
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
File: WWtkT4ORAfVZi9Egyt6VSFGgzko.mft (raw, json)
Hash identifier: pF5jfL1FMTejEl6lRKOgWV3KhrfLU+Hi4FXxLpwkVwk=
Subject key identifier: D4:E1:4A:69:C3:11:00:62:B3:F7:87:36:3E:FE:10:6E:65:3E:E4:56
Authority key identifier: 59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A
Certificate issuer: /CN=A91AC1CF/serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
Manifest number: 1D
Signing time: Sun 03 May 2026 09:13:07 +0000
Manifest this update: Sun 03 May 2026 09:13:07 +0000
Manifest next update: Sun 10 May 2026 09:13:07 +0000
Files and hashes: 1: WWtkT4ORAfVZi9Egyt6VSFGgzko.crl (hash: Nn2nkgxz1tnH/RsMMpIYVjBOLnlWRzGuzhjSvoH8/H0=)
2: 840FB8CC1DAE11F1AA3EBAC03D3D8C67.roa (hash: r5BB+japYC6seEdkVZLK22Dexuxs6mCJDX2FzRf3yv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl
rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC1CF, serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
Validity
Not Before: May 3 09:13:07 2026 GMT
Not After : May 10 09:13:07 2026 GMT
Subject: CN=69f711a3-fa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:e0:2e:4d:d6:fe:03:7e:e5:25:0e:64:a6:
fa:c7:f6:e7:36:7d:09:ad:bf:f9:71:e7:1b:bb:ed:
0f:fb:38:85:f5:fa:d6:33:03:05:79:a2:1c:81:d5:
a1:e4:57:79:fd:7a:ee:bf:19:c8:d5:f5:a9:2d:39:
55:91:fb:37:27:69:96:8a:b2:77:fc:d1:f9:f5:ca:
fa:4d:5f:67:d0:d4:38:36:15:c5:dc:29:d8:6e:a1:
18:0c:6f:64:95:d9:9b:20:4a:84:4d:7f:9a:eb:43:
85:b7:03:f1:c7:05:9c:87:5f:34:e9:45:6f:3d:f7:
5b:ff:50:8b:37:70:e4:fb:d3:2b:63:40:19:3f:98:
2d:f8:c1:75:3c:91:98:f6:e6:54:36:bc:74:4c:d1:
a2:60:29:da:85:86:79:ce:59:29:d3:14:49:04:cc:
f2:2a:89:be:98:c1:8f:d9:e9:e1:2f:9f:a2:48:c8:
b4:9f:a6:24:04:d7:ee:91:2e:4c:de:64:de:b3:ca:
72:30:45:19:19:b9:67:aa:f7:c9:c1:72:3b:76:a8:
9d:fc:84:2f:19:80:6d:6d:20:92:3e:aa:f6:52:dd:
21:2d:3a:ef:22:4a:84:3c:32:6f:67:dd:7e:09:55:
1e:c1:77:dd:10:ec:68:df:70:4b:04:e1:eb:1e:b8:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E1:4A:69:C3:11:00:62:B3:F7:87:36:3E:FE:10:6E:65:3E:E4:56
X509v3 Authority Key Identifier:
keyid:59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:dd:8e:1f:01:da:c9:60:e6:0a:f6:05:b1:8c:c0:1b:ed:62:
42:a6:9b:1c:8c:dd:c4:d7:37:30:08:74:55:67:e4:93:69:d9:
