
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json)
Hash identifier: Uv7tTTAdXF6lzh304xXw2rr1oaCACr1HEtXvMMN557I=
Subject key identifier: 2E:58:D5:5B:D1:1A:33:CE:B6:DB:72:53:7A:F0:C4:45:B4:49:6C:E2
Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Certificate serial: 0A74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
Manifest number: 0A47
Signing time: Tue 12 May 2026 19:48:43 +0000
Manifest this update: Tue 12 May 2026 19:48:43 +0000
Manifest next update: Tue 19 May 2026 19:48:43 +0000
Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: bd1RPPISnktUM9IuvsView4T2Q7/k1kxK2XzW5MDHsc=)
2: 3D96FCE64D1C11F19558AE18BA833773.roa (hash: fWrnDRf0ygF/bELqyvqgRKiyxFoBJGTEgo2RIONYsM0=)
3: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60m3ux9qQuI8sAbqkpMf6ZbChso/+JAfGKgLBlRXOY4=)
4: D68A6AA64D1B11F1887430DDB9833773.roa (hash: RbJva28JL0oRQGNXfDxaa35qEtDL+UO0626spMk2ark=)
5: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: wCl7rXzm53xP5orlsNl4KHMAfPJ5TI2KsLBB3PbjkDA=)
6: C86AB87A4D2711F1906BF3DDBE833773.roa (hash: SKrWdYrl9KleuCmzcfglzGlBQ52LXQEO3/LUYZ1Seeg=)
7: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: vExhqYfIkomdDV7xNalk44Q9UiS8pz94A5xmO/cMcTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2676 (0xa74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Validity
Not Before: May 12 19:48:43 2026 GMT
Not After : May 19 19:48:43 2026 GMT
Subject: CN=6a03841b-51b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:c2:79:0c:8d:d7:f9:98:97:07:0c:92:34:
7a:d6:6f:05:f5:fd:13:32:6c:b2:f9:a5:de:19:18:
42:6c:bd:e1:d4:57:0b:50:d5:f9:d3:c0:e9:a5:86:
93:ed:a1:7f:da:cd:b3:e3:d7:c1:57:9b:0e:d5:4d:
f6:28:56:29:0a:9d:af:0f:90:b5:cb:7c:18:41:e7:
db:f1:1d:9b:9b:12:75:1d:f7:a2:27:f3:cd:79:fc:
80:62:a1:d5:9a:00:f9:00:85:0d:c8:19:9a:91:4b:
9f:81:a1:00:5e:b6:aa:d1:22:81:51:1c:35:8c:dd:
50:6d:e9:88:27:9f:cc:59:a2:3c:b0:0e:2a:a4:5e:
c3:34:8b:43:3c:55:61:e8:1e:75:ba:69:d7:4f:79:
77:4b:9f:74:c5:0f:63:3d:40:01:6d:cf:ee:03:58:
14:65:65:d3:c7:0d:3a:c8:d5:e8:54:0d:74:63:d4:
e4:d5:42:03:8e:d7:d1:22:d7:36:ba:a7:76:09:a2:
33:4d:6a:a5:e3:8f:44:96:21:0f:87:e0:1d:57:8b:
6e:6e:78:5f:98:c4:ca:9c:64:75:78:a2:77:5e:f8:
94:01:13:89:a5:c5:32:18:3c:b7:1e:03:3b:b7:b8:
a9:e1:d7:2e:e2:49:49:e9:5d:e9:71:6e:f1:2c:4f:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:58:D5:5B:D1:1A:33:CE:B6:DB:72:53:7A:F0:C4:45:B4:49:6C:E2
X509v3 Authority Key Identifier:
keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:b0:87:3e:78:bd:62:56:e9:bc:10:4f:b8:71:6f:16:98:cd:
2e:a8:62:38:02:c6:32:02:34:50:1f:b3:cd:97:86:78:d7:3a:
2a:93:0b:bb:fc:47:35:54:e3:e3:bb:0e:46:34:7a:bf:a8:20:
de:cc:8e:7e:2b:b6:4c:80:69:b1:c2:10:99:66:b5:d6:f1:2d:
de:7b:b8:2b:24:c0:26:e4:8b:45:ae:17:45:81:12:05:26:2e:
c5:2f:ec:a4:46:0a:b0:bc:e0:0f:5a:d0:c1:8f:3d:53:35:52:
fe:79:c8:4e:eb:a1:d4:d3:ee:5c:4f:4e:31:40:83:86:cc:e4:
81:c8:99:3e:e7:b2:89:49:f2:3c:e4:bd:19:e8:00:ea:97:03:
bf:b1:b2:34:e0:f3:7f:1f:5d:ee:85:91:b5:a5:8d:18:4e:d3:
2b:55:2e:dd:05:01:09:fe:1e:2c:e3:40:38:a6:72:35:10:f1:
4b:db:50:fe:f2:b7:16:e6:af:90:db:c6:79:23:f3:f1:e7:34:
ac:dd:d9:bc:46:1b:5f:c0:37:1e:7c:08:54:22:97:86:c6:05:
05:d7:58:a9:56:35:cc:d1:4f:16:53:93:82:64:1d:12:42:16:
9f:2d:6f:b3:5b:ad:81:71:c2:e1:b5:c9:29:91:3c:a7:55:7a:
8a:d7:9b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:05:00 2026 by rpki-client