
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
File: wj3utHnnD2DvynyIRiuVudwiydA.mft (raw, json)
Hash identifier: ieEGm/HGGhQRNpI5qAtGvCGp3rgUxYVxWUIeBzlv+wU=
Subject key identifier: 37:CD:36:01:55:2B:C8:E3:41:84:B8:38:19:8B:91:22:2D:69:C1:3C
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Certificate issuer: /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
Manifest number: E4
Signing time: Sun 27 Sep 2026 07:05:54 +0000
Manifest this update: Sun 27 Sep 2026 07:05:53 +0000
Manifest next update: Sun 04 Oct 2026 07:05:53 +0000
Files and hashes: 1: wj3utHnnD2DvynyIRiuVudwiydA.crl (hash: yB+BCdgv/Rdfqn6N0KbkHzbeso+VBuD6d1ZfI980Ybw=)
2: 9EE7FBDA678511F0999A252DC4F9AE02.roa (hash: i9qFzs4jcopAlys8hXxF83fhftnlVXNWVCgR4foN+vo=)
3: 9F685E60678511F0999A252DC4F9AE02.roa (hash: /3g7W2sZcKvJU54TrxyHeP6DXKh2Hj/Gzoz/rHd6bTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 07:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Validity
Not Before: Sep 27 07:05:53 2026 GMT
Not After : Oct 4 07:05:53 2026 GMT
Subject: CN=6ab8c052-73e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:72:bd:68:18:13:ad:6a:42:41:ca:5d:a2:
5d:cc:1a:3f:90:03:84:62:1c:d8:d4:9b:ed:1c:69:
7d:e2:9b:1d:89:25:6c:d7:1a:be:aa:ca:a2:fa:ce:
d7:bc:9c:62:19:7f:b4:7e:bc:be:43:72:2e:4b:cb:
c2:76:ae:5d:d7:4f:df:e0:bc:5b:0a:6d:20:f9:1d:
f5:a6:36:13:9f:55:0b:5c:5e:fb:85:c4:ed:e5:99:
d6:78:17:9b:96:cc:77:8f:3b:a5:b4:95:00:84:7b:
90:98:fb:64:f8:3b:a1:7b:9c:68:50:35:ac:51:27:
20:58:01:43:6d:11:e0:ee:8a:6b:1a:80:db:db:3b:
1d:e6:e2:b5:08:d3:1d:ee:02:9d:75:da:59:49:bf:
16:d9:fd:9d:c8:d0:14:9a:a4:64:e9:06:48:0d:d5:
60:62:82:33:b6:16:dc:fa:48:1b:6b:ea:86:f0:6e:
d9:dd:bc:70:cc:c5:e3:a0:9e:c5:4e:51:d3:7f:b0:
98:33:79:75:73:eb:d7:32:5b:be:92:29:3f:e0:02:
df:e2:9c:6d:4f:62:58:c3:71:5f:d3:c9:49:74:f5:
8e:d4:93:7c:68:12:94:e8:dc:23:f1:9f:08:e7:58:
11:bd:bf:44:38:85:81:59:78:e8:e5:1e:ec:60:55:
6a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CD:36:01:55:2B:C8:E3:41:84:B8:38:19:8B:91:22:2D:69:C1:3C
X509v3 Authority Key Identifier:
keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:10:65:82:fb:cf:8d:b6:33:5b:1c:d5:f0:1e:89:84:e7:5b:
f1:23:b1:c4:3d:47:5f:d9:0f:d8:d6:fc:d6:6d:21:7e:47:d4:
