
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json)
Hash identifier: P+qsTPoNLrNqvdzFXy2QM1dV3MKpZpt40HnennzP57Q=
Subject key identifier: 3F:A0:DB:C1:08:B6:D8:90:55:6E:EA:CB:C0:58:A1:8B:9D:16:84:7D
Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Certificate serial: 0670
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
Manifest number: 0667
Signing time: Tue 22 Sep 2026 22:18:39 +0000
Manifest this update: Tue 22 Sep 2026 22:18:39 +0000
Manifest next update: Tue 29 Sep 2026 22:18:39 +0000
Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: sLeWxXarE3Tj9dgQK/sAe1H5FmI+XB4eTF+XghDG3cs=)
2: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (hash: hM4BPVux9YYhFTFUn31M+wA3pgU5Mg1/NkcXZA6rsfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1648 (0x670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Validity
Not Before: Sep 22 22:18:39 2026 GMT
Not After : Sep 29 22:18:39 2026 GMT
Subject: CN=6ab2febf-afe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:ba:8c:f3:9d:2b:4f:66:76:24:e9:8b:e5:
4d:58:fa:60:44:d7:1e:12:e0:61:c8:54:7f:c6:c5:
60:28:ed:f3:db:2f:a3:3f:cb:82:bb:06:1d:5d:11:
c7:0e:ec:fe:c0:bd:ff:47:c2:e9:f0:a2:15:91:39:
1b:be:d0:1d:29:e0:ea:3e:d6:16:45:b3:a8:80:53:
43:5c:67:74:0d:07:34:54:32:46:4b:f9:f3:93:83:
8c:1c:13:dd:5b:84:6a:dc:ad:e5:ec:5e:85:0e:09:
a4:af:b6:b8:9f:0f:8f:b7:7c:4f:09:95:43:9b:c8:
26:3e:17:c0:fc:4d:3d:1a:56:b9:31:a7:be:7d:f3:
c0:2a:a5:39:26:1d:4b:d8:b3:6b:65:a9:04:99:e7:
82:4b:c3:e8:22:1f:1c:0b:a2:38:5a:b5:72:ad:97:
93:35:39:56:36:a3:1e:ba:76:82:fe:e0:2c:87:cd:
81:8f:b9:e3:c3:4c:21:e4:10:ee:a1:dd:40:aa:27:
54:01:1f:d3:df:28:32:f6:ba:42:ef:01:91:e9:f0:
26:68:4e:89:6d:2d:88:21:24:58:0f:df:be:23:de:
36:77:f3:1a:ac:91:4c:9c:2e:be:0c:ef:27:a2:70:
30:31:81:33:f7:8b:62:4f:26:e5:3b:61:f6:be:83:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A0:DB:C1:08:B6:D8:90:55:6E:EA:CB:C0:58:A1:8B:9D:16:84:7D
X509v3 Authority Key Identifier:
keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a5:ba:50:f8:08:c8:ab:b5:81:00:74:a4:81:96:b8:3c:58:
98:bd:48:bc:14:58:0c:04:a4:e4:9b:44:9f:a0:fb:c8:cd:d9:
90:d1:71:64:15:88:21:e8:3d:4a:c7:0c:9d:82:f1:4d:02:57:
56:32:db:59:b1:b9:c6:fc:d3:d7:08:ac:be:1f:1e:4d:e0:c5:
cf:bf:95:b4:a2:aa:5d:a4:15:5f:d9:6b:f5:0c:0a:f9:ec:d0:
51:78:9e:fe:91:1d:d5:26:93:9b:96:bf:02:1a:15:94:4d:d1:
40:95:cd:02:55:da:1a:c9:8c:4d:c9:2c:6d:da:3f:67:90:7b:
20:77:7e:b8:59:33:87:48:29:f7:ea:e6:d3:61:5b:82:ea:bb:
59:f7:ec:2b:b1:9a:78:96:03:f6:35:36:6f:45:9d:8a:25:cb:
1a:0d:3d:24:d4:f4:8c:99:88:48:b9:44:bf:95:99:13:bf:dc:
75:6d:e6:17:b8:3c:4f:4b:7d:14:19:5a:0f:fe:d9:06:46:4f:
72:4f:19:66:3d:1c:8a:5e:8e:14:1c:67:48:43:f5:c3:4e:61:
9f:64:d1:26:bf:b5:1a:85:37:e6:df:c2:d8:91:a0:82:0e:75:
80:ae:e9:9f:e9:0b:c4:d1:13:bb:a7:e4:65:b1:2a:ea:8c:4f:
86:68:44:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:21:19 2026 by rpki-client