
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json)
Hash identifier: 1bRDBl67DXOOn1DAxBSlf4khaG0F8f/Iccf82guUf4I=
Subject key identifier: 2D:26:D3:F4:CE:89:51:3D:B3:8E:28:B1:74:63:BC:1F:83:E2:E3:21
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0C10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
Manifest number: 0BB5
Signing time: Thu 12 Mar 2026 18:51:39 +0000
Manifest this update: Thu 12 Mar 2026 18:51:39 +0000
Manifest next update: Thu 19 Mar 2026 18:51:39 +0000
Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: ZhCk3vaAcsrQz6/4UN4M0N5OPTtqcbokh/OMTDh/tc4=)
2: A30B6882B3DE11F0B2D83330C4F9AE02.roa (hash: N1gpxY1Qmu9TXM+UsBN7G4a19/a7C7ui0EX50hEj8GE=)
3: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: zmT4huKs28Qo4c8cgWG60cK/QVsyyHKfdVgREmP58ec=)
4: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: vQQV0G1oE2RonZYgcaeEDVU+ZU9gw3CgzN6h3bxF4OI=)
5: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: OeaYPNBUtTPvim9HMxt2o8TBmHEZXyqHblAeC5l7mS0=)
6: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: M3o2rbRfq9TsNUJCS4ZbyowL8r51/zxaOuBDAztIJG0=)
7: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: RUrsKpZBh2bHefYwp4oJVAW6UCst5icc8lXVG39cTUM=)
8: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: uKOTbNBLAeF55zkPNPreuMeOCu0FLlIbOK5YGifFFXY=)
9: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: OT9brcicmctK+apt1pWBL6MJ8CCpv1ESq3NW6ajmaY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 18:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3088 (0xc10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Mar 12 18:51:39 2026 GMT
Not After : Mar 19 18:51:39 2026 GMT
Subject: CN=69b30b3b-eb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:04:f3:a4:4d:37:b9:db:de:3e:43:a7:69:
73:59:9e:26:75:02:f2:97:6c:c3:89:46:67:9f:25:
72:f3:2f:3f:00:1d:e0:e8:24:db:f8:83:f7:9d:4a:
65:d5:78:9f:3e:77:69:db:5f:74:80:ef:a4:80:8b:
b7:38:39:03:db:f2:f7:16:54:20:b1:1c:6c:cd:ec:
30:4e:a9:7d:b3:6a:d0:43:2d:a4:2b:b7:0d:50:42:
c6:bc:1b:47:51:90:7e:5b:8f:23:46:5e:42:50:69:
02:49:bc:bd:e4:91:a8:e4:ee:02:82:b8:8d:c9:f5:
15:ce:52:eb:0d:89:a9:36:5e:59:d4:26:dc:5e:2f:
dd:f6:19:eb:0d:6d:73:5a:5c:53:cf:3d:56:ea:a6:
7b:0b:44:7c:1f:7c:03:be:b6:bb:bb:54:83:5a:d1:
f3:cd:3d:8d:ac:35:e7:3c:64:8f:95:25:60:c8:98:
df:05:17:42:ad:51:46:46:15:24:f8:49:7c:6b:15:
21:37:ac:af:44:c4:0f:91:7a:f2:64:be:8e:e1:06:
b9:e5:aa:6d:00:a4:1b:dd:bc:80:c8:68:b7:a5:bd:
52:28:e3:d8:09:97:62:d7:49:82:ca:ae:ac:8f:ca:
6b:d2:47:20:f8:4a:78:e1:63:b0:e5:90:50:96:69:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:26:D3:F4:CE:89:51:3D:B3:8E:28:B1:74:63:BC:1F:83:E2:E3:21
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:d9:e2:65:14:4c:92:18:f4:24:7c:bb:82:ad:12:6a:53:eb:
32:d2:57:71:18:a1:c6:b1:18:02:29:95:d9:00:cb:3e:aa:1a:
26:8f:e7:73:17:4c:8e:ff:fb:81:a0:03:92:97:23:a5:cd:f2:
bb:00:43:cf:dd:91:37:d2:c9:27:9e:91:5f:1d:78:2e:94:83:
98:db:b7:9b:a7:6a:7c:84:5f:a9:8b:05:10:16:80:17:49:55:
35:5b:66:c7:52:85:8b:f9:7a:fc:cb:37:08:3c:a3:c3:da:e8:
14:19:2d:3c:6c:d1:50:b2:8b:70:1e:d5:c1:27:1f:dd:81:79:
ab:cd:52:b6:5a:87:3f:72:41:3d:5c:bd:43:21:e0:0b:e4:2a:
bd:64:95:28:32:0e:e0:05:4e:be:23:50:13:26:bb:40:2c:14:
ee:ed:97:11:54:a6:9b:c8:0f:33:4f:78:b6:2d:4c:6b:59:d2:
dc:69:da:77:a1:50:2a:77:d7:bf:ea:46:d0:95:a6:a0:4f:0c:
c1:57:2e:78:22:5d:b3:1d:f4:a7:63:32:2a:68:16:c2:05:80:
61:c4:e7:3a:ce:99:b6:f9:69:a1:f2:be:71:ec:7c:3d:bb:19:
ee:98:43:9b:75:16:87:b4:3c:b4:6a:bb:87:1d:30:32:be:75:
d0:31:f3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:12 2026 by rpki-client