
$ rpki-client -vvf rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
File: wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft (raw, json)
Hash identifier: SW3h3Hksi7Lje6LsThd5+ff1KNLK5HsLLx34Kg72ZbU=
Subject key identifier: 7C:0E:7F:3D:B6:DE:71:3C:0E:70:1F:FC:77:14:5B:80:27:95:17:BB
Authority key identifier: C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5
Certificate issuer: /CN=A91619BE/serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
Certificate serial: 3581
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
Manifest number: 3553
Signing time: Tue 12 May 2026 14:26:10 +0000
Manifest this update: Tue 12 May 2026 14:26:10 +0000
Manifest next update: Tue 19 May 2026 14:26:10 +0000
Files and hashes: 1: wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl (hash: 4KYEUVIHwgn2+Bo8922rprOe2nF3poU8sG8vHEQaEIE=)
2: 3A0818A6A6C711E9933CF621C4F9AE02.roa (hash: gMM5ROvKnx7iFCdJt1z9g9KyZLDqu98nMWEKixfI54I=)
3: 3AA9ABDAA6C711E9933CF621C4F9AE02.roa (hash: 5xrvwd9wykrQSjJGjbZMcy2tvJM0usXrdwNXmfdom5Y=)
4: 387D8CB4A6C711E9933CF621C4F9AE02.roa (hash: DxHrVmvdLeA9+xD4of7aDhdlik3EijJBpjR757lf8tQ=)
5: 45598DB8FA1611EA9C6CE978C4F9AE02.roa (hash: h2gX7/rSspXX31pSdnLQu/1jh4ZCcncjOlqioxZ81KQ=)
6: 39651CE6A6C711E9933CF621C4F9AE02.roa (hash: dwI15TvJ5Y7ny/S17mPwWMt2poW4P8FWyNJ8s0FbELY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl
rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13697 (0x3581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91619BE, serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
Validity
Not Before: May 12 14:26:10 2026 GMT
Not After : May 19 14:26:10 2026 GMT
Subject: CN=6a033882-3f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:c1:0b:18:b8:3f:b7:61:c3:f2:52:bc:6c:
f7:6e:64:b4:22:de:5c:1f:a0:1d:46:d6:8f:96:ab:
f0:0a:7f:65:7f:b6:3e:be:0e:27:50:78:c6:90:f8:
14:9f:67:dd:2a:4d:26:15:b9:65:ed:35:a2:b8:24:
6d:13:1c:4a:97:1c:21:f0:bc:f6:b1:b8:12:1e:eb:
9a:4b:10:b8:3c:2f:92:f8:82:9d:60:95:6f:cf:7a:
e6:05:bd:53:a8:b2:74:96:1a:3a:37:58:cb:12:ed:
69:14:f2:f0:b6:c7:d1:ff:2e:f9:4e:d2:f4:28:fd:
47:5b:bb:82:2c:a2:cb:43:bc:3e:5b:71:f5:d9:6b:
c8:35:96:10:90:b1:17:bc:c3:56:df:10:df:f1:25:
aa:cf:d2:94:3f:b1:31:b2:27:9a:c6:d6:e7:7e:a8:
b0:a6:5a:74:4b:eb:c8:ec:54:37:d6:88:7b:63:bc:
49:a8:14:f9:47:ac:a5:21:da:4b:ce:87:20:9a:88:
26:2a:dc:26:30:de:df:67:17:3b:9e:15:fb:df:0f:
09:82:22:7b:e6:6d:06:60:d5:c0:9e:77:f3:59:66:
02:40:e4:74:3c:5d:4c:db:a3:04:fd:c0:1f:1e:57:
96:42:e8:e1:29:7f:98:43:ba:c6:f8:f4:8c:83:54:
66:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0E:7F:3D:B6:DE:71:3C:0E:70:1F:FC:77:14:5B:80:27:95:17:BB
X509v3 Authority Key Identifier:
keyid:C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:fb:e3:e8:82:d3:fa:2c:3a:5a:67:6d:32:81:e3:bb:f2:ed:
ab:8c:78:9f:62:da:19:9c:ef:f2:e2:ab:04:f9:d4:6d:be:05:
30:16:0d:2f:9f:89:75:bd:8c:fd:da:ac:ea:79:d9:16:7c:c6:
69:72:61:13:f8:27:48:c6:70:4a:9b:5d:be:44:65:17:38:7e:
cb:19:fb:66:ed:75:4d:7e:bf:91:c1:fa:24:b6:72:db:3e:9d:
01:4d:26:05:18:88:19:f8:02:cc:81:5b:a0:71:06:92:02:93:
44:18:6a:2b:6f:0b:ff:b8:35:1b:66:07:f5:34:69:1f:af:ae:
84:27:ac:d9:88:d4:32:7a:40:3b:d8:98:d0:15:e7:c3:85:83:
19:67:d5:30:02:b8:89:80:57:ce:ac:02:84:70:f7:e0:1f:1d:
ba:ff:35:18:ed:0c:72:f2:c0:35:ce:79:3d:dd:24:d1:9e:b8:
2f:98:7b:1c:92:74:fb:9d:93:a2:4e:6a:bf:b2:5a:43:db:db:
4e:2e:ef:b9:2d:15:9b:e0:38:fa:a0:b7:13:4b:d7:b0:bc:4f:
9b:f8:69:5d:f7:c5:9d:3d:20:e6:89:a7:3d:f1:05:93:f9:65:
b9:b4:e4:48:27:4b:97:b9:56:b0:54:98:09:98:25:9b:17:d9:
b6:43:1a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:22:34 2026 by rpki-client