
$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
File: W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json)
Hash identifier: wxBLeOyb8VuUA2Nz8Bv1+tPXdTljhJP2jC3X9NLG7/k=
Subject key identifier: A2:C0:48:BD:39:64:53:5B:34:F0:AE:23:80:50:6C:F4:6F:7F:8E:AC
Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Certificate serial: 03CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
Manifest number: 03BF
Signing time: Sun 05 Apr 2026 00:24:23 +0000
Manifest this update: Sun 05 Apr 2026 00:24:23 +0000
Manifest next update: Sun 12 Apr 2026 00:24:23 +0000
Files and hashes: 1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: CsaUY+lzBQwLT0DnzKy4dcUuSE6dzUivRDPFtmd25Jg=)
2: 41789B66CC1611EC80603209C4F9AE02.roa (hash: x8CNlILI4xwGzQizPMapiMVh5w4V5MvV0nMmJ++GLls=)
3: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: xA0rurA/PEYXlJ3WLFAqJrvgYkaEX5VuqrE31iWX5bs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973 (0x3cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D
Validity
Not Before: Apr 5 00:24:23 2026 GMT
Not After : Apr 12 00:24:23 2026 GMT
Subject: CN=69d1abb7-d073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:b8:47:4a:4d:75:dd:64:7e:30:0b:e0:e9:
2f:b6:df:ad:57:58:ee:aa:c2:70:3e:cb:1b:0e:70:
45:8e:5e:9f:29:a7:7d:1a:24:0c:2b:72:a3:dc:c6:
79:e7:64:8c:33:d0:a1:c8:ce:ae:2a:f7:80:69:b8:
99:5c:1f:12:40:eb:c0:a5:a6:eb:25:59:4b:05:68:
27:f1:b4:6d:47:27:fa:7d:32:10:98:de:f8:96:14:
09:26:25:08:36:1c:81:4d:26:69:47:d2:67:c0:68:
6c:fe:52:b0:af:2b:82:97:03:4c:fd:69:4a:86:f4:
d0:60:92:7d:0e:d7:59:6e:2f:31:59:01:c9:19:75:
b0:f0:22:d5:3c:e3:45:e1:ed:2b:60:39:20:ab:0e:
03:96:bc:17:c1:4c:91:73:08:99:88:dc:25:b8:75:
b5:4e:ea:ef:64:02:53:d9:ae:e6:6c:11:f6:cf:c6:
6b:c8:82:57:3e:a2:dc:d0:8e:43:d5:58:29:26:92:
44:c7:8c:3c:29:71:56:02:cf:94:ca:1b:90:96:11:
a5:71:8a:d9:23:6a:e6:16:38:17:55:5a:16:8b:8f:
98:18:6e:1b:5c:63:d5:eb:2c:8a:fe:6f:60:78:1f:
1a:eb:97:f5:e3:37:07:1b:1e:e3:b0:79:fe:ac:e6:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C0:48:BD:39:64:53:5B:34:F0:AE:23:80:50:6C:F4:6F:7F:8E:AC
X509v3 Authority Key Identifier:
keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:54:a0:82:98:b9:ed:b9:b1:55:49:f9:14:73:49:be:4f:80:
1e:a3:26:72:3d:7f:12:74:4e:91:af:38:ca:43:76:cf:f9:e4:
b0:a2:2f:8d:c9:15:96:1a:b7:eb:f9:ed:f8:65:3b:99:68:b5:
36:3b:5a:7a:20:bf:7a:67:bb:7a:ba:35:15:89:13:bf:92:80:
4a:db:00:7b:43:64:da:6b:76:1a:c7:bb:f4:c7:05:ee:ac:af:
6b:c8:23:8b:1e:b0:88:9d:82:0d:35:40:f0:31:89:de:d8:f9:
a2:19:d4:a1:fb:26:9b:1e:d6:f2:17:17:c5:88:5c:64:58:1a:
81:99:48:f0:11:c7:2b:5b:27:2f:e7:1e:d2:2b:32:a4:36:db:
5f:3d:51:10:d7:21:cd:7b:0b:0a:7f:3b:b3:bd:17:d4:a2:d8:
0c:57:fa:d1:0b:f3:ab:86:a0:18:af:2b:c0:0d:89:9f:7c:4c:
4d:e8:3f:f3:3d:50:b5:0c:7a:6e:28:ed:69:1a:2b:d8:e1:a2:
45:ce:8b:51:f2:10:a4:2b:a4:31:87:d2:77:08:5e:34:13:b8:
9d:cb:dc:a4:2d:bc:44:40:3a:f3:e0:b5:f2:e0:fe:8e:ab:e6:
67:a9:7c:64:ce:d6:7f:39:b2:55:c5:0d:26:47:4e:ba:69:bb:
6e:dc:f0:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzg5RjkxMTAvBgNVBAUTKDVCQThEMDVEQzk5QTkzMTA0NjJDNjNDNUQwMjY5RjVF
ODg1RTQ4OUQwHhcNMjYwNDA1MDAyNDIzWhcNMjYwNDEyMDAyNDIzWjAYMRYwFAYD
VQQDEw02OWQxYWJiNy1kMDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvVC4R0pNdd1kfjAL4Okvtt+tV1juqsJwPssbDnBFjl6fKad9GiQMK3Kj3MZ5
52SMM9ChyM6uKveAabiZXB8SQOvApabrJVlLBWgn8bRtRyf6fTIQmN74lhQJJiUI
NhyBTSZpR9JnwGhs/lKwryuClwNM/WlKhvTQYJJ9DtdZbi8xWQHJGXWw8CLVPONF
4e0rYDkgqw4DlrwXwUyRcwiZiNwluHW1TurvZAJT2a7mbBH2z8ZryIJXPqLc0I5D
1VgpJpJEx4w8KXFWAs+UyhuQlhGlcYrZI2rmFjgXVVoWi4+YGG4bXGPV6yyK/m9g
eB8a65f14zcHGx7jsHn+rOYBmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKLASL05
ZFNbNPCuI4BQbPRvf46sMB8GA1UdIwQYMBaAFFuo0F3JmpMQRixjxdAmn16IXkid
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODlGOS9GRDgwNkJBMkND
MTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4QkdMR1BGMENhZlhvaGVT
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c2alFYY21ha3hCR0xHUEYwQ2FmWG9oZVNKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
ODlGOS9GRDgwNkJBMkNDMTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4
QkdMR1BGMENhZlhvaGVTSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYFSggpi57bmxVUn5FHNJvk+AHqMmcj1/EnROka84ykN2z/nksKIvjckVlhq3
6/nt+GU7mWi1NjtaeiC/eme7ero1FYkTv5KAStsAe0Nk2mt2Gse79McF7qyva8gj
ix6wiJ2CDTVA8DGJ3tj5ohnUofsmmx7W8hcXxYhcZFgagZlI8BHHK1snL+ce0isy
pDbbXz1RENchzXsLCn87s70X1KLYDFf60Qvzq4agGK8rwA2Jn3xMTeg/8z1QtQx6
bijtaRor2OGiRc6LUfIQpCukMYfSdwheNBO4ncvcpC28REA68+C18uD+jqvmZ6l8
ZM7WfzmyVcUNJkdOumm7btzwNA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:47:18 2026 by rpki-client