
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json)
Hash identifier: n3+YAac/E6g3R1b6tKutnoGWdmmRxL0pBA9aon1k8wE=
Subject key identifier: AC:10:17:40:84:61:49:59:FD:A7:98:31:A3:83:92:74:22:B7:65:BC
Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Certificate serial: 0259
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
Manifest number: 0253
Signing time: Thu 21 May 2026 02:20:38 +0000
Manifest this update: Thu 21 May 2026 02:20:38 +0000
Manifest next update: Thu 28 May 2026 02:20:38 +0000
Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: KHsBVM31Bq2HFktwq8GGmgxLooiOD7WFoMEDUOgK6Wg=)
2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: 8F41x2fmLZ5M8u7RlY+aL2kU1d0Mkh7PiR5sgAseHxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Validity
Not Before: May 21 02:20:38 2026 GMT
Not After : May 28 02:20:38 2026 GMT
Subject: CN=6a0e6bf6-8e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9c:13:7a:34:ab:d3:95:95:15:2f:62:4f:3a:
c6:08:d9:0c:8e:4e:53:d1:c1:6a:46:bc:db:76:86:
a4:42:42:71:52:3d:1e:a8:eb:5a:ae:78:4b:e9:41:
15:e1:0f:cd:04:48:0a:50:1c:bc:c3:56:9b:87:78:
a0:26:b4:ff:39:06:37:f5:1e:24:60:8f:da:c5:bd:
7a:ee:f9:b6:ef:42:6f:46:6f:46:5e:92:c9:36:9b:
2b:f5:58:41:9a:a2:65:db:53:db:f8:60:d8:82:e8:
12:fe:25:c7:c5:e0:8a:f4:f3:34:87:64:1b:d1:94:
30:90:ae:c9:27:81:53:e4:d7:3d:c1:35:a5:eb:63:
05:db:74:4b:4c:69:91:49:25:f3:39:6c:b2:0a:bd:
c5:3f:57:38:61:e5:fa:82:a3:81:86:15:5c:7a:e7:
63:9d:d1:95:17:db:ac:1c:d2:e5:05:20:3d:67:70:
03:78:72:34:a4:9b:d0:38:21:f6:80:f8:71:de:1e:
d6:68:8c:ce:dd:00:75:34:f7:a3:db:08:18:62:ec:
d0:f0:b4:93:e1:86:83:41:2e:0f:4b:79:1e:5a:b9:
ed:73:1f:3a:04:8f:65:3d:59:1f:9b:5a:ba:99:e7:
61:dc:7f:30:fc:d2:db:81:a0:52:49:a5:d0:a0:e6:
11:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:10:17:40:84:61:49:59:FD:A7:98:31:A3:83:92:74:22:B7:65:BC
X509v3 Authority Key Identifier:
keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:37:97:8e:c9:08:4b:fa:82:cd:0a:be:5f:f5:51:18:a9:28:
03:7f:f2:5d:fd:92:80:c6:f0:7b:28:11:a3:8e:18:e2:78:53:
52:e9:dd:1f:91:b6:84:50:ad:47:6d:42:6f:59:ae:d4:39:c8:
e7:75:14:1d:99:ce:dd:6c:27:d4:9d:9d:0d:c0:99:f8:e2:da:
ae:67:19:f1:58:1d:72:fd:02:f6:e4:84:41:ef:f4:9f:49:29:
ed:9e:71:00:8f:f9:b4:35:f0:97:8d:d0:f5:e5:a2:75:1c:db:
0a:fc:12:3e:42:ad:56:12:f5:62:ba:d8:e3:b1:56:2d:9b:27:
10:7c:84:10:94:f7:0f:b6:98:da:b6:b9:88:01:eb:2a:ff:3d:
b7:0c:95:96:b8:dc:49:67:66:7f:f3:57:77:a8:80:6b:73:0e:
9c:88:6b:5d:6f:d9:8e:65:c1:59:50:fd:84:12:1c:b0:c2:5e:
6b:69:b2:5c:84:e8:1c:af:5f:7d:80:9d:09:88:b8:96:52:12:
02:35:fe:5f:c9:54:01:92:aa:54:a2:1b:8e:db:08:fe:03:b2:
82:fe:1e:b1:2d:d5:4c:96:4c:98:83:2f:46:d6:d7:43:37:19:
ab:04:be:c3:97:3d:3d:4a:55:a1:b2:8f:a4:c5:9c:47:39:9e:
31:52:14:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkI4ODAxMTAvBgNVBAUTKDU5OEM1RkNFQTU1NUFFNTk1Q0M5RTk3NjFDMEZCMkRF
QUVBNDQ1MUYwHhcNMjYwNTIxMDIyMDM4WhcNMjYwNTI4MDIyMDM4WjAYMRYwFAYD
VQQDEw02YTBlNmJmNi04ZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3pwTejSr05WVFS9iTzrGCNkMjk5T0cFqRrzbdoakQkJxUj0eqOtarnhL6UEV
4Q/NBEgKUBy8w1abh3igJrT/OQY39R4kYI/axb167vm270JvRm9GXpLJNpsr9VhB
mqJl21Pb+GDYgugS/iXHxeCK9PM0h2Qb0ZQwkK7JJ4FT5Nc9wTWl62MF23RLTGmR
SSXzOWyyCr3FP1c4YeX6gqOBhhVceudjndGVF9usHNLlBSA9Z3ADeHI0pJvQOCH2
gPhx3h7WaIzO3QB1NPej2wgYYuzQ8LST4YaDQS4PS3keWrntcx86BI9lPVkfm1q6
medh3H8w/NLbgaBSSaXQoOYRwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKwQF0CE
YUlZ/aeYMaODknQit2W8MB8GA1UdIwQYMBaAFFmMX86lVa5ZXMnpdhwPst6upEUf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjg4MC9DMTkwM0U2MkM3
NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJsbGN5ZWwySEEteTNxNmtS
UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dZeGZ6cVZWcmxsY3llbDJIQS15M3E2a1JSOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Qjg4MC9DMTkwM0U2MkM3NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJs
bGN5ZWwySEEteTNxNmtSUjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWzeXjskIS/qCzQq+X/VRGKkoA3/yXf2SgMbweygRo44Y4nhTUundH5G2hFCt
R21Cb1mu1DnI53UUHZnO3Wwn1J2dDcCZ+OLarmcZ8Vgdcv0C9uSEQe/0n0kp7Z5x
AI/5tDXwl43Q9eWidRzbCvwSPkKtVhL1YrrY47FWLZsnEHyEEJT3D7aY2ra5iAHr
Kv89twyVlrjcSWdmf/NXd6iAa3MOnIhrXW/ZjmXBWVD9hBIcsMJea2myXIToHK9f
fYCdCYi4llISAjX+X8lUAZKqVKIbjtsI/gOygv4esS3VTJZMmIMvRtbXQzcZqwS+
w5c9PUpVobKPpMWcRzmeMVIUyQ==
-----END CERTIFICATE-----
Generated at Thu May 21 10:39:30 2026 by rpki-client