
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
File: WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft (raw, json)
Hash identifier: YMfjeOd2iOHcWqX1j1iv4+cU1I0glm5cyIjqIuTe2tc=
Subject key identifier: 0A:03:D0:2B:44:61:01:CB:92:08:8B:7C:3C:59:C8:03:4F:35:8A:BA
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Certificate issuer: /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial: 0232
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
Manifest number: 0224
Signing time: Sun 25 Oct 2026 03:18:47 +0000
Manifest this update: Sun 25 Oct 2026 03:18:47 +0000
Manifest next update: Sun 01 Nov 2026 03:18:47 +0000
Files and hashes: 1: WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl (hash: +eS00oboAMFzuLpiwNc5HRJihonDHDr8TOTFf8FpT/8=)
2: 321296E212E711F1ABE68E4F0D3D8C67.roa (hash: fLV89AyiqIKtRsF5UkgoIwTy20rGQz1nx0VUvYpw5g0=)
3: EAAE802834B911F1B8589B72BC833773.roa (hash: hYHnbi70DEeeHLUAwomrQxmvt6OsQN+4vZ8kSWKcIq4=)
4: 5CB841E69B1411EEA456FE83C4F9AE02.roa (hash: vuhGbAXmdFyZHU5zcn6qI6D4hSXtuQyTQbfw33B7PYM=)
5: 7CF0A45404DF11F0B877A115C4F9AE02.roa (hash: 3zvmMVyOd3Cbubn7cAeWSSyiDSHBJieehrUFUeq/rLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 03:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Validity
Not Before: Oct 25 03:18:47 2026 GMT
Not After : Nov 1 03:18:47 2026 GMT
Subject: CN=6add7517-ff5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:16:79:c8:46:29:a6:86:5a:fe:ed:5f:6e:
08:2d:79:e5:d5:07:6c:35:77:bf:f5:4e:d4:6a:e2:
6c:72:3a:e9:60:d0:e6:0e:c2:a0:7d:92:7f:98:76:
3d:76:de:d5:98:da:3d:56:4e:a1:7b:93:7b:73:99:
75:9c:da:72:5a:15:98:43:2d:6e:9e:f1:c3:07:e3:
18:57:a6:e4:08:78:de:cd:ce:0a:f8:dc:0f:04:ce:
1f:64:ce:93:5e:88:dd:f2:5e:54:ce:7f:91:8c:48:
68:4a:65:f8:4c:05:ec:ff:9f:1e:e9:97:b0:66:86:
9c:ed:0f:7a:3f:89:ca:c2:79:f7:66:5d:1a:e0:97:
c2:08:78:8e:79:3a:5f:a2:d0:5d:ef:dd:3f:ac:e3:
40:35:e7:bb:43:12:b4:fb:45:3a:e6:cd:1a:30:88:
5c:81:a3:9b:96:b9:67:1d:ff:e1:5c:06:66:3f:c2:
1e:d8:1f:41:57:60:f1:1a:c8:61:65:c6:9a:2e:3d:
53:84:ba:78:49:b6:3f:8a:ec:a1:a8:18:05:97:46:
40:86:47:cb:ef:c1:b2:74:80:7e:17:2d:0f:0f:52:
bb:f4:4f:d3:74:a8:1d:ab:12:81:0e:6b:58:dd:44:
b7:91:d2:e4:3f:20:c3:83:c7:92:ae:14:69:6c:94:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:03:D0:2B:44:61:01:CB:92:08:8B:7C:3C:59:C8:03:4F:35:8A:BA
X509v3 Authority Key Identifier:
keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:72:59:2b:02:8b:ff:7a:ab:1a:16:5e:ba:88:a2:4c:2b:90:
51:66:6b:b2:64:cf:27:a4:1f:3a:89:97:03:36:e7:ca:48:8c:
49:74:99:5f:b8:74:f3:24:78:86:cf:4a:07:dc:a1:5b:8d:43:
0a:12:71:67:4a:0b:95:ad:73:52:bd:af:30:23:d9:87:ab:f6:
29:76:b3:1c:03:9d:64:89:c9:f9:8f:0b:06:96:1f:86:c1:26:
a8:e6:f0:74:34:15:7f:88:fc:7e:a3:e5:83:58:0c:81:0a:1f:
ef:ed:11:1d:4a:49:d8:08:fc:d8:7c:b1:59:cf:67:f4:d9:a0:
69:1c:cf:f9:f8:64:d0:d6:50:8a:a4:25:1d:53:c1:a4:b8:6e:
9d:0c:83:5c:07:ae:c9:19:c6:53:fc:18:e6:85:ec:03:20:fe:
59:d4:3d:55:fa:57:7b:96:d2:72:02:5b:88:07:ae:d8:26:b7:
b1:58:88:c9:85:81:e3:5f:77:cc:3c:70:4b:0c:da:23:26:4f:
95:e2:02:d9:1d:42:b3:33:23:db:27:25:ae:d3:ad:d6:ed:37:
55:5e:ca:1e:87:f5:09:70:ad:26:0b:17:0e:03:1f:3f:70:2a:
64:7f:d2:b9:74:a8:2e:ae:7a:7e:3a:77:20:56:9a:68:b6:60:
64:c0:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:00:51 2026 by rpki-client