
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json)
Hash identifier: FS0jDslp4bv+SDjJIQUf0jrIz8pRYTtKLr8TTmKsKcE=
Subject key identifier: 24:2E:AA:CF:CD:31:14:ED:92:55:6A:D8:33:34:A9:7F:C9:85:DA:43
Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Certificate serial: 029E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
Manifest number: 0298
Signing time: Mon 05 Oct 2026 01:57:16 +0000
Manifest this update: Mon 05 Oct 2026 01:57:16 +0000
Manifest next update: Mon 12 Oct 2026 01:57:16 +0000
Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: ywV2aKQzk/R3NNDQjCGoEUG1rRX7xU+DDu7jrrLu7Yc=)
2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: 8F41x2fmLZ5M8u7RlY+aL2kU1d0Mkh7PiR5sgAseHxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Validity
Not Before: Oct 5 01:57:16 2026 GMT
Not After : Oct 12 01:57:16 2026 GMT
Subject: CN=6ac303fc-c775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7e:fd:a1:59:61:d0:79:ca:53:cf:06:c2:57:
23:97:1f:c3:f8:8c:33:93:17:34:e0:fc:ff:7c:a1:
d9:92:31:67:87:60:01:61:bb:e5:41:6f:3b:a1:78:
5f:22:b3:23:ff:89:8b:e5:9f:b3:cb:71:5b:2f:d9:
12:4e:c7:79:7e:28:b1:de:60:14:f0:15:32:c7:0e:
1f:52:a1:ab:ab:b2:8d:a8:7e:a6:c9:17:65:48:d8:
e0:45:fb:33:b4:48:27:db:2b:6a:9c:24:04:1b:f7:
66:40:27:72:e9:e8:b3:b0:77:0d:02:8c:2e:9d:95:
39:87:5a:73:75:ff:d8:5e:1c:40:9f:cf:3d:15:38:
3e:4f:61:63:0b:31:d7:ea:7a:c9:c1:ac:af:c3:56:
d8:f9:ca:30:b0:42:d7:37:56:d6:05:30:81:8b:19:
28:ce:b9:1a:7e:ef:08:c3:18:c3:28:a9:af:7e:23:
b8:22:cb:a1:0d:c4:db:e2:4f:45:be:7e:b4:49:84:
6f:36:f9:40:ae:96:76:bc:ca:94:eb:80:f8:c4:56:
08:cd:04:d3:62:be:f5:38:9d:33:6f:1c:e7:1f:7d:
16:96:e5:96:3a:ee:89:bf:e0:c1:aa:79:17:86:5d:
22:60:2c:97:16:76:e1:10:53:60:b1:b4:b2:96:bf:
e2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2E:AA:CF:CD:31:14:ED:92:55:6A:D8:33:34:A9:7F:C9:85:DA:43
X509v3 Authority Key Identifier:
keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b0:ec:60:f4:cf:32:75:85:47:fe:78:9c:a9:e6:57:59:63:
6c:73:35:57:dd:b7:3a:9c:bd:e5:39:36:a0:d3:72:ee:53:54:
08:50:43:91:cc:c1:ae:f8:8e:8c:12:c7:03:f3:b2:7b:e7:69:
29:0c:9d:3c:ba:fe:89:94:6a:d4:03:3c:a6:ef:84:69:f8:f7:
3b:20:3a:df:d6:01:f5:ad:4a:08:43:f9:71:93:5a:30:83:e0:
42:8d:b5:3d:4e:2e:9d:65:bd:0a:97:6d:0a:fb:b6:2e:20:3e:
32:9a:55:b4:be:91:9f:67:77:36:ac:b7:e5:f2:7a:45:6f:e2:
1f:1f:61:08:e9:3a:f5:15:5d:9e:39:21:65:6e:da:14:61:df:
71:3d:a2:ae:94:f5:b9:bc:20:f2:d5:a9:25:5d:35:82:e9:c6:
37:59:c8:9a:8e:5a:c9:26:20:5f:24:75:6e:2e:ac:97:de:16:
e6:d1:1e:4f:19:40:c7:b0:a9:97:d7:ad:8c:b5:d0:b3:bd:4b:
f8:7e:45:72:db:e6:94:80:79:82:4e:ad:5a:f3:0f:c4:c5:89:
02:b2:86:fc:1f:c8:6e:45:50:91:47:cc:f8:09:79:ca:de:86:
7d:c6:21:59:4e:c3:cc:c2:06:7d:fd:9c:86:4c:c1:3f:c6:fd:
d4:56:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:50:19 2026 by rpki-client