
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
File: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json)
Hash identifier: Ny5RvmElsi/7Cj2JIYEXgcdenwVQcN8oQMBF4JF9Jes=
Subject key identifier: 59:9C:F4:BA:AE:DB:F5:C0:57:98:6A:9C:B6:F4:52:B6:3E:28:A7:6A
Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
Certificate issuer: /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Certificate serial: 0547
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
Manifest number: 0542
Signing time: Tue 22 Sep 2026 23:07:00 +0000
Manifest this update: Tue 22 Sep 2026 23:06:59 +0000
Manifest next update: Tue 29 Sep 2026 23:06:59 +0000
Files and hashes: 1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: ybPDs1A+DqoVFxKDgCsAqrmBLF6IwSZvCPKvWGC0PWQ=)
2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: 2bvU2l27JfiDPTUt5UdrWGWC12SuTqfGvD8E40bRY/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1351 (0x547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Validity
Not Before: Sep 22 23:06:59 2026 GMT
Not After : Sep 29 23:06:59 2026 GMT
Subject: CN=6ab30a14-1ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:93:5e:64:94:c4:04:06:76:3e:84:b3:6f:
c8:46:57:5d:5f:97:5b:7a:69:d4:80:fb:9e:59:1c:
e8:e3:51:a8:c6:32:9c:a4:aa:26:18:c9:89:db:44:
02:a7:22:9b:b6:e9:04:6a:b5:55:29:3f:d1:c6:14:
1f:0b:ec:86:73:3f:be:31:a3:71:0a:64:ee:f2:b6:
f6:b0:a9:d4:cd:e7:02:91:3c:7b:10:8c:85:8a:5a:
4f:f5:a2:bf:86:e0:d1:d4:ee:98:e5:94:99:06:0b:
49:4e:52:5b:4a:20:29:c5:94:ee:7a:73:1f:c2:b2:
29:c7:69:43:53:28:9f:92:3e:b8:38:b8:36:38:ad:
a3:2f:2f:e7:48:62:87:6c:3a:ee:e3:b3:45:e4:55:
bd:e1:c1:be:29:55:16:f2:f7:3f:7d:d1:bc:d6:ee:
95:c1:89:a5:7c:5c:df:7c:66:22:e0:f5:fe:18:10:
fb:61:dd:b2:ba:6d:21:3b:6b:35:fb:9a:55:cd:16:
1f:23:8f:6d:92:d2:28:94:89:0d:52:b8:48:9e:0e:
26:15:63:97:ad:01:32:20:5c:6d:09:4f:fc:db:1d:
7c:50:be:ec:74:68:1c:6c:11:49:0a:95:f7:5f:f4:
5d:e5:47:0f:fe:72:d6:e6:63:8a:f1:cb:86:af:ad:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9C:F4:BA:AE:DB:F5:C0:57:98:6A:9C:B6:F4:52:B6:3E:28:A7:6A
X509v3 Authority Key Identifier:
keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:ce:66:4f:02:98:3d:f3:5b:ea:38:bc:d9:51:63:4a:17:a3:
ed:61:87:4a:11:ef:2a:60:1a:ae:32:7f:13:0d:e1:d7:27:01:
5e:86:ee:0a:ba:06:91:3f:9a:72:b3:15:90:ed:5d:f7:85:03:
3b:68:d0:c7:3a:56:0a:af:f2:a9:71:86:59:6d:c9:7b:f3:ba:
02:d5:4e:87:aa:53:21:15:d6:39:05:7a:24:23:d9:0b:18:af:
38:8d:3e:93:1e:2c:af:47:67:b6:4e:05:d9:fc:09:f1:46:9c:
1b:b2:67:68:57:5b:ec:b3:a2:fc:d0:62:d7:f8:f4:52:b6:d0:
5f:0e:93:15:d9:bc:9d:b5:3e:f6:c5:9f:c0:27:23:81:e7:8c:
9b:d2:84:24:2c:c2:76:60:27:f3:23:dc:41:72:d8:21:05:65:
f9:9c:7e:3d:fd:40:d8:8a:48:9e:10:d9:8f:98:40:4f:e1:36:
a6:f7:76:bf:89:b2:bf:83:4b:80:9e:77:f0:97:d1:94:42:07:
9f:8a:4f:a0:c6:f2:b4:92:d9:d2:d1:8d:20:f5:d9:fa:26:5b:
fd:3d:b1:91:43:bf:da:bb:e8:d5:1a:4e:5a:b9:5d:81:d1:4e:
e7:fe:dd:b5:db:04:ba:56:0f:23:5d:c7:67:34:5b:ec:3a:80:
40:c7:82:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:58:27 2026 by rpki-client