
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
File: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft (raw, json)
Hash identifier: j7+PLl4miRHrzaYr4AQiG1NsR9RvMFXmHHTXRSdfEbI=
Subject key identifier: D2:B1:C8:B8:3B:10:DE:35:26:12:F3:09:93:A0:5D:1D:B2:3E:9E:ED
Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
Certificate issuer: /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Certificate serial: 0986
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
Manifest number: 097D
Signing time: Tue 12 May 2026 20:06:43 +0000
Manifest this update: Tue 12 May 2026 20:06:42 +0000
Manifest next update: Tue 19 May 2026 20:06:42 +0000
Files and hashes: 1: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl (hash: pbK/vkmC2WlPwi1wcnwta6CKpVaQDtCJz1fvNpAnw/U=)
2: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (hash: jJBBqp0n1dcla2CfO5nioVw0ckuTS67twgXm6uBPlv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2438 (0x986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E29, serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Validity
Not Before: May 12 20:06:42 2026 GMT
Not After : May 19 20:06:42 2026 GMT
Subject: CN=6a038853-f74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:32:60:89:5c:6f:6e:8d:6d:3c:08:c0:c9:
e6:76:1c:6d:ef:09:61:8c:80:79:d3:83:d4:29:4f:
db:c2:40:42:02:cb:a8:0d:82:e3:27:1a:f0:37:1c:
72:5f:7c:1b:c0:23:fe:86:49:1c:b5:9a:96:1c:cb:
f7:9b:a6:c6:75:a6:75:63:f9:87:4c:ea:11:0d:7b:
25:28:c7:d7:7f:49:f8:e7:8b:21:64:31:fd:49:84:
06:a4:95:77:14:c0:c5:e4:2e:88:d4:33:fa:b3:92:
7d:ee:87:2c:4f:a2:a6:d4:ac:e5:3a:5d:ac:43:f2:
85:f3:f4:ec:8c:29:8c:ae:1b:01:67:29:16:3d:62:
e1:c1:69:27:3a:69:b6:01:7c:d1:7c:76:76:da:ea:
5c:5f:2b:f5:73:03:8b:c9:59:3a:5a:07:70:7a:1d:
67:dc:23:a8:41:32:43:33:25:d4:81:98:de:8a:12:
27:98:a6:ac:be:53:fa:a5:fa:49:30:8c:28:38:19:
d7:d9:3a:9c:df:d0:2e:a0:f5:8e:84:27:3b:11:b0:
7a:07:99:83:05:7a:bb:5e:cd:ed:82:b2:2c:8d:e6:
ae:b6:67:57:c2:cc:53:bd:ee:c8:e8:8b:f0:6d:3f:
61:9a:f3:c8:99:74:17:78:d9:50:c3:20:d1:df:a3:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:C8:B8:3B:10:DE:35:26:12:F3:09:93:A0:5D:1D:B2:3E:9E:ED
X509v3 Authority Key Identifier:
keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:69:b8:99:54:94:1d:13:63:43:70:d0:99:c2:23:8e:3f:44:
04:e0:fe:7f:22:6c:91:2f:aa:81:13:1e:3d:e3:8b:23:7d:26:
3a:26:13:7c:70:bb:6c:61:ba:31:63:d4:25:45:91:e3:73:b0:
c6:5f:15:fc:29:b3:44:c3:49:ae:e3:e7:4b:f3:b5:71:93:25:
46:bc:ed:01:58:f0:9b:96:48:68:49:1e:4d:f6:a2:72:2b:9c:
7b:dc:18:bb:a6:8d:f1:b4:5a:d0:7e:df:a5:49:fe:43:c6:ed:
72:a2:5c:a5:86:27:bf:4f:7d:f6:aa:43:fc:ce:20:b2:dc:5e:
de:d5:93:c8:78:a7:7d:ca:1c:fb:f1:c6:49:a7:7b:3b:d2:6c:
c7:de:8f:ce:ad:f7:f2:f6:ba:17:e8:42:7f:b9:d0:14:a4:22:
b2:3e:aa:ef:91:01:19:4f:bb:5c:4f:e1:e9:a6:e5:4f:70:d5:
48:cf:81:e5:b0:87:ba:96:4f:be:f3:f7:6a:31:fd:e2:55:86:
03:41:ff:d5:02:64:d5:42:f9:ef:8b:97:43:d8:26:9f:84:ca:
e9:9b:b2:c4:17:bd:f8:6c:3a:61:80:3d:b1:af:ff:38:c0:f9:
9c:24:39:25:c4:f9:2c:a0:be:a6:57:d8:cd:04:90:d3:be:90:
ed:65:49:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:09 2026 by rpki-client