
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json)
Hash identifier: rP7waNWm4NYoZrfqzAJFWcFYaUXeHh4n37G9xLxgVqU=
Subject key identifier: AA:87:85:62:1C:AF:24:BD:E4:5E:1C:97:4B:CD:FB:80:70:E2:18:88
Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Certificate serial: 02D9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
Manifest number: 02D3
Signing time: Thu 22 Oct 2026 16:49:43 +0000
Manifest this update: Thu 22 Oct 2026 16:49:43 +0000
Manifest next update: Thu 29 Oct 2026 16:49:43 +0000
Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: v8TfvlsJUMdWJclDIo/wvBlIqS0NfBKjBWXwbCr1qnI=)
2: 04594232DEA011EE91181415C4F9AE02.roa (hash: r0uDvba6DftUN0N3BUlL384UPeW2DqBJfJ5rm2wQtaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 16:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729 (0x2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Validity
Not Before: Oct 22 16:49:43 2026 GMT
Not After : Oct 29 16:49:43 2026 GMT
Subject: CN=6ada3ea7-97e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:43:0d:2d:47:eb:8f:7b:4a:18:93:62:27:
03:79:db:00:c7:0f:bb:81:fd:27:c7:ab:4b:0f:8e:
a0:dc:02:36:e6:0e:c3:73:bd:00:a0:8e:ab:51:d7:
f6:88:41:5e:d3:ff:56:1c:d1:91:3a:60:ac:3e:be:
21:a9:4f:cd:0d:c3:f2:10:34:e1:fe:5a:4a:2e:8f:
fa:34:53:a1:4d:36:34:b7:84:d9:20:8c:a1:c7:31:
03:e1:e8:2b:bc:7d:87:5a:e4:f9:a4:60:f0:c7:aa:
91:c9:7a:19:58:37:43:6e:d9:b5:46:58:d1:49:74:
ed:2a:a9:26:99:bb:0a:56:11:e6:80:ce:49:12:10:
4b:da:b6:e3:3d:45:02:52:02:79:8b:19:c2:41:d2:
a6:97:71:ff:61:6c:d1:21:ad:c4:8a:06:59:2a:a0:
7d:b6:71:8a:09:a2:7f:91:15:5c:2a:69:24:4f:06:
35:fe:95:d7:f4:91:0f:2f:d4:12:7f:5a:28:a3:0f:
4a:15:3d:11:8d:94:97:b7:ad:c3:6b:ce:8b:81:53:
78:4c:dc:78:d2:cb:ff:8e:e3:b7:e5:69:34:18:6f:
59:65:ff:f6:0b:9e:a1:b5:76:28:42:ff:87:4f:bd:
63:1e:d4:70:18:8c:ce:9a:49:ec:ae:54:75:63:23:
75:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:87:85:62:1C:AF:24:BD:E4:5E:1C:97:4B:CD:FB:80:70:E2:18:88
X509v3 Authority Key Identifier:
keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:57:4b:69:c8:01:54:bd:35:ab:62:5a:0f:77:37:9b:50:ee:
7d:38:4e:da:24:dd:b1:77:6a:b0:6a:1b:5e:01:51:e6:b6:5f:
ff:f5:2c:fe:e4:43:06:14:00:d5:1e:b6:f3:53:ef:e1:12:93:
70:d6:90:1a:43:4b:04:ba:9d:6b:53:8a:e6:21:0d:7f:c7:5b:
2f:d8:51:05:87:52:91:31:ec:ad:82:42:f5:e5:cf:a2:22:05:
27:99:04:3f:5e:a2:72:a1:51:f2:c0:61:a4:90:49:32:35:15:
27:d5:95:50:11:ce:91:4d:43:54:b0:1e:0e:95:e9:f5:24:84:
4d:40:0a:f3:7e:d8:67:de:84:06:02:4b:b9:1f:ef:7f:ee:5d:
22:48:56:e3:02:aa:10:d9:49:1a:18:ee:44:23:c9:cc:c6:0c:
eb:f0:b7:65:a1:d6:25:9b:b6:65:8f:0e:d8:73:e8:33:72:16:
35:31:68:1a:cc:af:5d:9b:3c:2f:85:21:0c:b2:13:87:b0:09:
6e:92:21:d2:a3:79:c6:26:26:45:9d:c2:1b:7a:2e:98:fa:ba:
1a:70:94:62:f1:74:d1:19:42:2a:f4:b6:80:10:b2:74:9b:ad:
eb:33:e7:8f:eb:4b:59:23:4b:3b:6c:76:d2:8d:0b:cf:4f:ff:
4e:34:dd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:05:11 2026 by rpki-client