
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
File: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft (raw, json)
Hash identifier: CmW3E5P0Z8AC+DcOsYNt3NsaOEwPU8NOdkrigCnOIQs=
Subject key identifier: A5:A7:52:5D:6B:28:4B:E9:CB:A5:CE:E5:F1:1C:05:17:49:DD:27:7F
Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
Certificate issuer: /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Certificate serial: 09D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
Manifest number: 09CA
Signing time: Tue 06 Oct 2026 20:00:49 +0000
Manifest this update: Tue 06 Oct 2026 20:00:48 +0000
Manifest next update: Tue 13 Oct 2026 20:00:48 +0000
Files and hashes: 1: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl (hash: 3nAJiiXZFQDgyzgW1ka0vknXcbfQ8OrC4WNHuiOnz6Q=)
2: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (hash: L0XlyD9IQ5UK2oTPJFeGWgq2LdSfkLF1YmwJHO8pA/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2516 (0x9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E29, serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Validity
Not Before: Oct 6 20:00:48 2026 GMT
Not After : Oct 13 20:00:48 2026 GMT
Subject: CN=6ac55370-9746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:1e:fb:ac:22:64:7b:51:7c:c8:f7:b0:d2:
64:58:2f:f6:63:c9:7a:5f:fb:40:6d:54:14:c5:83:
77:80:04:37:d1:85:ec:71:3e:07:61:a4:37:bb:ed:
f4:2d:d2:5c:f6:5f:c3:27:76:e8:1d:20:19:4f:cd:
17:a6:a8:ee:a9:6f:a7:7d:f6:98:2a:81:5f:fe:2d:
7b:01:13:36:71:5a:09:89:b1:24:40:17:05:cd:9b:
f9:10:40:5c:52:ba:4e:82:a4:0a:48:f9:05:04:95:
5b:93:31:a0:db:f7:97:ff:5f:b9:0b:68:dc:46:b3:
88:60:7e:dc:0a:02:35:72:a1:92:79:6a:29:38:fc:
f6:5c:38:84:07:52:0b:4a:b1:1b:34:b7:84:ff:f1:
c1:bf:06:4d:45:62:6e:64:93:5b:5e:71:9d:d0:af:
3f:42:d0:5e:9d:33:c5:15:1c:e7:65:a4:8b:af:c3:
3a:df:0b:32:d4:fe:a8:80:4b:13:14:af:a8:4e:5d:
ce:76:bd:d3:b7:da:f0:de:cc:24:23:01:f0:4f:8c:
99:42:4a:e2:1d:a3:06:6f:d7:22:13:d6:00:51:47:
a7:8d:c5:dc:11:a0:49:41:e2:3c:3d:c7:6b:88:fe:
78:72:2e:da:83:a3:7f:ba:ed:ae:5e:f5:34:c1:8a:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A7:52:5D:6B:28:4B:E9:CB:A5:CE:E5:F1:1C:05:17:49:DD:27:7F
X509v3 Authority Key Identifier:
keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e2:c2:12:75:16:b2:08:4d:86:2c:40:af:99:a0:86:57:e3:
da:82:42:14:b3:19:3e:71:b5:15:99:c7:d8:8d:3e:80:a8:41:
f6:be:4d:be:69:03:71:5f:32:fb:eb:9b:fd:95:88:4c:5c:b4:
e5:99:ed:c4:ec:d6:74:db:de:8e:0c:72:d8:d0:40:5f:d4:1e:
85:02:4b:38:39:6a:a7:d3:56:e8:48:3e:08:b1:c2:65:80:7f:
a8:41:f2:24:17:d4:a5:0b:5c:fb:26:5e:2c:a1:79:70:06:06:
68:71:50:58:87:65:f6:a6:d9:01:f2:30:e8:24:e5:ad:7c:81:
10:c0:d3:05:b1:32:dc:52:45:19:5d:aa:5c:c3:11:14:e9:90:
01:d1:8d:dc:3e:20:b6:38:bd:62:bf:89:c2:54:bc:ee:10:bf:
88:55:2b:0b:31:37:80:a3:ff:03:cd:91:af:63:44:dc:5a:d3:
e0:8b:f3:93:6f:6d:dd:58:a2:5a:9d:d6:43:da:8d:da:da:4d:
45:a3:43:fc:f1:7a:77:4a:44:0f:d5:31:03:03:32:19:97:a5:
fd:04:84:70:82:28:ab:a2:27:4c:c9:73:d2:91:e6:b6:4e:d1:
8f:1b:7b:93:ab:90:8f:cd:3f:5d:51:51:eb:f6:36:03:26:52:
1a:c2:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:49:55 2026 by rpki-client