
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json)
Hash identifier: 8hauDylWBY1vk8Y4AJGtbvUXuRl3m29yX9GmDhON52w=
Subject key identifier: CD:3B:90:ED:1B:1A:F4:B8:66:A6:9A:79:77:23:DE:0A:FA:40:AD:33
Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Certificate serial: 0284
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
Manifest number: 027F
Signing time: Tue 12 May 2026 16:50:55 +0000
Manifest this update: Tue 12 May 2026 16:50:55 +0000
Manifest next update: Tue 19 May 2026 16:50:55 +0000
Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: HC1gCnj2q3kI47fjyzjgUz+9xUDk9E3U4hqp2hgUeOc=)
2: 04594232DEA011EE91181415C4F9AE02.roa (hash: c8YRBXzB3c5ZciuZ47whRGlvNacQEORBuyS+ujABTZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Validity
Not Before: May 12 16:50:55 2026 GMT
Not After : May 19 16:50:55 2026 GMT
Subject: CN=6a035a6f-3e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:35:7c:2e:66:22:dc:52:e3:55:08:f9:1b:fb:
00:7e:66:ed:7d:eb:4b:6f:bc:bd:67:6d:52:80:e8:
9c:31:bc:19:c8:f6:54:08:b4:74:e1:ae:f0:c7:df:
83:bf:ab:5f:0e:e0:9e:3b:7c:4e:6b:84:7c:05:39:
f2:cf:98:97:06:89:77:b2:98:11:b2:39:0c:71:c2:
1c:8d:f6:2b:81:f0:d0:4c:f5:07:64:f5:24:8b:eb:
48:69:28:23:6e:f6:b2:c0:78:9c:67:b0:b5:53:09:
51:53:bf:3c:a7:8d:58:c8:e5:9d:9f:08:e9:74:0f:
5d:2c:15:34:06:6d:c0:68:9c:7a:d5:ef:38:ee:a0:
85:26:fa:61:b5:fa:06:c3:8e:11:72:a5:39:4d:36:
20:2b:5b:77:b0:20:eb:9f:2f:b5:78:49:58:59:b8:
8a:6a:25:58:a0:99:45:8d:48:d1:f8:15:1d:fc:79:
5d:99:2a:cb:94:0a:df:d8:ff:9f:e1:2d:2a:96:df:
28:ff:99:57:9c:74:06:9a:3a:01:59:94:f6:e6:82:
a5:b4:1e:f5:ec:a0:61:e9:99:3b:5f:e6:41:a1:63:
51:d7:72:8c:e0:4f:f7:b5:c7:ab:99:06:05:55:6c:
3e:77:6e:8f:b6:5b:01:43:7a:8e:11:33:0a:78:e0:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3B:90:ED:1B:1A:F4:B8:66:A6:9A:79:77:23:DE:0A:FA:40:AD:33
X509v3 Authority Key Identifier:
keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:3e:d2:7e:51:ec:8b:50:d8:a7:d8:f1:5a:a8:15:d2:cc:5c:
ce:f9:09:f7:5c:a5:bc:a0:b6:32:71:77:37:84:bc:88:66:8a:
e9:b7:b3:55:7f:26:ea:e0:ae:10:41:eb:c5:81:3e:b4:48:47:
d0:1d:b7:7d:12:a6:69:11:81:dc:ab:a6:d3:3e:47:b3:61:79:
38:be:72:7e:35:8f:ac:bc:b8:de:fd:ba:9a:8a:fb:d2:9f:9f:
7c:8b:92:d7:ee:e0:a7:7a:f9:a4:76:2c:4c:6c:26:6f:ae:1f:
b0:aa:1c:7b:19:b0:db:11:63:58:ed:f7:66:1b:fd:4c:73:6c:
02:fd:7d:65:c2:85:1f:44:fb:87:ff:f2:f1:ce:99:2e:f7:0f:
4c:0a:f6:ac:05:d6:d3:8e:f6:c4:81:2d:49:48:51:61:49:93:
49:17:0b:fa:17:ab:35:02:4f:83:5e:23:b9:95:fe:ec:f9:e8:
3f:3f:b5:6d:02:a8:c0:1c:34:51:ef:0b:46:98:92:10:f4:bd:
00:3f:81:c7:4e:3f:1a:61:cc:1c:0f:f8:18:fa:f5:28:cc:cf:
2c:a8:63:2b:31:8f:d6:4a:e0:8a:e5:c8:bd:19:51:fb:5c:38:
68:30:cb:c5:90:e0:64:20:21:a4:f1:2d:d9:ef:6d:1e:d4:f6:
0e:52:e5:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdCMTUxMTAvBgNVBAUTKDU4MEU0NjZCN0Q0RkE4NjQ5RDJFMEIyNzM3NUVBMjg2
QzZDNTQ1ODQwHhcNMjYwNTEyMTY1MDU1WhcNMjYwNTE5MTY1MDU1WjAYMRYwFAYD
VQQDEw02YTAzNWE2Zi0zZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAljV8LmYi3FLjVQj5G/sAfmbtfetLb7y9Z21SgOicMbwZyPZUCLR04a7wx9+D
v6tfDuCeO3xOa4R8BTnyz5iXBol3spgRsjkMccIcjfYrgfDQTPUHZPUki+tIaSgj
bvaywHicZ7C1UwlRU788p41YyOWdnwjpdA9dLBU0Bm3AaJx61e847qCFJvphtfoG
w44RcqU5TTYgK1t3sCDrny+1eElYWbiKaiVYoJlFjUjR+BUd/HldmSrLlArf2P+f
4S0qlt8o/5lXnHQGmjoBWZT25oKltB717KBh6Zk7X+ZBoWNR13KM4E/3tcermQYF
VWw+d26PtlsBQ3qOETMKeOA4fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM07kO0b
GvS4ZqaaeXcj3gr6QK0zMB8GA1UdIwQYMBaAFFgORmt9T6hknS4LJzdeoobGxUWE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS8zMjZFQjBCNDhE
RUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFHU2RMZ3NuTjE2aWhzYkZS
WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1dBNUdhMzFQcUdTZExnc25OMTZpaHNiRlJZUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0IxNS8zMjZFQjBCNDhERUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFH
U2RMZ3NuTjE2aWhzYkZSWVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEART7SflHsi1DYp9jxWqgV0sxczvkJ91ylvKC2MnF3N4S8iGaK6bezVX8m6uCu
EEHrxYE+tEhH0B23fRKmaRGB3Kum0z5Hs2F5OL5yfjWPrLy43v26mor70p+ffIuS
1+7gp3r5pHYsTGwmb64fsKocexmw2xFjWO33Zhv9THNsAv19ZcKFH0T7h//y8c6Z
LvcPTAr2rAXW0472xIEtSUhRYUmTSRcL+herNQJPg14juZX+7PnoPz+1bQKowBw0
Ue8LRpiSEPS9AD+Bx04/GmHMHA/4GPr1KMzPLKhjKzGP1krgiuXIvRlR+1w4aDDL
xZDgZCAhpPEt2e9tHtT2DlLl1g==
-----END CERTIFICATE-----
Generated at Wed May 13 09:09:35 2026 by rpki-client