
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
File: W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json)
Hash identifier: 2CVFzbgMn5jC3UnHvVjfZ2pQWQ6UW+anN2c0PIDkHx4=
Subject key identifier: 9F:CF:AA:4A:DA:0F:C5:80:22:3F:D6:35:7D:5F:C1:0E:81:30:CE:8E
Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7
Certificate issuer: /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
Certificate serial: 034D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
Manifest number: 0346
Signing time: Wed 19 Aug 2026 01:21:47 +0000
Manifest this update: Wed 19 Aug 2026 01:21:46 +0000
Manifest next update: Wed 26 Aug 2026 01:21:46 +0000
Files and hashes: 1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: inE6sQNBaf04K2Zs5LiE1X4EyBHGbTpBoP+9OU9AfTc=)
2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: TnwXtb5MfhCK20XeLeq1l+qvHKIr2uVnJlZNM+FxEW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl
rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845 (0x34d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAB94, serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
Validity
Not Before: Aug 19 01:21:46 2026 GMT
Not After : Aug 26 01:21:46 2026 GMT
Subject: CN=6a85052a-fa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:b9:58:84:29:0f:e2:d5:0d:0b:e8:93:54:
07:7c:f1:e4:c9:61:49:a6:d4:b9:86:c8:16:b2:ed:
41:c9:7f:9c:28:4f:d7:2d:29:e9:e2:a1:ae:45:a7:
fe:86:d4:68:47:d7:af:19:0c:55:d2:4a:96:e8:57:
7d:f8:a6:c9:f8:be:db:40:33:55:d1:10:7a:d8:39:
c8:44:5c:7d:32:d5:d6:ea:f3:0d:ae:59:dd:4a:04:
21:f3:95:31:55:46:f1:40:df:48:d7:df:34:bb:be:
92:9b:a1:8a:8a:df:d4:80:b2:af:f0:d4:ab:be:dd:
39:2d:65:14:0d:c0:e0:62:cd:f9:61:6d:14:7e:04:
fd:9b:3a:a3:11:20:76:9a:80:33:98:29:9d:14:b9:
4c:a1:c3:f0:46:a4:e0:46:1f:07:c4:fa:f8:3d:0e:
b0:fa:53:6a:f4:52:d9:97:e0:05:36:40:1f:86:55:
12:a1:c0:63:c5:50:06:22:cd:84:b2:46:17:25:0a:
33:89:4e:4b:66:a2:c8:c7:82:f8:bf:80:b1:4c:68:
e8:53:0b:c4:21:98:40:07:59:67:a8:b0:a1:d8:2b:
72:8c:f2:1f:f3:97:c8:d8:61:1e:ef:47:d4:8e:10:
60:08:22:94:79:23:28:48:fe:73:21:f9:3a:12:fc:
ff:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CF:AA:4A:DA:0F:C5:80:22:3F:D6:35:7D:5F:C1:0E:81:30:CE:8E
X509v3 Authority Key Identifier:
keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:2f:a3:a4:2c:13:49:71:bf:c1:1b:99:43:79:c1:6b:ec:20:
29:5a:1c:cd:e8:fb:27:54:20:6d:61:23:db:d0:7c:89:f2:99:
41:7b:ce:d4:26:e0:de:6a:21:55:91:eb:00:0d:1d:9f:28:49:
90:e0:e7:6a:3a:61:69:bf:e0:3a:1f:a9:1f:93:cb:eb:54:af:
2f:ea:52:a3:c6:fd:8e:4d:60:11:6e:b1:3f:c6:84:16:22:e2:
45:47:5c:0c:fa:96:9c:40:34:86:fd:3f:58:65:d6:25:63:82:
5b:5f:3b:41:58:db:06:bd:a9:69:57:8e:09:06:66:11:b0:6c:
97:b4:55:a6:dd:1c:82:c9:a9:d9:06:34:69:41:d2:47:76:82:
18:c3:c1:c8:c9:fd:76:e8:47:54:38:ce:3d:6c:d8:04:a7:db:
15:ba:0f:ed:e0:a1:69:72:c3:d6:2a:07:2d:0c:51:cd:71:9f:
c3:6f:70:4d:ea:a6:63:cc:2f:13:59:6d:57:fb:b2:60:a1:5f:
29:cd:c1:ea:67:84:9f:eb:2a:05:76:0d:0f:e4:3c:1c:1c:59:
4a:59:79:a7:77:0d:a7:56:f5:6e:ff:45:71:fa:7c:c1:79:09:
44:eb:e2:5c:b0:02:aa:2f:bf:02:37:1e:d1:53:68:cf:b4:a5:
15:5e:6d:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFCOTQxMTAvBgNVBAUTKDVCNkE3MDBDRUUxQTUzRDU1MTlFNUEyNUM2NEQxQUQy
QkEzN0NEQTcwHhcNMjYwODE5MDEyMTQ2WhcNMjYwODI2MDEyMTQ2WjAYMRYwFAYD
VQQDEw02YTg1MDUyYS1mYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz+S5WIQpD+LVDQvok1QHfPHkyWFJptS5hsgWsu1ByX+cKE/XLSnp4qGuRaf+
htRoR9evGQxV0kqW6Fd9+KbJ+L7bQDNV0RB62DnIRFx9MtXW6vMNrlndSgQh85Ux
VUbxQN9I1980u76Sm6GKit/UgLKv8NSrvt05LWUUDcDgYs35YW0UfgT9mzqjESB2
moAzmCmdFLlMocPwRqTgRh8HxPr4PQ6w+lNq9FLZl+AFNkAfhlUSocBjxVAGIs2E
skYXJQoziU5LZqLIx4L4v4CxTGjoUwvEIZhAB1lnqLCh2CtyjPIf85fI2GEe70fU
jhBgCCKUeSMoSP5zIfk6Evz/fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/Pqkra
D8WAIj/WNX1fwQ6BMM6OMB8GA1UdIwQYMBaAFFtqcAzuGlPVUZ5aJcZNGtK6N82n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUI5NC83MDcwMjNGQTE2
QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5VlJubG9seGswYTBybzN6
YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1cycHdETzRhVTlWUm5sb2x4azBhMHJvM3phYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUI5NC83MDcwMjNGQTE2QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5
VlJubG9seGswYTBybzN6YWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFy+jpCwTSXG/wRuZQ3nBa+wgKVoczej7J1QgbWEj29B8ifKZQXvO1Cbg3moh
VZHrAA0dnyhJkODnajphab/gOh+pH5PL61SvL+pSo8b9jk1gEW6xP8aEFiLiRUdc
DPqWnEA0hv0/WGXWJWOCW187QVjbBr2paVeOCQZmEbBsl7RVpt0cgsmp2QY0aUHS
R3aCGMPByMn9duhHVDjOPWzYBKfbFboP7eChaXLD1ioHLQxRzXGfw29wTeqmY8wv
E1ltV/uyYKFfKc3B6meEn+sqBXYND+Q8HBxZSll5p3cNp1b1bv9Fcfp8wXkJROvi
XLACqi+/Ajce0VNoz7SlFV5trQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:55 2026 by rpki-client