
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
File: WY9YPfrp_JTaoww3iyFr7JcOM5g.mft (raw, json)
Hash identifier: vGJ3TcDrHpgizyvKb9HGos2BywifToMVHdwbveat8xU=
Subject key identifier: A2:6E:CB:4E:23:21:B4:EF:13:2B:C2:C9:F3:2A:A0:00:AB:0B:B5:B0
Authority key identifier: 59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98
Certificate issuer: /CN=A91EBD8F/serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
Manifest number: 71
Signing time: Sun 05 Jul 2026 08:36:09 +0000
Manifest this update: Sun 05 Jul 2026 08:36:08 +0000
Manifest next update: Sun 12 Jul 2026 08:36:08 +0000
Files and hashes: 1: WY9YPfrp_JTaoww3iyFr7JcOM5g.crl (hash: 6pyvvGGsxZOruc5/h04jG0dcs+c99/wYbEfvFsujn4s=)
2: 54F9E058D97F11F0B42EB3E75ED3641D.roa (hash: IbfmTJT4slGXqqy5jBNMbpSI8oHXqAY0nysJ/plorU0=)
3: 53EF3992D97F11F0B42EB3E75ED3641D.roa (hash: CB3oUxbQq+oYolrrHdTJzTMonbK2g+QTxJH/oX6hwkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl
rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 08:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBD8F, serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
Validity
Not Before: Jul 5 08:36:08 2026 GMT
Not After : Jul 12 08:36:08 2026 GMT
Subject: CN=6a4a1779-25c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:0b:49:e4:22:15:f9:51:2c:fe:9f:7e:74:
f7:bf:8b:53:c7:d0:3d:45:9c:44:8e:7c:ba:c3:5a:
c7:a7:3b:dd:73:88:95:5e:68:d3:73:c1:4a:91:68:
be:e2:f0:fe:a0:41:d8:e8:8e:15:41:a3:01:5c:54:
84:ff:c5:54:8d:92:af:cb:81:bf:48:80:b4:39:bc:
ce:ff:4f:7f:6a:bb:7a:a2:6b:36:90:de:ba:fe:43:
35:62:c5:1d:f3:14:29:28:5b:0a:55:fd:40:5a:43:
fe:95:aa:87:37:e6:eb:a9:aa:d8:1d:18:ef:30:d3:
f1:79:6b:03:ed:2f:ff:bb:44:b7:5b:13:9f:41:7e:
03:6b:12:12:79:60:73:2f:f6:dd:6b:97:61:05:72:
64:17:e9:5c:ba:e2:cd:72:3d:bf:cf:c5:b6:74:ea:
8d:16:ee:2a:f4:4d:a3:d8:74:11:a2:10:05:4d:1c:
18:ab:8b:a5:bf:71:80:4c:70:a3:5d:b1:de:cd:3f:
8c:b8:40:ec:7f:e0:55:f8:48:59:33:4f:9a:8a:50:
e8:6d:8b:57:ab:5b:d2:70:3d:0f:4d:73:a3:5b:cd:
87:a4:b0:c9:55:f5:82:90:57:50:74:09:8c:36:c1:
d3:97:c8:9f:06:96:d8:72:b2:2f:7d:0f:7b:11:c4:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6E:CB:4E:23:21:B4:EF:13:2B:C2:C9:F3:2A:A0:00:AB:0B:B5:B0
X509v3 Authority Key Identifier:
keyid:59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:17:bf:4a:77:16:48:f8:50:d9:67:6c:1d:d0:18:db:90:d2:
38:7d:85:8d:a7:7a:ec:a9:64:01:09:fb:d5:41:c8:d4:73:3b:
43:39:fa:45:bd:39:80:f0:3a:db:56:1d:f2:05:a7:12:c7:00:
9e:09:16:4c:db:75:be:59:b4:de:7e:e2:38:da:49:69:f7:00:
70:d4:f6:68:54:74:11:8d:03:5e:a9:ba:25:95:7b:1d:da:99:
f0:00:18:90:fd:56:75:78:fb:e2:d8:4b:12:aa:2e:b4:95:ca:
b2:c9:a2:c6:0c:b2:f0:8d:0e:6e:21:8e:b6:9e:91:89:3c:b7:
90:62:bc:9b:86:88:96:bd:4a:7f:34:b3:2d:ab:27:fe:9e:c6:
25:5a:0f:6a:de:de:86:35:58:4e:64:a2:69:0e:4b:03:bc:63:
92:cc:ef:1d:a9:88:12:1d:d6:65:92:8c:e9:37:61:74:74:6d:
61:66:91:6c:33:28:7f:61:4d:5b:2b:e4:e1:ef:e9:db:a0:4d:
10:c8:90:1d:49:4a:87:45:b2:7b:4d:75:b8:e2:17:c5:71:bc:
69:7a:5d:12:5f:e1:fc:72:ce:e5:af:16:9a:6b:ed:fb:71:93:
d1:f1:f5:e2:fb:e4:da:c8:87:98:4d:37:16:53:45:16:db:f6:
b6:5f:83:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:12:16 2026 by rpki-client