
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
File: WY9YPfrp_JTaoww3iyFr7JcOM5g.mft (raw, json)
Hash identifier: OYNrpPoL/AnIiupVZD6bNcSYEt0VshSIiJxudwR6BQc=
Subject key identifier: A1:5E:39:10:06:B0:5B:A0:CE:F1:6F:BE:60:1E:54:0B:A8:0A:55:78
Authority key identifier: 59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98
Certificate issuer: /CN=A91EBD8F/serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
Manifest number: A0
Signing time: Mon 05 Oct 2026 07:45:38 +0000
Manifest this update: Mon 05 Oct 2026 07:45:38 +0000
Manifest next update: Mon 12 Oct 2026 07:45:38 +0000
Files and hashes: 1: WY9YPfrp_JTaoww3iyFr7JcOM5g.crl (hash: ODo7vol56US2mkoiBbL9+1fz2n5el0rBtrQvtS5vH9g=)
2: 54F9E058D97F11F0B42EB3E75ED3641D.roa (hash: IbfmTJT4slGXqqy5jBNMbpSI8oHXqAY0nysJ/plorU0=)
3: 53EF3992D97F11F0B42EB3E75ED3641D.roa (hash: CB3oUxbQq+oYolrrHdTJzTMonbK2g+QTxJH/oX6hwkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl
rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:45:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBD8F, serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
Validity
Not Before: Oct 5 07:45:38 2026 GMT
Not After : Oct 12 07:45:38 2026 GMT
Subject: CN=6ac355a2-93ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:4c:35:e5:23:83:29:86:45:c7:c1:da:69:
e1:be:89:05:6e:ac:a2:49:3b:d5:5d:90:6b:ec:59:
cd:87:b0:4f:b3:3a:40:86:58:5e:92:65:a5:54:c7:
13:60:66:52:b8:c3:73:ab:06:c6:33:49:5e:6f:79:
63:b6:b8:01:9d:ed:ef:5d:b8:e8:68:ad:c6:82:0f:
4b:fc:10:83:7e:cd:e0:00:82:99:c4:0f:40:26:07:
56:29:cb:92:11:dd:2a:2b:dd:9d:4f:e2:76:b3:d2:
1b:cc:28:0f:a4:e8:3c:6f:11:48:89:b8:fc:ae:71:
ad:6e:1f:1d:26:8b:4d:d2:b3:b5:cf:8a:02:55:ca:
22:81:50:fb:0a:9d:d7:b9:02:08:65:5f:18:01:55:
92:c9:1a:3e:9a:8f:1d:58:2b:dc:bc:65:54:62:35:
99:5c:88:cc:1f:69:c3:6f:6f:19:12:3f:f7:4b:a6:
51:0a:d5:1d:6a:a7:b4:7f:e8:ba:97:2c:13:de:85:
e8:5c:f9:ac:e2:39:4a:e6:8f:c6:e1:53:75:52:f7:
0b:bd:84:1a:1c:b1:9d:e4:6d:20:da:9f:52:35:99:
54:8e:7e:96:13:44:ff:21:2a:e7:de:39:d0:18:af:
cf:10:24:e7:dd:7b:29:5f:d6:9f:b5:dc:77:5f:69:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5E:39:10:06:B0:5B:A0:CE:F1:6F:BE:60:1E:54:0B:A8:0A:55:78
X509v3 Authority Key Identifier:
keyid:59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:65:26:69:27:46:a6:21:03:9d:10:b4:06:11:ba:9e:3d:4d:
b1:0b:d4:22:e0:9a:dd:12:a9:8c:ce:9b:55:a2:f8:96:93:30:
66:74:59:06:8a:90:60:bb:44:d0:2b:62:56:9b:ee:5f:85:f8:
fc:c9:f0:02:d2:2c:a7:9d:17:53:12:00:47:25:43:aa:26:8f:
1d:00:c2:39:00:5a:d4:69:0b:83:cc:df:0b:49:9b:20:6b:60:
3e:bd:b2:c4:0c:b0:96:c3:2f:43:0f:83:d0:85:07:1a:44:f0:
2e:eb:dc:d8:31:a3:66:fb:62:24:ff:60:cd:03:7b:f1:7b:cb:
25:b0:a6:c5:1d:8c:91:ed:02:e8:b1:38:97:7d:4a:65:f2:da:
c2:8e:90:48:bc:9d:11:bc:b9:e9:fc:22:c3:75:d1:ff:19:95:
71:d9:25:62:6f:36:80:c9:7b:f8:ec:b1:94:fd:f7:61:08:45:
57:6c:d9:23:66:e1:d2:40:b8:c9:f6:f6:59:74:ea:97:59:f3:
0c:22:c5:4f:6b:80:0f:a8:5b:ef:e5:9f:cf:fe:4f:e8:48:b5:
8b:ba:26:cd:1f:40:4a:0b:cb:e7:f2:88:0d:52:83:b7:8f:a2:
a0:3e:1f:09:b6:71:18:9b:34:cb:b3:90:1a:e7:1f:8b:a7:83:
50:ba:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:42:42 2026 by rpki-client