
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json)
Hash identifier: s3ahGdhCD552vSiVlp36XW5Xia1k/K6yy5YFTRY6VQo=
Subject key identifier: 8E:A0:00:51:AE:F8:9D:78:B0:86:B0:DB:35:6F:DA:46:30:D7:13:89
Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Certificate serial: 1AB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
Manifest number: 1AAC
Signing time: Tue 08 Sep 2026 16:22:02 +0000
Manifest this update: Tue 08 Sep 2026 16:22:02 +0000
Manifest next update: Tue 15 Sep 2026 16:22:02 +0000
Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: +WMB/7UUbJzgwIeEymoSjy8BxNMVPAeYOxfkd58TZZs=)
2: 885DA760AA8811E799348329C4F9AE02.roa (hash: LAi2UCH58zjiYPj7gMzUeS74kp81Vp9NAUy7vLyySVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 16:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6841 (0x1ab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Validity
Not Before: Sep 8 16:22:02 2026 GMT
Not After : Sep 15 16:22:02 2026 GMT
Subject: CN=6aa0362a-f95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:74:79:07:76:43:87:b1:63:11:60:07:5b:b6:
be:20:c8:6d:64:93:5e:5f:ef:86:02:54:b4:53:ea:
0a:05:82:e4:1b:ea:6e:e0:e2:c3:62:5e:3a:d6:85:
8d:fb:1a:8c:06:4f:e9:d7:68:4b:b9:4a:f0:23:8f:
a2:d4:66:bb:6c:b5:88:d5:18:ca:f3:bd:12:ce:20:
4c:e9:d7:7f:08:e5:67:ef:6e:0e:ed:8a:a2:ed:c0:
05:77:1b:bd:dd:e1:b8:2f:1d:51:44:8b:b5:29:ee:
32:db:5c:23:8c:de:da:70:8e:3b:3b:29:a2:94:51:
ba:12:08:cc:06:b3:44:fe:22:4f:ef:ee:7a:72:b8:
6b:41:bc:02:7b:ac:fb:45:85:3f:6f:bb:6c:8e:df:
0f:0d:5a:99:1a:89:52:1e:c7:d5:ea:f1:4b:97:6d:
38:fe:dd:a8:2f:37:87:17:48:a6:57:fc:d3:46:f5:
51:0b:23:9c:5f:90:c5:e7:91:38:57:49:cc:5c:c3:
3f:c3:68:e6:c9:1b:10:80:54:da:02:9f:ca:25:87:
ef:52:7c:db:7d:91:a5:08:b9:e8:18:28:7d:f1:38:
0a:a9:7d:c5:59:32:01:c7:38:15:86:50:4c:ac:32:
f8:58:5c:fb:7b:18:6a:b0:dc:83:61:c3:3d:41:10:
cc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A0:00:51:AE:F8:9D:78:B0:86:B0:DB:35:6F:DA:46:30:D7:13:89
X509v3 Authority Key Identifier:
keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:32:cc:1c:51:51:bf:77:df:93:ca:0c:0f:dc:0b:4b:bf:cb:
bf:7f:84:47:c3:b7:5a:74:94:a0:cf:09:6d:7b:29:cd:7c:5b:
04:10:cf:4b:67:41:55:2a:33:8f:1e:9e:6b:52:a8:b1:73:18:
65:33:07:5d:d8:3d:aa:60:0b:18:d6:70:95:c3:9c:b0:8c:83:
91:49:71:da:c1:e8:e1:e7:68:94:f3:d1:64:45:4a:9e:13:99:
2a:d0:89:d4:a9:2d:05:ba:7c:43:0e:f7:e8:b2:b7:1a:e1:f1:
6b:76:2c:14:ce:15:f4:97:72:8e:a5:6d:9b:7b:8c:d5:e9:df:
cc:f5:b1:96:58:15:be:7d:b3:41:e4:38:8b:06:ff:23:8f:24:
39:87:4a:fd:01:c8:99:a7:de:a5:1b:d0:40:92:09:1f:8f:01:
55:b7:7c:7b:e5:b2:96:cc:f8:9d:09:0a:e6:8c:44:56:e7:a8:
5d:56:fa:c1:c4:c3:a4:03:a5:e9:9f:a7:5f:7c:6b:0b:6f:3d:
b5:6d:dd:fd:fc:7c:52:c2:75:0d:f5:3c:ab:d4:36:1b:89:b5:
83:5b:5f:72:40:be:b5:85:fe:e8:31:cd:b2:b8:9f:c1:fb:99:
56:f0:bd:cb:dd:8d:57:f2:db:44:b2:b6:30:08:28:72:ef:77:
6d:fa:8a:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD
OTI4QkExNzMwHhcNMjYwOTA4MTYyMjAyWhcNMjYwOTE1MTYyMjAyWjAYMRYwFAYD
VQQDEw02YWEwMzYyYS1mOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjHR5B3ZDh7FjEWAHW7a+IMhtZJNeX++GAlS0U+oKBYLkG+pu4OLDYl461oWN
+xqMBk/p12hLuUrwI4+i1Ga7bLWI1RjK870SziBM6dd/COVn724O7Yqi7cAFdxu9
3eG4Lx1RRIu1Ke4y21wjjN7acI47OymilFG6EgjMBrNE/iJP7+56crhrQbwCe6z7
RYU/b7tsjt8PDVqZGolSHsfV6vFLl204/t2oLzeHF0imV/zTRvVRCyOcX5DF55E4
V0nMXMM/w2jmyRsQgFTaAp/KJYfvUnzbfZGlCLnoGCh98TgKqX3FWTIBxzgVhlBM
rDL4WFz7exhqsNyDYcM9QRDM5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6gAFGu
+J14sIaw2zVv2kYw1xOJMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw
MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ
NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFTLMHFFRv3ffk8oMD9wLS7/Lv3+ER8O3WnSUoM8JbXspzXxbBBDPS2dBVSoz
jx6ea1KosXMYZTMHXdg9qmALGNZwlcOcsIyDkUlx2sHo4edolPPRZEVKnhOZKtCJ
1KktBbp8Qw736LK3GuHxa3YsFM4V9JdyjqVtm3uM1enfzPWxllgVvn2zQeQ4iwb/
I48kOYdK/QHImafepRvQQJIJH48BVbd8e+Wylsz4nQkK5oxEVueoXVb6wcTDpAOl
6Z+nX3xrC289tW3d/fx8UsJ1DfU8q9Q2G4m1g1tfckC+tYX+6DHNsrifwfuZVvC9
y92NV/LbRLK2MAgocu93bfqKDA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:42:45 2026 by rpki-client