
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
File: wSlv-tNPKfBODvrV2SRMAqfYfY0.mft (raw, json)
Hash identifier: Fg5Bppsc9Za4xTODZpVhxtGWMz5pRwPg96yTorZ32t0=
Subject key identifier: A2:EC:10:E9:4E:CE:DB:80:F3:39:4D:91:77:C6:61:E3:85:4F:78:0A
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 3604
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
Manifest number: 35CD
Signing time: Wed 28 Oct 2026 14:38:07 +0000
Manifest this update: Wed 28 Oct 2026 14:38:06 +0000
Manifest next update: Wed 04 Nov 2026 14:38:06 +0000
Files and hashes: 1: wSlv-tNPKfBODvrV2SRMAqfYfY0.crl (hash: BEtlDBrrAfld+4JwvpMBklzXfUtiQXVQuOkfK79mnNQ=)
2: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (hash: +Y06m50DqnsIuPY/QFBKqn6J5W10xn1bnfWoJv3tUPE=)
3: 93215346C57811EA8440684AC4F9AE02.roa (hash: z/ezhrwu4s7H5jzMufRqPP9dtPvITvqNddEalWrDxkc=)
4: 0000FD82284811EFADB77468C4F9AE02.roa (hash: G8Kpj64rSGfuDtTz8IZ/gDNB5OZgnr7MLW4ExDTIaZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 14:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13828 (0x3604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: Oct 28 14:38:06 2026 GMT
Not After : Nov 4 14:38:06 2026 GMT
Subject: CN=6ae208cf-8075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ab:94:d1:85:bc:64:48:2f:6d:d0:7e:68:b5:
14:83:ac:54:b1:bb:37:d9:41:f3:69:36:64:4a:f3:
fa:68:24:c0:8a:db:02:80:e8:64:98:13:b3:35:9b:
f1:de:c7:5b:f3:00:f8:a0:de:b8:ef:c2:96:b1:d4:
56:e8:0f:08:1a:91:2c:79:a8:03:d9:27:2c:7e:9b:
6f:2a:7a:7b:ff:1e:8e:dc:01:47:4f:89:cf:9e:91:
12:02:ed:df:cf:3e:c2:c2:4d:80:0c:93:2c:e0:47:
8b:9a:31:4b:9c:b4:01:63:d3:d0:94:42:c9:4f:b8:
44:f5:08:ac:2f:a7:0c:f7:37:20:ba:ea:1d:da:74:
0a:2b:e5:29:7e:b0:84:24:35:a8:6a:fa:95:2d:d1:
29:a3:9a:cc:f0:ff:36:df:80:80:4b:d6:6c:7a:24:
68:7a:6b:8b:75:68:d2:bd:46:0f:8c:ab:2c:d9:18:
4b:99:71:d5:26:b8:f3:b9:4c:62:9b:da:28:a3:02:
01:fd:df:86:ce:0d:8e:6e:27:66:ca:e4:a9:ba:2b:
02:d2:f0:7f:e9:db:72:7b:69:59:e0:90:14:26:0e:
54:51:22:3d:02:c5:19:4d:e1:5e:4c:9e:06:2b:72:
9d:3b:da:61:b7:29:c2:81:00:84:34:f1:18:0d:ef:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EC:10:E9:4E:CE:DB:80:F3:39:4D:91:77:C6:61:E3:85:4F:78:0A
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:fa:e2:7a:e5:93:c5:e7:cd:22:06:bd:70:71:4f:7e:33:ba:
b7:c6:19:5b:03:1d:cf:16:c8:5c:b1:e3:0c:97:80:60:7c:2e:
f7:13:5e:be:0d:45:2e:8d:d9:39:dc:fb:4a:4f:f6:9a:01:f1:
5d:fb:c2:54:3b:6f:e2:7e:25:55:07:5e:c8:f3:5e:6d:c5:05:
81:83:c0:ca:1b:d8:4c:ba:7e:25:40:64:41:b7:ab:fe:c4:5f:
af:36:29:f0:d5:ea:8b:3f:38:c1:0e:73:e8:56:75:bf:1f:87:
88:11:8f:66:83:4d:4b:20:87:b8:64:d1:92:d6:03:0f:ba:92:
32:92:9c:5e:a1:52:f0:d0:e8:08:53:e9:37:54:0b:c9:50:6d:
2d:b4:09:3d:26:f4:91:05:50:1f:af:c8:52:4d:7e:3b:8b:db:
c2:db:52:74:a9:f7:50:47:3f:d2:06:f5:59:14:99:39:41:16:
d3:0d:cb:b5:96:7d:97:1c:ec:9a:63:5f:80:98:46:3a:07:b0:
86:95:42:9e:fa:1b:0c:62:ff:2a:ac:70:6e:fa:08:da:b1:0c:
dc:ae:cd:70:44:7b:c7:45:c1:54:0a:f0:5c:9c:37:de:2f:c7:
a9:ca:2f:4a:2b:0a:1a:e3:15:6f:06:79:af:33:c0:33:29:90:
85:db:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:26:49 2026 by rpki-client