
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
File: WYMt_ndUWn2J_bBhkVxnGef4K98.mft (raw, json)
Hash identifier: Z4tFXfc3pvKgOik+gqu5iawSxqMk6kibjur0vqGo5xU=
Subject key identifier: 2D:89:C6:F0:03:EC:A5:6A:3F:8D:23:55:1C:3D:9B:EC:8E:55:3B:5B
Authority key identifier: 59:83:2D:FE:77:54:5A:7D:89:FD:B0:61:91:5C:67:19:E7:F8:2B:DF
Certificate issuer: /CN=A91D8601/serialNumber=59832DFE77545A7D89FDB061915C6719E7F82BDF
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
Manifest number: 78
Signing time: Thu 03 Sep 2026 08:04:01 +0000
Manifest this update: Thu 03 Sep 2026 08:04:00 +0000
Manifest next update: Thu 10 Sep 2026 08:04:00 +0000
Files and hashes: 1: WYMt_ndUWn2J_bBhkVxnGef4K98.crl (hash: laQJct5RG914BZTDum+SIMeZrYR/wRW1Ci+D0GPaZT0=)
2: CBF1F0FEF6AF11F09B571584436F56BC.roa (hash: Bawj5Qb3y5hud9s4mY4i7Q9eoq0uTVRDnGt9JTxtaYQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.crl
rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8601, serialNumber=59832DFE77545A7D89FDB061915C6719E7F82BDF
Validity
Not Before: Sep 3 08:04:00 2026 GMT
Not After : Sep 10 08:04:00 2026 GMT
Subject: CN=6a9929f0-f4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:26:5f:9a:f6:cb:a8:43:b7:da:43:72:bc:
e5:e0:c4:ac:ff:f9:79:ac:ea:93:b9:55:9e:d3:a2:
de:49:97:0a:0d:88:da:84:9d:81:d3:61:10:4e:a9:
66:12:3a:cf:53:26:cb:df:13:0f:ea:74:41:8a:3d:
fc:1d:19:23:d5:ef:30:f4:dc:85:b2:dc:3e:37:bb:
d3:3d:fe:40:5d:93:86:af:42:d9:5d:b3:a6:e4:eb:
98:cc:d9:d6:37:5f:c1:45:f0:12:11:31:b5:ac:2f:
68:df:2d:a8:f4:a3:2f:46:c8:ab:5d:d5:af:58:fc:
57:b0:fa:84:89:58:a9:aa:d0:d7:26:45:38:ac:a8:
53:42:1c:0b:ed:26:e6:d2:88:42:5d:c3:39:7b:3d:
23:eb:ae:7b:16:9a:70:cd:00:52:fb:cc:24:8a:81:
fc:98:b6:13:1d:90:6b:92:68:9b:52:3f:1d:02:3f:
eb:67:a7:ff:cb:c4:ff:d8:7b:60:4b:a0:01:6e:ea:
b5:3f:83:a5:f5:b6:81:7b:aa:30:44:11:a0:55:c5:
11:79:bd:57:f0:9f:ff:57:52:61:5c:76:3d:2b:a0:
50:38:ab:1a:ae:d0:e1:bd:c8:c0:d4:b8:13:16:46:
3b:72:21:2c:75:81:d3:76:92:3f:ca:6b:4d:76:00:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:89:C6:F0:03:EC:A5:6A:3F:8D:23:55:1C:3D:9B:EC:8E:55:3B:5B
X509v3 Authority Key Identifier:
keyid:59:83:2D:FE:77:54:5A:7D:89:FD:B0:61:91:5C:67:19:E7:F8:2B:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b1:71:4b:cc:9d:e7:d6:22:f9:61:7d:15:fc:c6:11:0d:ac:
09:d8:24:0f:f6:22:8a:16:65:ad:f5:7c:b3:78:4c:99:5f:ea:
9f:5b:7c:c3:80:da:41:79:4c:df:dd:97:71:d1:ee:9e:fd:57:
27:48:36:69:3c:a8:6f:c2:49:67:d4:1e:82:4d:88:cf:74:9e:
54:50:74:e3:8c:22:5a:6c:f0:44:4c:fd:0e:ef:06:d8:9a:bd:
a4:1d:b9:b4:8c:f9:9f:24:57:29:01:f9:04:66:30:36:34:2b:
ab:f1:99:ae:e4:4e:ac:d8:88:8e:4f:9d:54:24:74:25:aa:19:
a5:84:75:a4:26:1e:95:62:bf:5d:47:0a:37:0b:71:0d:00:6d:
91:64:a4:44:de:11:cf:63:0a:7d:49:03:3f:9e:27:7e:8e:b7:
8e:ab:9f:74:57:87:f9:28:aa:af:c1:b2:e8:f6:e9:55:c6:49:
f7:75:1b:7c:02:8c:e2:6e:61:e0:6c:71:a9:7f:86:67:ee:52:
a3:03:7c:79:9b:64:b2:d0:53:71:9b:d7:f4:c5:c4:0a:fc:db:
dc:78:0e:17:48:5f:b8:30:96:f8:5a:fe:c4:8b:d5:7d:d9:f7:
76:23:33:3c:97:5c:62:05:45:a3:9d:62:3c:cd:3e:1e:9a:a4:
a3:80:df:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:42:04 2026 by rpki-client