
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
File: WKqOb2Cb9VgUA20moSpeKyUViTo.mft (raw, json)
Hash identifier: oHzsrk7NrizfCTbx+6SAe1lFjtFsPrLmDHXkWuUxuHo=
Subject key identifier: 7C:A7:5F:1F:D0:20:A3:0A:8E:B6:36:56:16:EF:9B:A1:C1:70:53:83
Authority key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
Certificate issuer: /CN=A914EBB2/serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
Manifest number: 90
Signing time: Sun 27 Sep 2026 04:31:47 +0000
Manifest this update: Sun 27 Sep 2026 04:31:47 +0000
Manifest next update: Sun 04 Oct 2026 04:31:47 +0000
Files and hashes: 1: WKqOb2Cb9VgUA20moSpeKyUViTo.crl (hash: rYsUYkdkvLo81RWGsTXRbOeSn+xAcuw1MX0opYn+m9w=)
2: D23FC546011111F1B3598E67446F56BC.roa (hash: vcrWn/T7PWva5wilhUJF83D5sEdB2Zxd5D/0CZVE3OU=)
3: 651B78142DD711F187F45729B3833773.roa (hash: orGvvH8EtrQFqpfDS8Xvz4vEWTgyCI2f9BcO9d6cJBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Validity
Not Before: Sep 27 04:31:47 2026 GMT
Not After : Oct 4 04:31:47 2026 GMT
Subject: CN=6ab89c33-95d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:69:33:f7:76:92:8d:c7:7e:0c:c9:16:56:
d3:cc:6b:ec:ed:d7:cc:f5:ee:bf:ed:75:89:13:b9:
c1:bc:c8:d5:a1:4a:a0:25:68:05:44:62:42:b4:62:
40:dc:4c:71:38:f0:01:7f:31:7c:88:5b:76:73:c2:
89:66:df:a4:6b:2c:95:d0:4e:84:7d:41:a0:02:e7:
fa:18:4e:75:d9:8e:75:08:f2:1f:15:43:fd:b3:70:
3f:68:66:c2:5a:06:fa:e5:3f:77:0c:4c:29:27:11:
70:98:5d:de:d1:22:c7:1a:58:3d:b1:fa:63:07:3f:
1b:45:e5:98:58:b9:08:b6:d2:08:1e:0c:0c:3e:5c:
e7:70:26:f8:a2:40:52:ad:b5:e2:1d:3b:ff:d7:89:
fa:8f:e1:d0:9b:47:ff:36:04:f9:45:69:63:ff:62:
36:37:22:c7:7d:a5:7f:ff:3b:97:38:89:96:40:d6:
14:2f:99:5a:1a:16:ba:5a:9d:6e:cd:39:86:34:36:
7a:03:a9:5f:95:98:91:35:7d:0b:4b:c0:9d:d2:57:
08:29:c7:c6:ea:d9:57:a8:78:f5:43:d5:9b:e7:6d:
57:e1:d5:00:61:d0:a9:44:07:e4:63:8e:7b:c1:14:
ab:7c:28:98:18:d9:ea:b6:8e:59:7f:94:7b:3e:06:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A7:5F:1F:D0:20:A3:0A:8E:B6:36:56:16:EF:9B:A1:C1:70:53:83
X509v3 Authority Key Identifier:
keyid:58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:f5:a8:95:f4:29:f8:46:be:b9:e3:b7:8a:96:31:b3:12:1c:
d4:a0:ff:f7:e8:9d:99:f9:c7:d8:97:83:2b:3f:9f:1b:01:da:
80:c2:9c:15:c0:2f:7f:7f:2e:b9:b0:f7:a6:cf:4f:e7:89:ae:
