:c2:ad:cc:31:dc:61:58:8e:98:9c:bd:9f:c0:
e8:d3:c1:bc:c0:7c:59:ba:17:57:85:a4:78:7f:44:
4e:9c:52:e1:b7:b7:de:be:03:f4:d4:67:5b:95:6d:
7f:40:bf:2a:b0:a2:36:8f:50:8a:15:35:80:47:93:
45:e4:84:cd:64:ba:ed:98:60:a5:f9:9c:5c:76:5f:
9d:72:0d:49:ef:1a:2b:90:a0:8a:dd:73:c2:b2:49:
ec:52:db:90:e6:73:b0:c3:a9:38:3c:85:0c:c4:7c:
dc:99:bf:0b:23:ec:96:c8:4c:d8:9e:3d:0b:21:72:
3a:af:6f:a0:44:f1:53:9b:d8:40:38:81:c5:14:c4:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:03:0E:CC:D6:25:A4:CA:B0:72:E4:8B:E6:AA:C2:63:2A:0A:E6:4B
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:95:c1:5c:f2:b8:fb:df:ac:1a:79:ad:eb:df:05:97:d8:2c:
a5:8d:6e:1b:f3:b0:5a:78:fc:f0:15:b7:9c:01:dd:0c:e1:14:
97:35:52:4d:8a:30:dc:33:4b:58:1b:94:2d:a8:f3:ad:5a:cf:
4a:cb:b8:c5:ff:99:51:a3:3a:d8:94:bd:85:7f:16:ff:37:c5:
02:67:14:a1:d7:59:72:d5:52:30:22:a9:7a:4f:ee:e1:17:19:
a4:77:21:d1:08:2a:ed:85:ae:b0:10:88:53:1f:a3:ff:22:b5:
71:3d:f4:97:f6:c2:6d:2d:86:76:58:80:41:af:4b:0f:aa:c4:
4a:91:ba:d4:7a:30:fa:89:58:6f:b0:67:57:a2:2e:e1:9b:85:
f7:17:fa:9b:e6:03:9b:9d:78:78:49:f2:73:6b:d7:b6:43:52:
48:cc:6a:ec:e8:15:ad:51:ef:8c:f7:88:27:bb:a2:fb:ac:43:
cc:01:25:2d:3b:e1:c6:5b:b1:47:61:64:1b:2e:19:0e:f0:02:
da:38:f6:d7:87:ec:fc:bb:66:d8:09:64:e7:79:b1:bc:35:b7:
76:b9:db:7b:a6:da:41:1c:df:2f:64:e1:e1:33:d0:e7:4a:d0:
ad:b6:c6:d4:a1:ab:af:78:ae:fe:ff:dd:7a:66:a8:e6:27:20:
c8:61:b3:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB
OTNDMjYzQUEwHhcNMjYwNDI2MTg1ODUxWhcNMjYwNTAzMTg1ODUxWjAYMRYwFAYD
VQQDEw02OWVlNjA2Yy0xMmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAky8ogxfDEXwkkANgiK2Fjh/yV/tjpumWdkAnDULAaopOALPy3XQvSenqh95K
JZyCuKj3mxX2uxkX0xsNdA8Okv2gNWVXtGf/2/uNOHMxzAen6HNl7a1tTXx1AQtB
WkBM3lKNyZ7Jlakl/+1qpA4Gd65ZKP8x7fGLz8KtzDHcYViOmJy9n8Do08G8wHxZ
uhdXhaR4f0ROnFLht7fevgP01GdblW1/QL8qsKI2j1CKFTWAR5NF5ITNZLrtmGCl
+Zxcdl+dcg1J7xorkKCK3XPCsknsUtuQ5nOww6k4PIUMxHzcmb8LI+yWyEzYnj0L
IXI6r2+gRPFTm9hAOIHFFMRp2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYDDszW
JaTKsHLki+aqwmMqCuZLMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2
NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5
MnlUMmlPYkMwYi1wUENZNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAy5XBXPK4+9+sGnmt698Fl9gspY1uG/OwWnj88BW3nAHdDOEUlzVSTYow3DNL
WBuULajzrVrPSsu4xf+ZUaM62JS9hX8W/zfFAmcUoddZctVSMCKpek/u4RcZpHch
0Qgq7YWusBCIUx+j/yK1cT30l/bCbS2GdliAQa9LD6rESpG61How+olYb7BnV6Iu
4ZuF9xf6m+YDm514eEnyc2vXtkNSSMxq7OgVrVHvjPeIJ7ui+6xDzAElLTvhxlux
R2FkGy4ZDvAC2jj214fs/Ltm2Alk53mxvDW3drnbe6baQRzfL2Th4TPQ50rQrbbG
1KGrr3iu/v/demao5icgyGGz1Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:54:36 2026 by rpki-client