
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
File: wSlv-tNPKfBODvrV2SRMAqfYfY0.mft (raw, json)
Hash identifier: HGDNHMHH41dnPnjCJi6nc4H5ikzX6RqMuvH9p3iGUn8=
Subject key identifier: C8:5A:CD:CC:7E:AA:AB:41:27:A6:69:50:11:4A:D9:C7:4B:41:70:39
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 35EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
Manifest number: 35B4
Signing time: Thu 10 Sep 2026 14:37:37 +0000
Manifest this update: Thu 10 Sep 2026 14:37:37 +0000
Manifest next update: Thu 17 Sep 2026 14:37:37 +0000
Files and hashes: 1: wSlv-tNPKfBODvrV2SRMAqfYfY0.crl (hash: edMkCJpmRc9t5tQKEeCNmB+9xPReRJVn0E7PPR+AghI=)
2: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (hash: c6dr/6HXkwTPPaRGxAN+VVzNifnMfuejad4wfWK59uc=)
3: 0000FD82284811EFADB77468C4F9AE02.roa (hash: G8Kpj64rSGfuDtTz8IZ/gDNB5OZgnr7MLW4ExDTIaZo=)
4: 93215346C57811EA8440684AC4F9AE02.roa (hash: z/ezhrwu4s7H5jzMufRqPP9dtPvITvqNddEalWrDxkc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13802 (0x35ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: Sep 10 14:37:37 2026 GMT
Not After : Sep 17 14:37:37 2026 GMT
Subject: CN=6aa2c0b1-08ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:35:4e:02:86:cf:2d:92:09:04:d7:c7:e1:fc:
4c:f8:f3:f9:76:80:4d:b1:64:3d:0a:86:5a:6f:26:
48:c3:c5:35:74:d2:49:c7:e2:0e:63:67:de:66:da:
8d:90:b5:78:ed:7f:76:28:46:b1:fa:8e:0c:bd:1b:
2c:fd:08:d2:cd:59:29:3e:4c:82:c8:f6:8d:6c:21:
7b:db:40:6f:eb:02:8c:fc:ef:38:8d:2a:aa:71:bb:
59:25:6e:6c:f6:94:41:3e:e2:70:d5:c7:6e:fc:df:
27:0e:2b:85:c7:a5:83:37:8c:a5:fe:89:10:bb:a6:
c6:e9:c0:65:e8:e1:2f:44:7d:65:98:21:65:c1:f3:
8d:30:31:f0:32:0e:25:d7:aa:b2:88:51:e8:a0:17:
49:72:02:f6:a0:82:58:db:51:80:2a:90:79:ce:00:
eb:28:f5:f6:fb:84:9c:94:54:87:1b:34:d3:8e:25:
bc:a8:07:f2:27:11:7a:76:18:4e:40:8a:80:c1:99:
b9:89:92:2f:a8:83:ad:cf:de:c9:92:d8:50:5b:63:
31:d4:ca:c8:9f:09:7c:88:6b:e8:68:c9:3e:cd:cf:
9e:0d:fc:21:5b:f7:66:3d:52:d1:a9:a9:31:12:9b:
8d:92:25:a6:fa:56:44:bf:cd:74:dd:26:08:06:89:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5A:CD:CC:7E:AA:AB:41:27:A6:69:50:11:4A:D9:C7:4B:41:70:39
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:8b:e4:42:86:8b:b8:46:40:bb:a2:8e:c9:88:70:e3:21:c8:
76:49:3d:71:ff:12:f9:53:64:fc:6a:0a:84:9b:5d:82:7f:62:
7b:0e:bc:0a:19:39:25:63:02:b8:f1:69:74:05:fd:50:69:03:
e7:8d:56:8e:98:f3:a5:35:0f:50:26:4d:98:34:ad:f0:77:96:
de:ef:76:22:2e:ba:cc:4c:d4:d2:9d:14:08:9b:ff:92:a0:51:
0f:1a:ce:85:b9:65:fb:47:06:07:e4:27:cb:3e:fc:c6:91:b8:
3c:12:2c:39:5d:10:a4:10:7b:cb:63:2a:55:f6:fe:7d:12:a4:
9d:e6:65:24:87:4f:89:cc:53:f8:a4:93:e6:71:e9:94:6f:1b:
8d:b1:4a:a2:cc:6a:df:2c:0c:46:0d:c5:e6:28:18:ee:3c:20:
d1:14:6a:02:ee:93:06:9e:58:4a:e8:f2:e2:f9:c1:12:a6:76:
63:40:b2:1c:8a:85:51:2f:c1:9b:29:ea:67:cd:4c:26:65:74:
f1:50:bc:14:49:2f:d9:0d:3c:f7:79:ad:60:c2:58:f7:ad:c8:
bf:6e:56:6a:72:95:fd:b6:ea:1f:e2:87:57:05:c6:62:71:c0:
f7:1e:74:f9:2a:e4:e1:bc:16:81:8b:48:af:d7:89:51:cd:bd:
1e:af:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:11:41 2026 by rpki-client