
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft
File: -WJTlSWdVbnjutm2QuFbY5vAe8c.mft (raw, json)
Hash identifier: F5NBwiinwxuFiV2zSlASMNOPZmoHJQEbbXOf6QhI+pY=
Subject key identifier: CA:B4:0D:0D:E3:F8:46:42:CE:2A:9A:66:5C:19:BA:48:27:8D:F2:7A
Authority key identifier: F9:62:53:95:25:9D:55:B9:E3:BA:D9:B6:42:E1:5B:63:9B:C0:7B:C7
Certificate issuer: /CN=A91FFE2A/serialNumber=F9625395259D55B9E3BAD9B642E15B639BC07BC7
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft
Manifest number: 15
Signing time: Thu 03 Sep 2026 09:58:48 +0000
Manifest this update: Thu 03 Sep 2026 09:58:48 +0000
Manifest next update: Thu 10 Sep 2026 09:58:48 +0000
Files and hashes: 1: -WJTlSWdVbnjutm2QuFbY5vAe8c.crl (hash: MkxhcvDAuZMHiGV87Ctor+cozfii/CqywkoB5mscaLk=)
2: 1E1845C88D5E11F18A7850066B11F970.roa (hash: hm1LeJzMvNJnJ0qU8ZDYrWN+bMQ1p67o2pDficVOHz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.crl
rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 09:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFE2A, serialNumber=F9625395259D55B9E3BAD9B642E15B639BC07BC7
Validity
Not Before: Sep 3 09:58:48 2026 GMT
Not After : Sep 10 09:58:48 2026 GMT
Subject: CN=6a9944d8-de83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:c1:34:67:f7:18:a7:4e:82:a0:94:77:01:
87:fe:ff:4e:3d:42:01:14:b4:dd:5b:d1:ba:a1:18:
29:cf:0e:0a:eb:85:e5:2d:e1:c5:06:91:15:64:4e:
bf:ed:56:2f:21:f3:29:45:b4:10:c4:04:0f:e9:73:
ad:ec:94:98:af:b0:04:ed:58:07:39:89:40:46:91:
66:0b:52:5c:c6:7d:88:1f:e7:1c:76:59:69:2d:97:
08:cd:37:97:c5:0c:8c:88:ae:dc:fb:3d:d7:72:f8:
f6:b2:cd:a0:26:14:25:91:ac:a7:46:e2:6d:cc:30:
8b:01:ea:90:72:72:81:c7:61:e5:94:de:4f:33:9b:
18:bd:82:16:e0:84:84:d4:31:31:61:41:23:f8:ef:
37:02:d3:5f:2a:ba:d0:a0:0e:0e:9b:ad:51:3d:de:
8b:9b:93:b4:76:f8:ec:29:ec:4b:e6:d9:b7:e3:dd:
87:4f:38:f9:45:20:04:3f:3a:38:63:fe:19:74:ea:
78:25:32:35:ba:f3:d8:1b:ae:20:f2:31:75:91:d1:
63:b6:1a:7d:a7:72:5a:a4:91:02:3d:2d:36:51:3d:
87:72:8b:a1:96:84:8c:c2:b0:34:a3:e8:51:e7:74:
be:b7:e9:8a:0e:5a:80:4a:d9:4b:d9:b4:b4:46:e7:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B4:0D:0D:E3:F8:46:42:CE:2A:9A:66:5C:19:BA:48:27:8D:F2:7A
X509v3 Authority Key Identifier:
keyid:F9:62:53:95:25:9D:55:B9:E3:BA:D9:B6:42:E1:5B:63:9B:C0:7B:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WJTlSWdVbnjutm2QuFbY5vAe8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE2A/6C8773128D5B11F197683D0E6A11F970/-WJTlSWdVbnjutm2QuFbY5vAe8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:16:09:bc:12:03:b0:1e:a5:a9:e5:7f:24:93:e7:1b:dc:ba:
eb:61:33:44:61:1a:64:ea:f6:27:ed:af:bb:37:40:99:f6:02:
de:9d:f5:63:dd:15:23:1a:1c:a3:ff:cf:aa:36:cc:0e:a7:5f:
6e:e6:09:f4:c4:b8:f3:d9:a1:73:6d:56:c7:ad:3f:c4:08:c3:
03:c9:7e:b1:f2:bf:71:ef:c8:7a:fa:24:74:39:98:40:37:3d:
b6:0b:a0:81:79:a2:21:5d:7d:ba:94:66:a9:aa:09:a3:79:35:
a2:09:38:47:c3:19:ce:51:39:51:58:cc:c7:53:91:4f:da:41:
15:f6:15:11:65:f6:a8:3d:38:d4:7b:57:f8:85:da:1c:4a:22:
36:de:84:73:e9:d5:86:4c:0c:e3:b0:c9:96:a0:57:fa:1f:7b:
f8:57:0c:00:98:46:8e:e0:ac:bf:5d:29:a9:0c:36:6b:e3:aa:
60:b2:7a:5e:28:ea:58:85:56:32:1b:37:66:00:77:25:ca:46:
f2:ff:b1:b9:e2:14:56:a1:c8:4a:af:98:d5:3c:a5:e3:11:d1:
e0:50:b5:36:8f:6c:0a:e6:87:e7:6a:4a:aa:22:4d:78:04:da:
2a:7e:b8:37:4e:cc:97:79:fc:60:e4:54:c8:81:46:05:15:f2:
a6:58:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:24 2026 by rpki-client