
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json)
Hash identifier: 2qQJyLhj85kJ6C6k8aKTtcEX8uwlGv4rdgasSTvajX0=
Subject key identifier: A4:4B:16:8B:3E:8F:BD:14:49:EE:AD:83:D4:85:11:BB:A0:6C:81:C5
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
Manifest number: 0250
Signing time: Fri 13 Nov 2026 02:34:01 +0000
Manifest this update: Fri 13 Nov 2026 02:34:00 +0000
Manifest next update: Fri 20 Nov 2026 02:34:00 +0000
Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: fa4bQm/aZS7q31mazt1wLggPMvDgjesJ76SX3A0893M=)
2: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: A4JCozIWp8wr/poP9Jp6dNkVfMHGLYtzZMkqHhGl4c8=)
3: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: TRYBWoWB1+O1h6++uHuCXlTu4HpKrVeUUMhvWRHclCc=)
4: A6F6E9E43C6E11F19CBF2AC991833773.roa (hash: 46x0HcGyg5ZqbRk9Z/I39DBeqCVUcYGSuLiYKPf2rpo=)
5: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: j8XwNmKzHtxOYC1qN4eC3Mdd11Pr7Jsabm08Gp7iA9o=)
6: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: lnol3FDE+TIgmDpE8Hb5zoS0uAhkzs2Kf9xTWAAdaZg=)
7: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: ZCeCkuNAMK9rwX4/TECTij2fUOVdG//HOrl/aGbqzoQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 02:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Validity
Not Before: Nov 13 02:34:00 2026 GMT
Not After : Nov 20 02:34:00 2026 GMT
Subject: CN=6af67719-e486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:98:34:ae:c9:98:76:d3:1f:e9:35:4a:90:
8c:ac:26:6f:34:2f:ac:fb:15:15:79:69:ae:00:5e:
a7:e5:46:5e:5a:4b:92:08:00:2d:87:b5:18:4f:a2:
21:33:4d:17:80:2c:a1:2a:e3:4c:1e:4f:05:1b:d5:
86:ae:8d:42:18:f2:ff:a3:f0:e2:ac:cb:ff:dd:5c:
3a:8e:72:f2:3d:96:17:c0:74:66:d7:bd:fd:75:68:
f0:ed:f4:3e:06:c2:e0:f3:dd:89:4e:6e:d2:ed:56:
c6:ad:17:e9:6f:f1:52:4c:07:37:ee:9a:6a:ce:29:
30:d9:83:d1:c8:13:82:5c:c6:ea:9d:23:2a:d9:4e:
7e:0c:b6:b7:0c:09:ec:1a:17:9a:74:ff:3f:06:f9:
72:f2:ea:b6:90:57:28:3d:44:ec:c7:12:9a:b3:5c:
75:b8:70:5c:a7:7c:49:8f:d8:21:63:27:27:88:fe:
6a:0a:fd:2d:7b:9b:0e:fd:84:ba:4d:84:fd:43:0d:
93:66:4d:4b:f2:c5:01:84:5f:03:e2:ee:97:09:07:
bf:40:43:d5:5b:83:51:e8:65:f6:29:62:18:53:59:
fa:c8:2f:0d:39:c1:60:b3:a4:dd:a5:ff:f2:60:28:
5e:09:c3:b4:9b:50:5a:bc:73:ae:42:9f:36:3d:46:
fd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4B:16:8B:3E:8F:BD:14:49:EE:AD:83:D4:85:11:BB:A0:6C:81:C5
X509v3 Authority Key Identifier:
keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:a4:46:ce:d3:f7:65:0e:70:a1:ab:62:42:d7:cd:16:db:2a:
8f:ba:30:d2:fa:f5:60:ce:35:c1:fd:bb:5b:71:5a:93:cf:f6:
cc:b4:74:ae:40:93:3c:a9:7e:e2:93:c9:89:cd:65:05:5e:19:
31:17:a0:19:62:c2:de:0f:10:f0:3b:16:97:30:82:03:62:a7:
44:34:f6:52:49:54:2e:77:a5:93:e6:86:f5:11:bc:7c:37:b8:
d0:13:0e:77:8f:1e:78:f7:af:ae:25:3f:22:98:98:9a:91:1d:
aa:7d:0a:29:e2:e0:c0:10:a6:f3:ba:bd:07:db:10:5e:e9:4d:
29:9f:f3:0c:16:93:09:b0:61:33:b1:5e:76:e0:2b:77:6f:37:
e7:bb:8e:05:cf:2a:a0:fd:45:9b:0c:ce:f4:62:ca:ab:69:86:
da:f6:32:80:74:0e:e7:de:cf:ac:02:f4:b8:18:6b:59:0c:6a:
76:f3:11:86:84:5f:88:63:39:42:61:fd:4f:b7:f7:7f:a8:71:
57:a3:03:45:ee:ea:d3:94:30:7c:a6:e3:86:63:35:a0:eb:f4:
c5:ca:30:6e:ff:8d:a4:3f:c0:70:38:24:a5:8a:94:74:cf:1f:
d8:d2:53:76:2a:fe:c6:b1:68:fb:b6:ed:fe:8a:f1:d6:e6:8a:
fd:08:4a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:13:36 2026 by rpki-client