44:e8:1b:26:03:64:9f:e6:df:75:5c:70:3f:66:9e:a3:1c:0a:
31:6a:77:37:25:34:d1:bb:4c:87:b7:b6:a5:0a:bc:f6:3e:b9:
44:3a:3f:ea:23:05:51:7a:83:69:5c:b3:6d:5d:b7:13:48:59:
56:0a:4e:53:09:19:64:3e:25:b1:20:43:08:04:bd:96:10:43:
be:1b:39:40:ab:ee:08:7c:ca:40:1d:be:13:05:f1:ea:3f:52:
b8:2e:b9:4a:85:36:f1:d1:91:b3:97:f3:11:d5:ff:2b:9a:8e:
65:b0:0e:a4:0c:1e:07:75:ad:19:06:e7:bf:4a:84:01:ee:dd:
bf:fc:40:11:fa:ba:14:bf:15:b7:1a:9d:b8:16:d2:6b:c4:74:
bb:47:12:a2:60:27:e7:0d:ab:0c:79:c1:22:dd:50:df:7e:4b:
98:ac:e5:4a:7e:4c:6b:37:bf:6f:86:4a:cf:bc:8a:af:85:2c:
7e:0a:ab:16:08:ad:62:d1:1b:28:f6:8b:b9:07:25:1c:36:b0:
ef:96:44:74:e2:ea:7f:7f:2f:04:bc:ff:ab:6c:a6:98:d0:1a:
79:a9:1e:e6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzFDRjExMC8GA1UEBRMoNTk2QjY0NEY4MzkxMDFGNTU5OEJEMTIwQ0FERTk1NDg1
MUEwQ0U0QTAeFw0yNjA1MDMwOTEzMDdaFw0yNjA1MTAwOTEzMDdaMBgxFjAUBgNV
BAMTDTY5ZjcxMWEzLWZhOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNReAuTdb+A37lJQ5kpvrH9uc2fQmtv/lx5xu77Q/7OIX1+tYzAwV5ohyB1aHk
V3n9eu6/GcjV9aktOVWR+zcnaZaKsnf80fn1yvpNX2fQ1Dg2FcXcKdhuoRgMb2SV
2ZsgSoRNf5rrQ4W3A/HHBZyHXzTpRW8991v/UIs3cOT70ytjQBk/mC34wXU8kZj2
5lQ2vHRM0aJgKdqFhnnOWSnTFEkEzPIqib6YwY/Z6eEvn6JIyLSfpiQE1+6RLkze
ZN6zynIwRRkZuWeq98nBcjt2qJ38hC8ZgG1tIJI+qvZS3SEtOu8iSoQ8Mm9n3X4J
VR7Bd90Q7GjfcEsE4eseuBj3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1OFKacMR
AGKz94c2Pv4QbmU+5FYwHwYDVR0jBBgwFoAUWWtkT4ORAfVZi9Egyt6VSFGgzkow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMUNGL0ZBNzFCMUQ4MURB
RDExRjE4NUU0MkZCRTNEM0Q4QzY3L1dXdGtUNE9SQWZWWmk5RWd5dDZWU0ZHZ3pr
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV1d0a1Q0T1JBZlZaaTlFZ3l0NlZTRkdnemtvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD
MUNGL0ZBNzFCMUQ4MURBRDExRjE4NUU0MkZCRTNEM0Q4QzY3L1dXdGtUNE9SQWZW
Wmk5RWd5dDZWU0ZHZ3prby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCh3Y4fAdrJYOYK9gWxjMAb7WJCppscjN3E1zcwCHRVZ+STadlE6BsmA2Sf5t91
XHA/Zp6jHAoxanc3JTTRu0yHt7alCrz2PrlEOj/qIwVReoNpXLNtXbcTSFlWCk5T
CRlkPiWxIEMIBL2WEEO+GzlAq+4IfMpAHb4TBfHqP1K4LrlKhTbx0ZGzl/MR1f8r
mo5lsA6kDB4Hda0ZBue/SoQB7t2//EAR+roUvxW3Gp24FtJrxHS7RxKiYCfnDasM
ecEi3VDffkuYrOVKfkxrN79vhkrPvIqvhSx+CqsWCK1i0Rso9ou5ByUcNrDvlkR0
4up/fy8EvP+rbKaY0Bp5qR7m
-----END CERTIFICATE-----
Generated at Tue May 5 05:50:47 2026 by rpki-client