cb:ad:0a:eb:05:38:6d:c5:a4:b2:85:27:95:de:63:0f:22:46:
ba:4f:43:cb:e2:60:fe:1e:af:9b:5e:1e:47:18:1f:be:2b:62:
ed:07:7d:e9:38:77:c0:ba:ac:6f:b9:29:dd:c3:3d:2f:61:07:
de:18:73:06:40:89:52:80:54:30:3e:74:4b:ed:ec:46:fc:d8:
9b:77:c0:82:f3:ac:35:2d:08:55:c5:77:96:0a:40:e6:5e:77:
22:58:33:aa:e7:c2:cc:f4:21:d7:fa:96:10:d3:7b:a7:10:a4:
7a:5f:1d:72:fc:d8:dc:16:fe:9f:fa:bf:02:ee:02:fc:d6:f8:
ac:6c:f2:30:24:00:d4:08:a4:99:2b:f5:dc:e0:8c:00:57:13:
77:98:96:0f:ff:36:47:9f:00:d8:4d:a7:b4:8b:15:83:80:55:
a4:34:2d:4c:cc:08:14:9c:aa:63:30:e6:28:97:1e:a7:10:a9:
9a:e0:11:41:8a:cc:5d:a6:a4:47:be:ca:0a:88:1c:f4:d3:18:
0a:ed:b3:ff:e4:60:67:27:4c:e7:12:be:38:d5:46:a9:dd:71:
1a:f7:2f:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJBMjIxMTAvBgNVBAUTKEMyM0RFRUI0NzlFNzBGNjBFRkNBN0M4ODQ2MkI5NUI5
REMyMkM5RDAwHhcNMjYwOTI3MDcwNTUzWhcNMjYxMDA0MDcwNTUzWjAYMRYwFAYD
VQQDEw02YWI4YzA1Mi03M2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqmtyvWgYE61qQkHKXaJdzBo/kAOEYhzY1JvtHGl94psdiSVs1xq+qsqi+s7X
vJxiGX+0fry+Q3IuS8vCdq5d10/f4LxbCm0g+R31pjYTn1ULXF77hcTt5ZnWeBeb
lsx3jzultJUAhHuQmPtk+Duhe5xoUDWsUScgWAFDbRHg7oprGoDb2zsd5uK1CNMd
7gKdddpZSb8W2f2dyNAUmqRk6QZIDdVgYoIzthbc+kgba+qG8G7Z3bxwzMXjoJ7F
TlHTf7CYM3l1c+vXMlu+kik/4ALf4pxtT2JYw3Ff08lJdPWO1JN8aBKU6Nwj8Z8I
51gRvb9EOIWBWXjo5R7sYFVqSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfNNgFV
K8jjQYS4OBmLkSItacE8MB8GA1UdIwQYMBaAFMI97rR55w9g78p8iEYrlbncIsnQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkEyMi9GRDVERTlCMjY2
MDAxMUYwOTk4NkM5MTdDNEY5QUUwMi93ajN1dEhubkQyRHZ5bnlJUml1VnVkd2l5
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dqM3V0SG5uRDJEdnlueUlSaXVWdWR3aXlkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkEyMi9GRDVERTlCMjY2MDAxMUYwOTk4NkM5MTdDNEY5QUUwMi93ajN1dEhubkQy
RHZ5bnlJUml1VnVkd2l5ZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFBBlgvvPjbYzWxzV8B6JhOdb8SOxxD1HX9kP2Nb81m0hfkfUy60K6wU4bcWk
soUnld5jDyJGuk9Dy+Jg/h6vm14eRxgfviti7Qd96Th3wLqsb7kp3cM9L2EH3hhz
BkCJUoBUMD50S+3sRvzYm3fAgvOsNS0IVcV3lgpA5l53IlgzqufCzPQh1/qWENN7
pxCkel8dcvzY3Bb+n/q/Au4C/Nb4rGzyMCQA1AikmSv13OCMAFcTd5iWD/82R58A
2E2ntIsVg4BVpDQtTMwIFJyqYzDmKJcepxCpmuARQYrMXaakR77KCogc9NMYCu2z
/+RgZydM5xK+ONVGqd1xGvcvZw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:26:06 2026 by rpki-client