
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json)
Hash identifier: Pr7goRww6CAuBR2vQKAAwbdtKbv7+GHulFWBpzFBef8=
Subject key identifier: A4:61:F7:D3:D7:1B:65:17:45:E0:1F:D2:F4:98:68:5F:0C:10:05:A9
Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Certificate serial: 0A64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
Manifest number: 0A3A
Signing time: Sun 26 Apr 2026 19:40:44 +0000
Manifest this update: Sun 26 Apr 2026 19:40:44 +0000
Manifest next update: Sun 03 May 2026 19:40:44 +0000
Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: t14mQaSl8E0ciHCNF4swR9LqIYB4u3tbXmuDo+9XlGY=)
2: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60m3ux9qQuI8sAbqkpMf6ZbChso/+JAfGKgLBlRXOY4=)
3: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: wCl7rXzm53xP5orlsNl4KHMAfPJ5TI2KsLBB3PbjkDA=)
4: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: vExhqYfIkomdDV7xNalk44Q9UiS8pz94A5xmO/cMcTw=)
5: 7D0B1750124C11F1948F10C8293D8C67.roa (hash: GzMsXq/aTj9FzAzYn7KgNFAIOqbcmYFPlYWTUb/eH5I=)
6: 7E645DDA123511F19B73B6E9233D8C67.roa (hash: Lf9KFa0nKOWU6CI7SCy/k5kIenr/yr27iXLl4mKSIX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 19:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2660 (0xa64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Validity
Not Before: Apr 26 19:40:44 2026 GMT
Not After : May 3 19:40:44 2026 GMT
Subject: CN=69ee6a3c-5e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:cb:85:1b:10:e7:20:f9:1e:f9:88:ab:2a:
6f:a7:16:57:fb:82:e9:f0:da:0f:42:c5:38:29:39:
4c:ea:8f:61:22:6f:91:52:6f:e5:f5:c8:fb:ab:17:
e4:f7:ec:02:51:7d:81:43:bb:24:b0:c6:8b:15:39:
26:11:0f:0b:02:c9:34:93:61:3f:9e:63:49:73:e8:
33:04:0a:ff:5c:d9:33:8c:6e:c8:14:f7:99:19:2b:
a8:29:b2:c5:ca:45:eb:14:80:80:d9:d4:8f:06:5b:
b2:b4:76:c2:bb:ed:f4:01:66:97:0c:f3:84:bc:50:
b6:1e:43:fd:36:4e:0f:80:e1:8e:8c:c0:3c:70:d6:
d7:6c:07:67:61:43:08:8e:6d:10:e2:33:be:fa:13:
03:98:22:4d:ac:e8:7f:af:b9:ed:40:c8:81:d3:fd:
df:68:da:eb:44:a5:6b:7d:69:83:b1:4a:96:9e:3f:
f6:df:78:c2:49:a5:2e:31:0d:3a:e4:9f:e5:36:a1:
7e:67:ac:72:67:15:e8:c4:ca:f5:d7:13:2b:b6:d4:
5a:a3:f2:57:19:14:5a:34:84:1f:29:d2:fc:cd:73:
90:3d:f7:ae:9b:0f:5a:a6:d4:58:27:34:0b:b5:b5:
c7:a5:e0:74:3e:7b:1a:94:59:fb:93:b1:b1:e8:e5:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:F7:D3:D7:1B:65:17:45:E0:1F:D2:F4:98:68:5F:0C:10:05:A9
X509v3 Authority Key Identifier:
keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:21:dd:42:c8:5e:58:6d:30:29:97:53:f0:6f:86:2b:3d:cd:
fe:b0:36:d2:71:25:c9:89:ca:ae:b3:4e:16:4f:af:b1:3a:17:
d9:18:e5:4a:0f:50:ec:ad:84:78:82:7c:77:0e:e7:39:01:e8:
15:fb:df:b2:da:06:2a:73:ba:e7:a8:5d:82:7e:4b:fa:0e:19:
22:97:ec:43:df:17:4c:6e:b4:52:3f:17:73:17:64:4a:ec:c5:
6d:8f:4b:d4:f6:d4:8c:26:d5:13:59:1a:7f:c6:f3:b1:23:78:
76:e5:37:87:86:8f:ee:d9:3e:aa:7c:36:70:ce:6c:ad:72:be:
17:25:29:a0:7a:44:70:4d:ea:9f:c4:06:30:d3:f4:cb:77:b2:
57:2f:40:65:d8:e8:97:40:a8:62:16:b7:76:8e:36:58:be:06:
e0:5e:f2:1e:50:47:38:8f:0b:31:49:85:5c:80:16:0a:d7:9a:
ea:a6:45:94:20:52:32:59:1f:8c:0a:91:d9:af:c4:68:61:d6:
5f:77:e7:35:a5:5b:7b:17:a0:fb:60:6c:e1:50:e1:8b:1d:40:
13:cf:2f:ce:a6:43:cc:36:f0:86:d0:18:95:99:94:d7:30:d1:
cd:b9:30:b8:89:fa:ce:03:41:62:4a:08:81:11:e6:f4:03:c0:
cb:62:d1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:54:39 2026 by rpki-client