
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C873A/3104898C8F1411F1AAFCC9463411F970/RWOnD-ATmxkRqvaXOe4DyNUwOow.mft
File: RWOnD-ATmxkRqvaXOe4DyNUwOow.mft (raw, json)
Hash identifier: nbuLywNUwdJdoh4kwsN1AJP/83SRkj1sYY94WodPUo8=
Subject key identifier: FE:61:E4:7D:19:A7:3E:70:BC:E1:59:2D:D7:2C:BC:DD:37:40:72:20
Authority key identifier: 45:63:A7:0F:E0:13:9B:19:11:AA:F6:97:39:EE:03:C8:D5:30:3A:8C
Certificate issuer: /CN=A91C873A/serialNumber=4563A70FE0139B1911AAF69739EE03C8D5303A8C
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RWOnD-ATmxkRqvaXOe4DyNUwOow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C873A/3104898C8F1411F1AAFCC9463411F970/RWOnD-ATmxkRqvaXOe4DyNUwOow.mft
Manifest number: 0A
Signing time: Wed 19 Aug 2026 09:53:41 +0000
Manifest this update: Wed 19 Aug 2026 09:53:40 +0000
Manifest next update: Wed 26 Aug 2026 09:53:40 +0000
Files and hashes: 1: RWOnD-ATmxkRqvaXOe4DyNUwOow.crl (hash: 7duFx7LjhA+YWOaeJCFOWIaHnD9igRWj5o/OjCK73cc=)
2: B4B84D408F1411F1B4F762993411F970.roa (hash: zRvjyZ8iy37Fk/InHuyY5E9zGhUus1M51ds8i1HbbCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C873A/3104898C8F1411F1AAFCC9463411F970/RWOnD-ATmxkRqvaXOe4DyNUwOow.crl
rsync://rpki.apnic.net/member_repository/A91C873A/3104898C8F1411F1AAFCC9463411F970/RWOnD-ATmxkRqvaXOe4DyNUwOow.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RWOnD-ATmxkRqvaXOe4DyNUwOow.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C873A, serialNumber=4563A70FE0139B1911AAF69739EE03C8D5303A8C
Validity
Not Before: Aug 19 09:53:40 2026 GMT
Not After : Aug 26 09:53:40 2026 GMT
Subject: CN=6a857d24-9d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:38:5a:94:59:7e:56:a7:a3:82:8b:e8:63:
7d:32:ce:e4:93:6f:50:94:3e:c0:4e:af:9a:6d:4d:
79:f7:2b:12:8a:ab:e9:5d:38:36:53:25:e2:9d:7d:
35:86:97:9c:5d:57:7e:ff:f1:dc:e8:15:63:2b:6b:
73:e9:72:29:0f:a2:a0:7a:0a:b3:bd:da:b1:83:db:
ea:72:0b:f9:48:bc:0a:3a:bf:8c:a1:5d:e7:61:7d:
03:7c:8e:f4:c5:b9:d8:d1:ee:14:e5:de:4f:50:48:
87:98:9d:f3:7f:47:95:ab:b2:18:d7:6a:49:66:0b:
f6:4c:1b:77:70:75:44:7f:45:6d:dc:b3:b6:6b:aa:
8b:80:11:5e:6c:b6:a6:57:2b:85:40:a7:7a:5a:77:
2f:c5:83:84:16:57:c5:3c:42:44:ec:99:08:d0:2d:
af:29:70:26:b7:01:60:83:11:5a:ac:fb:3b:27:ae:
9d:f3:13:ad:df:d0:cc:84:ba:c6:4d:75:e9:f5:87:
a7:5a:04:fd:e9:12:f1:2a:78:df:33:d8:59:03:9b:
ed:2c:21:33:0f:35:db:71:6c:bd:11:31:df:75:8d:
3a:1a:3e:0c:60:76:fb:7a:fe:88:e7:c2:5a:67:e9:
72:a5:9f:ca:a4:f0:27:f4:19:a6:d5:15:bd:e5:12:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:61:E4:7D:19:A7:3E:70:BC:E1:59:2D:D7:2C:BC:DD:37:40:72:20
X509v3 Authority Key Identifier:
