
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
File: wSlv-tNPKfBODvrV2SRMAqfYfY0.mft (raw, json)
Hash identifier: egbWF8qmfnKWI0nRBJCeYX9smZwjr13+sU5Zr4FhRUE=
Subject key identifier: D4:1A:7F:D3:30:E7:BC:F7:72:8D:85:0D:83:C3:29:C6:E3:30:8A:79
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 35F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
Manifest number: 35BB
Signing time: Thu 24 Sep 2026 14:37:19 +0000
Manifest this update: Thu 24 Sep 2026 14:37:18 +0000
Manifest next update: Thu 01 Oct 2026 14:37:18 +0000
Files and hashes: 1: wSlv-tNPKfBODvrV2SRMAqfYfY0.crl (hash: o26gEGJ9F9zVi7qBvyNyw5PEiohLgUilL+KVXdx9JwY=)
2: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (hash: c6dr/6HXkwTPPaRGxAN+VVzNifnMfuejad4wfWK59uc=)
3: 93215346C57811EA8440684AC4F9AE02.roa (hash: z/ezhrwu4s7H5jzMufRqPP9dtPvITvqNddEalWrDxkc=)
4: 0000FD82284811EFADB77468C4F9AE02.roa (hash: G8Kpj64rSGfuDtTz8IZ/gDNB5OZgnr7MLW4ExDTIaZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13809 (0x35f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: Sep 24 14:37:18 2026 GMT
Not After : Oct 1 14:37:18 2026 GMT
Subject: CN=6ab5359f-082a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:de:eb:a8:fa:a9:4c:f7:bf:3a:4c:4b:33:
5c:ee:b2:fd:d8:62:a9:47:68:0d:79:1a:02:44:f6:
21:bb:7d:67:07:cc:fc:20:27:6d:90:8e:70:81:bd:
d3:e8:66:58:d4:94:6a:e3:52:4e:21:75:86:67:af:
7c:95:0a:7c:ff:fe:8a:d2:c3:41:e7:1e:e6:94:bf:
c3:dd:73:9b:ec:97:4f:7c:b3:95:c6:70:64:0c:f8:
3c:36:5e:cd:2c:31:5a:4f:22:d9:bc:a6:08:21:90:
31:56:89:2c:97:f2:03:11:74:68:b1:c5:af:a1:fc:
1d:7e:56:07:b2:c5:49:26:e2:33:22:85:37:8f:ab:
c7:2e:0b:3b:6f:a7:ca:f4:ed:56:b4:f2:c0:9d:32:
8c:7b:4b:d6:f2:49:f2:f5:6e:04:7a:6b:74:2a:16:
a2:d1:12:fa:ab:b4:bd:cd:3e:b0:f5:b2:5e:e1:4b:
22:02:d0:91:34:ca:8a:c8:95:22:60:a0:73:21:56:
06:51:e1:41:59:76:2b:1e:27:9d:72:a1:14:af:65:
36:aa:e3:75:33:f6:b2:67:cc:0f:cc:85:9d:8b:eb:
90:1c:87:c7:03:13:9d:89:6a:3d:e0:bd:9d:c7:26:
44:06:22:39:a4:3e:52:2f:39:76:d4:91:93:67:66:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1A:7F:D3:30:E7:BC:F7:72:8D:85:0D:83:C3:29:C6:E3:30:8A:79
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d1:f2:3e:d4:a3:9e:d5:89:d7:21:5a:7a:6f:e1:cf:48:b1:
fd:c0:87:a1:26:90:46:c3:02:8d:50:6f:8e:81:16:a8:2b:66:
7e:f4:a1:13:f7:3b:f1:63:8f:05:45:94:fb:34:aa:25:ef:e6:
49:2e:10:a6:56:9d:50:6f:10:65:bb:bb:b6:21:41:bd:cb:d8:
29:c5:77:25:86:38:e3:83:aa:c5:59:72:fd:5c:6b:62:38:5b:
56:9d:2f:b1:6f:42:8a:f4:2f:4c:a4:c0:b5:84:41:da:87:f1:
b0:39:35:f8:e4:9d:72:7e:34:a5:93:85:b2:2e:c7:c8:cf:4a:
28:65:78:df:33:63:d8:bd:1b:2a:bb:69:d6:92:0d:9f:b4:6c:
e1:fe:06:22:5f:a3:6d:58:c6:7a:a1:28:f2:c8:51:fd:f4:a8:
2c:69:7b:22:27:cc:6e:95:2f:a9:af:1d:49:16:03:76:aa:a3:
ef:84:60:a7:ce:03:48:74:dd:4a:0b:93:62:d2:ef:ad:0b:cb:
8d:37:d4:65:a3:39:87:f1:0f:8b:dd:b0:1e:52:50:06:c3:84:
fe:83:0b:75:4a:bc:d1:89:05:da:13:c5:50:fd:71:9d:24:c0:
ce:46:ac:15:0f:bb:44:75:02:56:1e:31:69:46:8f:1b:30:7c:
9c:5b:d8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:06:41 2026 by rpki-client