
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json)
Hash identifier: lKFh6ov19lEHpGKs8jfgRvL5nFlMhdkG5yll4LTLfoM=
Subject key identifier: A6:A9:C1:40:0C:85:07:BE:BB:A9:56:70:0A:7C:7B:56:FD:BB:DE:EA
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
Manifest number: 0236
Signing time: Wed 23 Sep 2026 02:32:14 +0000
Manifest this update: Wed 23 Sep 2026 02:32:13 +0000
Manifest next update: Wed 30 Sep 2026 02:32:13 +0000
Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: 4BIq6BMKiOzAaPItN73BOpJw+6Wn2lIzE2u9QIx0zRg=)
2: A6F6E9E43C6E11F19CBF2AC991833773.roa (hash: 46x0HcGyg5ZqbRk9Z/I39DBeqCVUcYGSuLiYKPf2rpo=)
3: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: j8XwNmKzHtxOYC1qN4eC3Mdd11Pr7Jsabm08Gp7iA9o=)
4: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: lnol3FDE+TIgmDpE8Hb5zoS0uAhkzs2Kf9xTWAAdaZg=)
5: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: ZCeCkuNAMK9rwX4/TECTij2fUOVdG//HOrl/aGbqzoQ=)
6: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: TRYBWoWB1+O1h6++uHuCXlTu4HpKrVeUUMhvWRHclCc=)
7: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: A4JCozIWp8wr/poP9Jp6dNkVfMHGLYtzZMkqHhGl4c8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Validity
Not Before: Sep 23 02:32:13 2026 GMT
Not After : Sep 30 02:32:13 2026 GMT
Subject: CN=6ab33a2d-f28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:88:fc:e5:c0:fb:8e:01:8c:83:70:5c:ba:
b5:cd:88:c2:5e:9d:bf:c9:22:05:88:44:f4:e0:25:
23:a0:82:05:96:3a:d6:d2:c5:20:45:33:cb:93:35:
ef:b5:a8:4d:12:a9:12:44:5f:d6:96:61:47:81:2c:
68:f2:7c:60:76:e5:6b:75:bb:c0:d4:31:b9:2c:c1:
72:39:98:91:5d:c2:19:43:e7:fd:d5:2e:e0:c4:66:
9d:25:1e:88:34:e4:68:02:b2:5a:da:94:55:fc:be:
88:d2:68:df:a5:6f:dd:7c:67:7b:c9:63:16:65:2a:
65:6a:43:82:db:1d:64:42:8e:c9:a2:de:0a:0d:73:
f2:e1:65:8c:6d:7f:27:67:80:24:59:ce:dd:ed:58:
ac:9b:83:4a:a4:f5:2c:a0:4c:00:82:09:7d:9a:cb:
fb:b4:05:39:d4:32:8d:3b:52:ab:22:3a:c7:8b:16:
02:01:03:73:56:d0:ae:0b:0b:c4:cd:38:b5:5e:2a:
75:24:c1:b7:b4:5b:66:80:03:2d:f4:9e:f5:78:56:
4b:c7:b5:3f:a0:e9:34:f1:3e:37:58:70:d8:b9:30:
e0:e7:2e:76:59:0e:a6:cd:02:60:e6:1e:f9:86:0c:
69:22:df:75:a9:27:20:4f:bb:89:70:36:21:7a:c7:
cb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A9:C1:40:0C:85:07:BE:BB:A9:56:70:0A:7C:7B:56:FD:BB:DE:EA
X509v3 Authority Key Identifier:
keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:09:2f:ef:a2:3a:8d:b2:69:44:0b:0e:11:dd:c4:4f:a5:b0:
01:8d:0d:dc:98:70:9d:5f:28:eb:91:2b:b1:a1:09:b9:82:cf:
b4:04:bc:2c:d9:f3:66:5d:59:41:35:45:60:04:d3:46:43:67:
b3:db:31:fd:e5:85:5a:ab:01:a2:66:6c:c2:73:50:07:27:79:
7c:ce:f9:5f:c9:48:7d:e0:5b:ab:c2:ad:76:55:89:cb:c1:35:
1d:f8:56:ed:62:eb:62:be:b7:5e:f7:ff:98:de:4c:c8:86:c2:
c0:22:71:53:82:32:41:c3:a8:91:49:e8:3b:ed:e0:59:94:7e:
f0:76:d9:05:d4:94:d2:a6:8e:3a:27:70:e8:de:e9:05:e4:80:
a6:4a:6f:ec:0b:af:e3:4d:f0:f8:c2:82:5e:2c:1a:7b:49:1f:
71:41:54:02:ad:e8:26:ed:6f:c3:49:8d:a9:34:df:a8:c5:85:
90:ab:0f:a1:bf:0a:ee:94:be:5f:3b:87:89:09:f9:42:0a:0d:
f1:a3:8b:c9:5b:cc:aa:c7:48:a3:85:ae:31:c6:c9:c9:14:00:
02:d8:fe:48:f5:b6:66:a3:f3:de:19:03:ff:36:9d:d9:a7:b8:
1d:1a:01:af:35:16:49:e2:db:1f:ca:10:6f:87:88:50:82:0d:
ce:00:4f:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB
RkU1QUQzQjgwHhcNMjYwOTIzMDIzMjEzWhcNMjYwOTMwMDIzMjEzWjAYMRYwFAYD
VQQDEw02YWIzM2EyZC1mMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx+WI/OXA+44BjINwXLq1zYjCXp2/ySIFiET04CUjoIIFljrW0sUgRTPLkzXv
tahNEqkSRF/WlmFHgSxo8nxgduVrdbvA1DG5LMFyOZiRXcIZQ+f91S7gxGadJR6I
NORoArJa2pRV/L6I0mjfpW/dfGd7yWMWZSplakOC2x1kQo7Jot4KDXPy4WWMbX8n
Z4AkWc7d7Vism4NKpPUsoEwAggl9msv7tAU51DKNO1KrIjrHixYCAQNzVtCuCwvE
zTi1Xip1JMG3tFtmgAMt9J71eFZLx7U/oOk08T43WHDYuTDg5y52WQ6mzQJg5h75
hgxpIt91qScgT7uJcDYhesfL4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKapwUAM
hQe+u6lWcAp8e1b9u97qMB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy
NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZG
ZVF5ZmJ5STJpSzJ2NWEwN2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHgkv76I6jbJpRAsOEd3ET6WwAY0N3JhwnV8o65ErsaEJuYLPtAS8LNnzZl1Z
QTVFYATTRkNns9sx/eWFWqsBomZswnNQByd5fM75X8lIfeBbq8KtdlWJy8E1HfhW
7WLrYr63Xvf/mN5MyIbCwCJxU4IyQcOokUnoO+3gWZR+8HbZBdSU0qaOOidw6N7p
BeSApkpv7Auv403w+MKCXiwae0kfcUFUAq3oJu1vw0mNqTTfqMWFkKsPob8K7pS+
XzuHiQn5QgoN8aOLyVvMqsdIo4WuMcbJyRQAAtj+SPW2ZqPz3hkD/zad2ae4HRoB
rzUWSeLbH8oQb4eIUIINzgBP7A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:11:26 2026 by rpki-client