keyid:45:63:A7:0F:E0:13:9B:19:11:AA:F6:97:39:EE:03:C8:D5:30:3A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C873A/3104898C8F1411F1AAFCC9463411F970/RWOnD-ATmxkRqvaXOe4DyNUwOow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RWOnD-ATmxkRqvaXOe4DyNUwOow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C873A/3104898C8F1411F1AAFCC9463411F970/RWOnD-ATmxkRqvaXOe4DyNUwOow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:de:99:33:8f:ee:b7:d0:ac:c9:91:a3:0d:a4:b4:72:03:b1:
fd:f6:c1:fd:e6:78:dd:33:8f:7a:3d:03:79:bc:0e:18:c6:df:
e2:ec:ff:41:cc:59:7a:49:51:da:c5:92:2b:d5:ba:6e:07:eb:
83:d5:a9:39:a2:28:6f:bf:42:da:f0:8f:4e:9b:37:2e:22:1c:
4b:57:76:31:e2:91:1b:55:ed:81:d5:5c:f3:09:05:73:8f:76:
96:4d:c4:60:31:35:07:d7:20:28:a6:b9:4e:7d:0e:e8:e0:4b:
b6:4e:2e:dd:69:f0:01:28:b7:ce:af:e7:d3:2f:30:5f:2c:fd:
c1:86:45:59:03:9d:75:90:2d:a3:49:72:7e:54:0b:6b:34:53:
e9:21:72:d9:15:0b:ad:32:08:d8:c2:a3:c9:b7:30:d2:b9:b7:
1e:3e:a8:c6:c9:06:9f:31:02:a5:c3:c9:2b:9c:c7:ab:7f:48:
a9:28:80:b9:d5:e4:34:33:90:ef:64:d2:e8:ee:a8:70:1d:31:
b6:81:7f:69:e8:a5:2d:91:a8:cf:a2:db:09:82:d1:f3:96:a9:
44:15:fd:3e:1e:12:00:bd:a3:e7:98:49:dd:b8:85:34:73:36:
1e:67:12:9b:b3:c9:75:cf:30:12:58:53:f4:94:0a:28:82:2b:
c6:84:76:3b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
ODczQTExMC8GA1UEBRMoNDU2M0E3MEZFMDEzOUIxOTExQUFGNjk3MzlFRTAzQzhE
NTMwM0E4QzAeFw0yNjA4MTkwOTUzNDBaFw0yNjA4MjYwOTUzNDBaMBgxFjAUBgNV
BAMTDTZhODU3ZDI0LTlkNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtyDhalFl+VqejgovoY30yzuSTb1CUPsBOr5ptTXn3KxKKq+ldODZTJeKdfTWG
l5xdV37/8dzoFWMra3PpcikPoqB6CrO92rGD2+pyC/lIvAo6v4yhXedhfQN8jvTF
udjR7hTl3k9QSIeYnfN/R5WrshjXaklmC/ZMG3dwdUR/RW3cs7ZrqouAEV5stqZX
K4VAp3pady/Fg4QWV8U8QkTsmQjQLa8pcCa3AWCDEVqs+zsnrp3zE63f0MyEusZN
den1h6daBP3pEvEqeN8z2FkDm+0sITMPNdtxbL0RMd91jToaPgxgdvt6/ojnwlpn
6XKln8qk8Cf0GabVFb3lEneBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/mHkfRmn
PnC84Vkt1yy83TdAciAwHwYDVR0jBBgwFoAURWOnD+ATmxkRqvaXOe4DyNUwOoww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4NzNBLzMxMDQ4OThDOEYx
NDExRjFBQUZDQzk0NjM0MTFGOTcwL1JXT25ELUFUbXhrUnF2YVhPZTREeU5Vd09v
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUldPbkQtQVRteGtScXZhWE9lNER5TlV3T293LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4
NzNBLzMxMDQ4OThDOEYxNDExRjFBQUZDQzk0NjM0MTFGOTcwL1JXT25ELUFUbXhr
UnF2YVhPZTREeU5Vd09vdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBB3pkzj+630KzJkaMNpLRyA7H99sH95njdM496PQN5vA4Yxt/i7P9BzFl6SVHa
xZIr1bpuB+uD1ak5oihvv0La8I9OmzcuIhxLV3Yx4pEbVe2B1VzzCQVzj3aWTcRg
MTUH1yAoprlOfQ7o4Eu2Ti7dafABKLfOr+fTLzBfLP3BhkVZA511kC2jSXJ+VAtr
NFPpIXLZFQutMgjYwqPJtzDSubcePqjGyQafMQKlw8krnMerf0ipKIC51eQ0M5Dv
ZNLo7qhwHTG2gX9p6KUtkajPotsJgtHzlqlEFf0+HhIAvaPnmEnduIU0czYeZxKb
s8l1zzASWFP0lAoogivGhHY7
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:49:39 2026 by rpki-client