8d:ba:07:b2:38:c7:d8:a0:77:0c:a1:fd:72:0f:c3:86:f4:d8:
ec:16:5b:c1:12:a3:8c:fd:98:0f:ba:79:32:aa:7c:81:7d:d1:
ae:48:39:f0:86:76:a5:3b:60:7a:dc:a1:1d:42:7b:2a:b1:96:
6e:d0:cc:ac:d4:a7:82:b9:5c:50:91:ce:a2:b4:c8:a3:a4:26:
b3:60:a9:76:2c:47:aa:97:58:af:43:82:09:dd:75:80:cb:39:
22:48:e3:41:46:16:92:27:1a:ae:24:04:6d:d8:49:4b:fd:79:
e7:09:fb:e1:1b:6a:26:78:98:e5:da:f6:65:15:93:db:4f:da:
8a:e2:9e:f7:80:33:5e:c5:7d:4a:4a:60:ad:a8:c0:7c:fc:d3:
57:9d:88:80:67:df:64:67:c2:d0:61:66:d6:09:06:2e:b7:e3:
e6:be:cf:1f:d3:f5:fb:18:77:47:5d:54:da:4a:19:a0:4b:63:
51:a1:d6:95:7c:21:ea:28:bb:67:22:1e:1b:19:4f:8b:eb:e2:
f3:d2:10:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVCQjIxMTAvBgNVBAUTKDU4QUE4RTZGNjA5QkY1NTgxNDAzNkQyNkExMkE1RTJC
MjUxNTg5M0EwHhcNMjYwOTI3MDQzMTQ3WhcNMjYxMDA0MDQzMTQ3WjAYMRYwFAYD
VQQDEw02YWI4OWMzMy05NWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArBxpM/d2ko3HfgzJFlbTzGvs7dfM9e6/7XWJE7nBvMjVoUqgJWgFRGJCtGJA
3ExxOPABfzF8iFt2c8KJZt+kayyV0E6EfUGgAuf6GE512Y51CPIfFUP9s3A/aGbC
Wgb65T93DEwpJxFwmF3e0SLHGlg9sfpjBz8bReWYWLkIttIIHgwMPlzncCb4okBS
rbXiHTv/14n6j+HQm0f/NgT5RWlj/2I2NyLHfaV//zuXOImWQNYUL5laGha6Wp1u
zTmGNDZ6A6lflZiRNX0LS8Cd0lcIKcfG6tlXqHj1Q9Wb521X4dUAYdCpRAfkY457
wRSrfCiYGNnqto5Zf5R7Pgb02QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHynXx/Q
IKMKjrY2Vhbvm6HBcFODMB8GA1UdIwQYMBaAFFiqjm9gm/VYFANtJqEqXislFYk6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMDkxRjA3MEVE
MEYxMUYwQTgxMDM0MDRBMUVFNTI4RS9XS3FPYjJDYjlWZ1VBMjBtb1NwZUt5VVZp
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dLcU9iMkNiOVZnVUEyMG1vU3BlS3lVVmlUby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUJCMi9GMDkxRjA3MEVEMEYxMUYwQTgxMDM0MDRBMUVFNTI4RS9XS3FPYjJDYjlW
Z1VBMjBtb1NwZUt5VVZpVG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGPWolfQp+Ea+ueO3ipYxsxIc1KD/9+idmfnH2JeDKz+fGwHagMKcFcAvf38u
ubD3ps9P54mujboHsjjH2KB3DKH9cg/DhvTY7BZbwRKjjP2YD7p5Mqp8gX3Rrkg5
8IZ2pTtgetyhHUJ7KrGWbtDMrNSngrlcUJHOorTIo6Qms2CpdixHqpdYr0OCCd11
gMs5IkjjQUYWkicariQEbdhJS/155wn74RtqJniY5dr2ZRWT20/aiuKe94AzXsV9
SkpgrajAfPzTV52IgGffZGfC0GFm1gkGLrfj5r7PH9P1+xh3R11U2koZoEtjUaHW
lXwh6ii7ZyIeGxlPi+vi89IQow==
-----END CERTIFICATE-----
Generated at Mon Sep 28 01:45:26 2026 by rpki-client