
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json)
Hash identifier: WYBJsLhWkRAzjdGc1SjFYoplqxhNENb1tdLQBZMk92M=
Subject key identifier: 3B:D9:BB:C4:CE:4F:12:BB:F9:1B:00:E5:D8:B6:CC:AB:7F:69:DF:52
Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
Manifest number: D5
Signing time: Thu 23 Jul 2026 08:29:13 +0000
Manifest this update: Thu 23 Jul 2026 08:29:13 +0000
Manifest next update: Thu 30 Jul 2026 08:29:13 +0000
Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: U+jeJn/1ZRpZxNN0A9PfSnYQlIuVtsu9vfS9tFyjmNY=)
2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: azH5Q9viXquY/moxc/UZ4RwNqYyQHdR8aAwu/HmXV5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl
rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Validity
Not Before: Jul 23 08:29:13 2026 GMT
Not After : Jul 30 08:29:13 2026 GMT
Subject: CN=6a61d0d9-623e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:7a:c4:d7:e2:7b:70:b9:45:f5:31:bc:66:
05:f4:c4:09:a2:20:34:66:01:d4:ee:90:fe:57:aa:
8d:bf:98:f5:45:34:98:0e:05:84:12:dc:8f:07:db:
17:33:92:ae:2d:17:ad:57:00:9e:71:06:09:f0:25:
11:85:78:65:0c:56:7a:f3:ab:59:60:96:1c:00:7a:
c9:3c:90:78:92:35:f3:3a:44:d8:50:33:24:34:30:
bb:94:35:11:e6:da:07:d3:37:00:6f:e7:0f:4d:5d:
dc:02:ba:6e:00:ef:10:67:20:d1:f8:51:c2:64:0c:
9c:1e:87:4d:c0:55:ba:45:f9:71:99:ca:fd:5b:9c:
00:b4:89:8c:6d:46:1e:4c:d8:7b:e4:93:f7:64:d0:
00:be:4d:a7:87:a5:12:a8:81:20:44:ee:b7:71:59:
e6:28:4b:2f:62:44:31:8b:c9:e5:5e:23:42:7f:27:
c7:9f:ad:32:dd:a5:27:1f:4a:ba:51:29:db:c4:6e:
28:1b:3d:f6:0a:72:82:0d:d6:4d:cf:4d:79:e8:cd:
5f:1a:ac:47:89:ad:91:0e:2e:11:4e:fc:d2:83:a7:
74:00:a4:c1:33:73:80:4e:d5:6a:84:18:15:87:06:
ac:87:9c:8c:60:e9:98:bf:97:4b:7d:72:7e:26:f5:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D9:BB:C4:CE:4F:12:BB:F9:1B:00:E5:D8:B6:CC:AB:7F:69:DF:52
X509v3 Authority Key Identifier:
keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:6a:13:8f:dd:aa:23:20:a1:1b:bc:5e:82:a4:8b:7b:4f:0d:
63:1b:d0:07:a9:70:04:7e:ad:18:03:8c:fa:c0:e6:ad:25:9a:
dd:0f:ab:ff:81:86:45:34:ae:86:d8:36:ea:64:28:8b:61:53:
d8:78:34:b6:c9:00:9c:84:17:ad:83:d8:11:ae:59:ce:9f:b9:
fe:8f:c9:e0:9b:aa:d6:84:b4:70:76:53:cd:52:53:1d:b4:f5:
74:8a:60:49:e5:f2:70:fa:d1:36:23:98:56:6a:15:d4:eb:21:
df:18:9a:f3:08:ee:ba:5c:0f:2d:41:bf:50:20:41:5b:35:31:
c5:0d:ce:96:64:4f:d2:14:98:15:2e:75:c3:ee:54:79:a7:d7:
f2:25:b6:c8:5e:b1:75:3a:f1:2e:a0:1e:2c:f4:01:c1:97:21:
cf:76:3f:96:c9:7c:6d:b3:ba:6d:f4:2f:6d:ff:fa:40:00:24:
60:d9:9e:ae:ed:be:7f:7c:34:65:55:c4:fb:ac:fc:49:1a:98:
ff:d8:b9:77:61:12:6f:97:71:89:37:21:95:14:4b:c2:e3:13:
38:52:7f:4a:b8:5e:09:92:5f:dc:a2:c7:70:ea:5b:c8:1e:4c:
36:7a:1b:30:18:c5:3d:ee:74:80:ae:78:dc:51:75:85:4d:20:
42:0d:31:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZCOUExMTAvBgNVBAUTKEMzRENEOTVBNzI0QUQ2RTNCOTg3NEM2RTRENkIzOUVC
Q0UxNDJDRDQwHhcNMjYwNzIzMDgyOTEzWhcNMjYwNzMwMDgyOTEzWjAYMRYwFAYD
VQQDEw02YTYxZDBkOS02MjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAosR6xNfie3C5RfUxvGYF9MQJoiA0ZgHU7pD+V6qNv5j1RTSYDgWEEtyPB9sX
M5KuLRetVwCecQYJ8CURhXhlDFZ686tZYJYcAHrJPJB4kjXzOkTYUDMkNDC7lDUR
5toH0zcAb+cPTV3cArpuAO8QZyDR+FHCZAycHodNwFW6Rflxmcr9W5wAtImMbUYe
TNh75JP3ZNAAvk2nh6USqIEgRO63cVnmKEsvYkQxi8nlXiNCfyfHn60y3aUnH0q6
USnbxG4oGz32CnKCDdZNz0156M1fGqxHia2RDi4RTvzSg6d0AKTBM3OATtVqhBgV
hwash5yMYOmYv5dLfXJ+JvWK/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvZu8TO
TxK7+RsA5di2zKt/ad9SMB8GA1UdIwQYMBaAFMPc2VpyStbjuYdMbk1rOevOFCzU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI5QS8yMjdBQzQ4NjQ1
QzcxMUYwQTlDMTU1MjhDNEY5QUUwMi93OXpaV25KSzF1TzVoMHh1VFdzNTY4NFVM
TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3c5elpXbkpLMXVPNWgweHVUV3M1Njg0VUxOUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkI5QS8yMjdBQzQ4NjQ1QzcxMUYwQTlDMTU1MjhDNEY5QUUwMi93OXpaV25KSzF1
TzVoMHh1VFdzNTY4NFVMTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABGoTj92qIyChG7xegqSLe08NYxvQB6lwBH6tGAOM+sDmrSWa3Q+r/4GGRTSu
htg26mQoi2FT2Hg0tskAnIQXrYPYEa5Zzp+5/o/J4Juq1oS0cHZTzVJTHbT1dIpg
SeXycPrRNiOYVmoV1Osh3xia8wjuulwPLUG/UCBBWzUxxQ3OlmRP0hSYFS51w+5U
eafX8iW2yF6xdTrxLqAeLPQBwZchz3Y/lsl8bbO6bfQvbf/6QAAkYNmeru2+f3w0
ZVXE+6z8SRqY/9i5d2ESb5dxiTchlRRLwuMTOFJ/SrheCZJf3KLHcOpbyB5MNnob
MBjFPe50gK543FF1hU0gQg0xjg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:59:51 2026 by rpki-client