
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
File: W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json)
Hash identifier: pJx9XvzOCEBHUJ93P+RzjuCBZ4g3TFygBv44TUSIWv8=
Subject key identifier: 66:A8:47:96:98:32:CD:68:2D:28:EF:50:67:58:CB:D2:B1:72:3E:0A
Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7
Certificate issuer: /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
Certificate serial: 0330
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
Manifest number: 0329
Signing time: Tue 23 Jun 2026 01:11:53 +0000
Manifest this update: Tue 23 Jun 2026 01:11:52 +0000
Manifest next update: Tue 30 Jun 2026 01:11:52 +0000
Files and hashes: 1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: foWKQeWuVm+dZPSL9SkP0RpTVpl5yDgt0pDkiho/qas=)
2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: TnwXtb5MfhCK20XeLeq1l+qvHKIr2uVnJlZNM+FxEW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl
rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 01:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 816 (0x330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAB94, serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
Validity
Not Before: Jun 23 01:11:52 2026 GMT
Not After : Jun 30 01:11:52 2026 GMT
Subject: CN=6a39dd58-74ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d3:e9:45:69:9d:3f:a8:c3:e8:1a:92:50:5f:
09:12:0f:ab:88:fd:3f:6b:75:8f:e8:c2:2f:0e:2c:
76:d1:ea:94:00:12:f0:72:46:be:66:c7:eb:0f:fb:
e2:4f:93:7e:46:65:9c:43:21:98:bd:be:f3:58:c1:
81:21:2c:94:b5:7a:fe:54:65:55:92:07:99:81:84:
97:df:33:0b:da:de:b7:d1:15:4d:5a:34:a5:4c:e8:
f7:f8:6e:48:78:66:16:a9:79:fb:25:f0:f4:f1:39:
1e:e7:c2:e5:06:56:18:ed:2f:32:dc:e5:0a:6f:2c:
4f:bd:f3:8d:21:44:68:c5:58:46:bb:8b:e2:ae:ec:
06:7e:1d:ec:85:be:3d:25:0b:5e:c9:76:ad:21:22:
d0:d4:a6:02:ca:83:eb:a0:2c:b9:48:0c:75:71:cb:
a2:bd:26:d7:f9:25:41:3d:41:be:8e:5d:b4:ed:1e:
ef:b7:29:02:f6:11:9e:68:0a:b1:38:9a:3f:cd:0d:
54:3a:fb:d3:5d:de:26:ba:6e:ee:6a:d5:c7:43:81:
b5:e3:97:96:50:a6:ac:9c:9a:6e:c9:9e:af:f0:79:
9d:d2:49:c9:2b:ed:52:fc:6f:8a:28:cd:b8:a2:53:
9c:76:31:a5:97:f7:e1:02:64:f2:ed:27:1d:ce:9e:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A8:47:96:98:32:CD:68:2D:28:EF:50:67:58:CB:D2:B1:72:3E:0A
X509v3 Authority Key Identifier:
keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9a:b1:22:b8:3e:d2:2d:fe:ac:7e:03:73:1a:e7:e5:05:47:
a5:85:0f:69:39:78:b3:54:d6:c9:45:4b:0c:f0:7c:50:2c:d2:
28:44:99:44:af:2e:b8:c3:17:ed:34:45:70:9f:3f:8f:56:5f:
b6:81:51:f8:48:8c:6a:66:1f:18:b3:16:e9:57:a7:5b:a9:5a:
a5:79:5d:ae:0f:22:dd:64:77:fa:32:03:1a:3b:ec:9c:5b:ed:
fd:d2:95:82:36:67:a9:aa:07:03:77:cd:ba:7e:66:1f:e2:ec:
87:2c:9e:4a:38:05:dc:99:aa:01:95:85:89:f7:f7:3e:69:36:
8c:86:16:d9:4f:51:ab:37:cc:9d:65:f9:83:81:25:7c:e5:91:
3d:41:ba:6b:5d:78:e4:4d:14:f6:21:6f:ea:e1:54:04:dc:f5:
f7:bf:6c:74:9b:1a:f8:34:cc:e6:98:0b:4d:fa:20:f0:b0:04:
bc:35:4c:fc:fc:8c:ed:f3:84:df:1f:a0:c0:4f:77:75:76:23:
0f:ec:9b:dc:4e:67:4b:85:88:d9:68:1d:8d:ab:1d:c5:9a:09:
07:a3:aa:24:71:d3:81:f4:59:30:b8:ef:85:7b:e1:9c:51:17:
64:1e:9a:62:c7:84:17:52:ef:01:4f:8c:85:c8:c9:52:a4:2e:
6e:de:88:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFCOTQxMTAvBgNVBAUTKDVCNkE3MDBDRUUxQTUzRDU1MTlFNUEyNUM2NEQxQUQy
QkEzN0NEQTcwHhcNMjYwNjIzMDExMTUyWhcNMjYwNjMwMDExMTUyWjAYMRYwFAYD
VQQDEw02YTM5ZGQ1OC03NGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6dPpRWmdP6jD6BqSUF8JEg+riP0/a3WP6MIvDix20eqUABLwcka+ZsfrD/vi
T5N+RmWcQyGYvb7zWMGBISyUtXr+VGVVkgeZgYSX3zML2t630RVNWjSlTOj3+G5I
eGYWqXn7JfD08Tke58LlBlYY7S8y3OUKbyxPvfONIURoxVhGu4viruwGfh3shb49
JQteyXatISLQ1KYCyoProCy5SAx1ccuivSbX+SVBPUG+jl207R7vtykC9hGeaAqx
OJo/zQ1UOvvTXd4mum7uatXHQ4G145eWUKasnJpuyZ6v8Hmd0knJK+1S/G+KKM24
olOcdjGll/fhAmTy7Scdzp4cqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaoR5aY
Ms1oLSjvUGdYy9Kxcj4KMB8GA1UdIwQYMBaAFFtqcAzuGlPVUZ5aJcZNGtK6N82n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUI5NC83MDcwMjNGQTE2
QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5VlJubG9seGswYTBybzN6
YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1cycHdETzRhVTlWUm5sb2x4azBhMHJvM3phYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUI5NC83MDcwMjNGQTE2QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5
VlJubG9seGswYTBybzN6YWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnpqxIrg+0i3+rH4Dcxrn5QVHpYUPaTl4s1TWyUVLDPB8UCzSKESZRK8uuMMX
7TRFcJ8/j1ZftoFR+EiMamYfGLMW6VenW6lapXldrg8i3WR3+jIDGjvsnFvt/dKV
gjZnqaoHA3fNun5mH+LshyyeSjgF3JmqAZWFiff3Pmk2jIYW2U9RqzfMnWX5g4El
fOWRPUG6a1145E0U9iFv6uFUBNz1979sdJsa+DTM5pgLTfog8LAEvDVM/PyM7fOE
3x+gwE93dXYjD+yb3E5nS4WI2WgdjasdxZoJB6OqJHHTgfRZMLjvhXvhnFEXZB6a
YseEF1LvAU+MhcjJUqQubt6Ibg==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:33 2026 by rpki-client