
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
File: W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json)
Hash identifier: yjZGFn4j6YCG9S3Loefi1XuBTJGPpmiVQeLHJvvNB14=
Subject key identifier: A6:4D:46:51:E3:C7:AD:20:E9:EC:9A:22:4A:58:22:DC:A3:97:69:E6
Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB
Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
Certificate serial: 0233
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
Manifest number: 0228
Signing time: Sun 25 Oct 2026 03:18:06 +0000
Manifest this update: Sun 25 Oct 2026 03:18:06 +0000
Manifest next update: Sun 01 Nov 2026 03:18:06 +0000
Files and hashes: 1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: 60lT+MhrAOPKnm88dUmbKKlSg1iprkayPXwLLPeYbAE=)
2: D61299F2D8C011EFB41E1319C4F9AE02.roa (hash: I8tswjuoYQFOiqyz6Kcs03FRJHU5DGwueNL9D41SX9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl
rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 03:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA5A2, serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
Validity
Not Before: Oct 25 03:18:06 2026 GMT
Not After : Nov 1 03:18:06 2026 GMT
Subject: CN=6add74ee-5fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:d4:f3:4c:65:22:51:a2:78:01:90:3f:89:
9a:80:5c:59:99:99:b4:f0:a6:12:ad:2c:61:cf:02:
5b:4e:08:12:e1:59:af:7d:65:e8:29:37:26:98:e4:
62:b2:86:35:b9:d8:e8:ec:4f:0f:cd:57:d4:a4:16:
e0:23:97:ae:6e:07:f1:b1:79:29:b3:4d:82:5d:c7:
49:75:00:60:f1:09:61:e1:7f:3e:1c:19:8a:9c:35:
cb:7d:8b:e6:bc:bf:b6:09:92:fe:a4:c8:a1:3e:51:
c9:37:8e:7f:70:92:0e:07:d8:9d:92:9a:c1:94:68:
60:cc:68:1e:71:4d:2e:49:4f:37:91:12:88:e0:d2:
d0:29:d8:34:c4:25:85:41:ba:eb:1d:c5:17:30:74:
8d:36:d0:10:bd:99:7f:d6:9e:ca:f4:e1:92:18:82:
01:ba:a9:0b:8c:0b:30:81:4d:c5:0b:d3:73:cc:e0:
e2:39:75:ee:18:58:e7:4f:c9:d3:12:33:23:6a:3c:
85:e4:b1:1f:22:25:ab:22:f4:bc:86:40:cd:16:89:
d7:6d:95:aa:53:1a:35:03:70:32:61:05:d8:be:a0:
07:74:4f:f6:7c:7d:47:ef:83:f0:da:32:cd:81:df:
95:71:e8:71:34:c0:77:94:93:2b:5b:ed:e3:c7:63:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4D:46:51:E3:C7:AD:20:E9:EC:9A:22:4A:58:22:DC:A3:97:69:E6
X509v3 Authority Key Identifier:
keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:8c:35:91:40:9d:98:42:bd:06:1a:9c:3d:9f:c7:15:92:1a:
47:fa:3f:f4:7a:0a:e8:13:91:14:50:f5:18:aa:92:54:5b:96:
d2:2e:fc:0a:03:c0:f2:03:32:ee:67:a1:3c:ed:b4:f9:6e:d7:
f2:0d:da:ef:4b:51:70:dd:94:3f:04:b0:a8:ad:da:2b:2f:05:
cc:9d:7c:e9:68:fe:4f:e0:5a:48:68:4b:d1:b3:64:b6:bb:8f:
33:18:5c:21:b4:7d:be:b3:29:3c:4c:08:ac:ef:17:0e:0a:2e:
6a:32:01:d5:2a:73:ca:99:4b:14:63:a1:c8:f6:a5:af:99:d7:
3d:ab:ea:32:fe:a7:a9:47:67:ea:5d:b4:d1:47:df:8e:c1:f3:
3a:44:88:6c:83:8f:5f:74:bc:5c:7f:6e:93:af:3e:dd:32:1e:
76:dd:5d:21:4f:f0:a6:10:d2:09:a4:f4:70:6f:d0:c0:a9:b2:
1b:f0:d7:fe:47:5e:47:07:d9:67:c7:7e:fe:7e:e8:08:bd:48:
90:35:89:9c:28:9e:03:33:ca:af:70:df:4d:14:89:0c:66:e6:
c9:fe:81:62:b8:c8:f6:ce:01:5d:7d:8a:ab:f1:e2:86:10:51:
8a:de:2b:cb:8d:a4:32:3d:05:b1:82:39:f5:ef:d1:fa:21:5b:
11:08:46:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE1QTIxMTAvBgNVBAUTKDVCNTlGQ0I2NTM0MUZEMzM3ODlCRkJBRkE5NjM3REYw
Q0U0MDREQUIwHhcNMjYxMDI1MDMxODA2WhcNMjYxMTAxMDMxODA2WjAYMRYwFAYD
VQQDEw02YWRkNzRlZS01ZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnHvU80xlIlGieAGQP4magFxZmZm08KYSrSxhzwJbTggS4VmvfWXoKTcmmORi
soY1udjo7E8PzVfUpBbgI5eubgfxsXkps02CXcdJdQBg8Qlh4X8+HBmKnDXLfYvm
vL+2CZL+pMihPlHJN45/cJIOB9idkprBlGhgzGgecU0uSU83kRKI4NLQKdg0xCWF
QbrrHcUXMHSNNtAQvZl/1p7K9OGSGIIBuqkLjAswgU3FC9NzzODiOXXuGFjnT8nT
EjMjajyF5LEfIiWrIvS8hkDNFonXbZWqUxo1A3AyYQXYvqAHdE/2fH1H74Pw2jLN
gd+VcehxNMB3lJMrW+3jx2M/nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZNRlHj
x60g6eyaIkpYItyjl2nmMB8GA1UdIwQYMBaAFFtZ/LZTQf0zeJv7r6ljffDOQE2r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi8zRTE2NDE2ODk4
RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9UTjRtX3V2cVdOOThNNUFU
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1cxbjh0bE5CX1RONG1fdXZxV045OE01QVRhcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTVBMi8zRTE2NDE2ODk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9U
TjRtX3V2cVdOOThNNUFUYXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZYw1kUCdmEK9BhqcPZ/HFZIaR/o/9HoK6BORFFD1GKqSVFuW0i78CgPA8gMy
7mehPO20+W7X8g3a70tRcN2UPwSwqK3aKy8FzJ186Wj+T+BaSGhL0bNktruPMxhc
IbR9vrMpPEwIrO8XDgouajIB1SpzyplLFGOhyPalr5nXPavqMv6nqUdn6l200Uff
jsHzOkSIbIOPX3S8XH9uk68+3TIedt1dIU/wphDSCaT0cG/QwKmyG/DX/kdeRwfZ
Z8d+/n7oCL1IkDWJnCieAzPKr3DfTRSJDGbmyf6BYrjI9s4BXX2Kq/HihhBRit4r
y42kMj0FsYI59e/R+iFbEQhGAQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:40 2026 by rpki-client