
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
File: WAFITP9u_F0ACyYp-RFr4jXErDY.mft (raw, json)
Hash identifier: xtW/2wfBOW63OhnW4SBhhHhLuAOorpYbgHDwXLJBKmw=
Subject key identifier: F3:EF:08:FA:6B:AF:6D:50:D0:E7:F3:75:71:4A:B8:F2:A2:57:63:59
Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36
Certificate issuer: /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
Manifest number: 019E
Signing time: Wed 23 Sep 2026 04:18:25 +0000
Manifest this update: Wed 23 Sep 2026 04:18:25 +0000
Manifest next update: Wed 30 Sep 2026 04:18:25 +0000
Files and hashes: 1: WAFITP9u_F0ACyYp-RFr4jXErDY.crl (hash: tivSzUdy8gYAc+cFDBw0uvvqqhCYplQ3U3OBji4bDZc=)
2: 7CFDC462FDFF11F0A0866006396F56BC.roa (hash: A5GbsNchZzAq8cqRzquWaPlJngUIDBnlI/CcMje+QIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl
rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C531, serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36
Validity
Not Before: Sep 23 04:18:25 2026 GMT
Not After : Sep 30 04:18:25 2026 GMT
Subject: CN=6ab35311-e88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:35:c2:7d:c4:41:67:e1:ba:f9:57:3a:cb:
92:0d:3c:62:33:1e:3a:17:82:ad:04:6f:90:86:04:
37:17:db:28:08:6a:f0:90:4b:b6:36:71:3b:95:dd:
cf:81:7b:3b:38:4d:91:cf:69:bc:58:9b:59:c6:cd:
5c:80:3c:95:51:74:64:b6:e4:c9:54:4d:4e:fe:fe:
75:5c:e5:f0:ad:b3:51:40:5e:fa:fd:5c:64:9d:be:
47:75:d5:77:8c:ab:70:ee:ba:fa:9f:d6:09:1f:94:
bb:d5:b9:aa:45:ac:c1:4e:5a:84:dc:22:4e:25:c0:
49:00:79:57:b1:fb:07:73:b1:ac:af:f1:c2:ce:43:
6c:50:eb:de:81:8a:27:a8:1f:1a:5d:f6:e0:96:6d:
49:59:72:3e:9b:04:af:9c:61:b5:81:89:37:dd:dd:
1b:ac:8a:82:2b:65:1b:e8:61:94:40:90:8d:8b:61:
c9:26:af:17:15:c7:69:ec:be:41:06:51:a1:77:1e:
9e:0f:35:8c:13:b6:f7:71:c0:f7:64:46:70:87:3e:
be:45:45:80:89:b3:b9:78:0c:98:a6:bf:f5:91:10:
13:f9:3f:58:9c:d3:11:4b:93:58:e4:f6:d9:f5:51:
1b:85:c9:7d:e1:f5:74:68:5f:18:b4:2b:ee:2b:cf:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EF:08:FA:6B:AF:6D:50:D0:E7:F3:75:71:4A:B8:F2:A2:57:63:59
X509v3 Authority Key Identifier:
keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:bb:ee:f3:7b:fb:d9:75:b1:d1:4d:75:02:03:ec:f4:c7:55:
2b:53:63:5e:28:e6:e3:3a:ea:27:dc:c1:48:bb:e9:a5:83:63:
5c:e5:20:da:92:a1:46:7d:9e:dd:b7:12:59:d8:30:f7:e4:8a:
80:f1:25:3c:d5:58:76:3d:6a:03:4a:8e:2b:56:3a:eb:43:2e:
5d:f4:9f:16:57:20:90:c9:94:d6:ba:36:36:29:f6:d1:23:8d:
49:67:91:71:e8:d5:8c:91:5a:ec:7a:47:e0:6f:91:0e:1f:9f:
e3:63:27:50:34:e5:a8:f8:36:80:d0:7e:60:cf:b7:15:2f:61:
38:31:8a:c4:ef:9d:09:3c:e6:08:4f:bf:30:c0:d1:61:85:54:
00:70:c0:ba:75:ea:0e:dc:06:a2:e6:dc:44:34:4f:22:3f:7d:
2e:da:07:74:67:46:9e:45:af:26:19:3b:e0:d7:33:9f:e4:16:
9b:c1:c5:52:63:2d:8b:46:23:d6:08:c3:6c:fb:ea:33:ff:28:
69:eb:96:eb:9a:bf:48:6f:ae:e6:b9:19:72:8c:39:3e:6b:5c:
3d:1c:9b:49:52:8e:6c:ba:66:a2:3a:af:25:b5:19:ff:2a:00:
65:e9:65:2e:fc:59:4d:77:68:e6:f3:e6:08:74:e8:32:76:11:
70:70:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:45:12 2026 by rpki-client