
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json)
Hash identifier: jfhd5b0Q9tcIjHwMfnn+PxQWKLA6Btsw0RkicgSvNf8=
Subject key identifier: D5:6F:AC:BE:B3:66:6F:21:19:61:1A:3C:61:07:1D:EA:15:8A:EC:0F
Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Certificate serial: 0A83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
Manifest number: 0A56
Signing time: Wed 10 Jun 2026 19:44:52 +0000
Manifest this update: Wed 10 Jun 2026 19:44:52 +0000
Manifest next update: Wed 17 Jun 2026 19:44:52 +0000
Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: 5oobceXfnwPNhfBBeYEDXS15mrCqmMsmgLRNz4uI8Mc=)
2: C86AB87A4D2711F1906BF3DDBE833773.roa (hash: SKrWdYrl9KleuCmzcfglzGlBQ52LXQEO3/LUYZ1Seeg=)
3: D68A6AA64D1B11F1887430DDB9833773.roa (hash: RbJva28JL0oRQGNXfDxaa35qEtDL+UO0626spMk2ark=)
4: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60m3ux9qQuI8sAbqkpMf6ZbChso/+JAfGKgLBlRXOY4=)
5: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: wCl7rXzm53xP5orlsNl4KHMAfPJ5TI2KsLBB3PbjkDA=)
6: 3D96FCE64D1C11F19558AE18BA833773.roa (hash: fWrnDRf0ygF/bELqyvqgRKiyxFoBJGTEgo2RIONYsM0=)
7: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: vExhqYfIkomdDV7xNalk44Q9UiS8pz94A5xmO/cMcTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 19:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2691 (0xa83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Validity
Not Before: Jun 10 19:44:52 2026 GMT
Not After : Jun 17 19:44:52 2026 GMT
Subject: CN=6a29beb4-2c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:30:95:12:53:f1:16:8b:62:75:93:d3:e0:
80:67:a6:c5:7c:c7:16:fb:ca:ac:ca:76:be:12:3f:
3b:62:1d:98:c1:94:c5:14:7b:18:53:96:9e:fb:d5:
3a:7c:bc:a8:8e:35:ad:f4:cf:02:5d:39:99:23:ea:
05:f8:36:fe:a7:b5:69:47:38:16:a5:c3:97:0b:a4:
b5:6e:47:97:01:66:d0:af:70:93:11:6f:87:c3:5d:
b7:13:57:d5:42:1a:16:8c:ff:83:8f:09:ed:bb:9b:
40:09:0b:28:51:11:97:ac:c3:16:eb:37:b3:06:89:
f9:ca:c5:5e:cd:9c:d1:b4:ad:4a:0f:1a:41:02:54:
4c:d9:2f:3c:e6:27:89:8d:18:b4:fd:78:c0:47:76:
5a:ee:01:f6:7d:04:fb:fb:b9:b0:b6:a4:bd:65:00:
5e:db:38:c3:4e:4c:a1:38:46:a7:f9:6e:a7:48:bd:
fe:d1:6d:ce:3f:e5:b5:09:ad:e7:73:31:ce:7e:b0:
93:f5:bf:08:fd:17:55:2c:9f:6c:25:72:c3:48:06:
c3:21:12:75:1d:19:3d:3f:75:6b:f7:26:fb:d1:56:
f5:79:9c:8c:bd:5c:36:5c:52:99:4d:92:b2:18:95:
49:66:1a:ff:cb:6c:b0:ec:e2:cf:a4:50:c4:83:e9:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6F:AC:BE:B3:66:6F:21:19:61:1A:3C:61:07:1D:EA:15:8A:EC:0F
X509v3 Authority Key Identifier:
keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1f:1b:cc:04:ce:f3:e1:7f:de:64:e5:6d:86:88:0e:cf:3b:
c0:e5:0e:f1:2d:74:ce:26:6d:c0:ba:91:61:ed:85:47:a9:e0:
5b:7c:76:11:51:b9:c7:aa:68:09:b4:49:41:6e:e1:be:fe:04:
97:ac:21:77:3f:8d:56:73:84:23:d4:a2:7b:3b:ca:18:a2:76:
93:23:45:bd:da:82:f0:56:57:1c:5b:25:e1:94:f5:21:96:86:
db:d6:e0:5d:d9:6e:cc:53:a2:82:86:a6:91:b7:cc:23:d2:d7:
e2:07:5d:15:7a:fe:68:a8:12:d8:db:c9:4d:c7:87:e5:11:3c:
ca:de:96:fd:f6:ac:ff:9a:99:0f:33:03:1e:54:cc:6d:dd:33:
43:37:79:79:ce:81:5f:5e:ee:f3:75:eb:2e:49:3d:b2:78:27:
3e:ca:a4:79:c1:86:aa:7e:70:cf:ff:ef:51:73:3f:29:3c:b3:
c4:57:4d:29:95:02:1c:93:a2:8f:e3:22:36:43:dd:45:da:e3:
ca:ee:65:f9:0c:27:f6:76:2c:1d:47:ac:a9:70:a1:22:bf:ff:
48:3f:10:e6:d3:74:b9:b6:d9:c7:f3:cc:27:18:e0:0d:83:86:
67:69:96:f8:1f:6d:ba:4a:66:3d:65:41:82:35:03:78:44:b4:
89:80:92:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:39:52 2026 by rpki-client