
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft
File: W2r-ya7p6tTclkY7oanLJyM9bf8.mft (raw, json)
Hash identifier: CHzDRqHfzMgOf5D4pRvQca6nPCgzG7icS4ZUi1Pxcgs=
Subject key identifier: 13:7D:FB:10:5D:5F:DB:F7:A1:ED:4D:B3:3C:1C:DD:CD:A0:D4:B7:4A
Authority key identifier: 5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF
Certificate issuer: /CN=A91D81D4/serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF
Certificate serial: 3548
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft
Manifest number: 3540
Signing time: Tue 12 May 2026 14:56:46 +0000
Manifest this update: Tue 12 May 2026 14:56:45 +0000
Manifest next update: Tue 19 May 2026 14:56:45 +0000
Files and hashes: 1: W2r-ya7p6tTclkY7oanLJyM9bf8.crl (hash: wuS4v66/0CIDlXXW06tI/Vedu8F5MJI+YBFTuR/7swg=)
2: 1317969A55B711EBAAFF6E4DC4F9AE02.roa (hash: eu2kAhhbc8QLlxvq0tkId26sGJatqL9ipE8llbMkMo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl
rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13640 (0x3548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D81D4, serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF
Validity
Not Before: May 12 14:56:45 2026 GMT
Not After : May 19 14:56:45 2026 GMT
Subject: CN=6a033fad-7ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:c5:50:42:fc:32:88:85:4c:83:ed:a2:02:
b8:43:07:f0:b9:6d:4f:55:dc:a4:9b:94:db:5f:8a:
d3:61:5a:1b:46:fa:bd:cc:0b:3d:b1:2a:1d:3c:84:
29:27:da:40:53:f9:b7:4d:c1:04:7d:7c:4a:e9:c7:
f1:f6:92:7b:07:e9:39:a3:6d:d2:0a:48:84:11:bc:
89:4d:4e:cf:5b:58:e7:e7:e9:da:37:2d:98:16:13:
61:ca:37:8c:73:d4:31:86:8f:2d:32:1e:8c:2f:d5:
8f:79:bb:42:2b:5a:89:88:a8:6f:ff:6a:ff:50:e2:
81:63:c2:e4:ee:1b:a5:b4:14:2f:4d:67:5c:56:b7:
16:a0:8f:a2:20:7b:b4:64:90:bb:b3:b0:28:d6:95:
08:6b:81:5f:62:aa:00:b4:1f:b0:93:80:1f:7e:c5:
e8:3b:76:7f:e9:f7:77:95:61:11:fd:d7:1d:88:fc:
fa:fb:4c:2b:4e:40:5d:67:50:01:43:10:52:ff:bf:
f8:06:b4:cf:83:68:d3:19:6c:1b:a6:a5:f7:cc:74:
9a:a7:5d:46:b9:b6:39:b4:ae:dd:f0:7c:2b:c3:b0:
e6:20:0e:f0:90:df:4e:05:cf:d8:82:81:8a:6e:e6:
d3:e0:4e:5d:61:fb:31:e2:1b:92:a6:35:13:33:ce:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7D:FB:10:5D:5F:DB:F7:A1:ED:4D:B3:3C:1C:DD:CD:A0:D4:B7:4A
X509v3 Authority Key Identifier:
keyid:5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:98:c1:6c:40:4d:ed:89:6b:b8:f1:ae:aa:15:60:e8:5d:b9:
34:e5:59:43:d3:95:03:8b:1d:73:7f:69:23:63:1d:01:95:90:
82:0c:6c:f4:ff:e6:05:ea:b8:90:e9:f6:e7:7e:ab:59:b5:a0:
ae:11:52:41:a3:6c:84:f5:75:95:85:76:52:f8:e9:7d:6f:1f:
16:6b:5b:0a:36:a7:be:3e:05:a3:f4:94:2a:fc:20:11:c6:8e:
a3:89:df:06:39:9f:10:cc:80:24:20:04:1a:45:9e:f9:65:8e:
57:f1:94:f3:1f:12:58:8a:b3:55:58:5c:b8:dd:f8:89:35:7a:
02:5b:af:43:08:30:29:12:e3:e5:db:aa:d5:65:a7:c1:9f:3f:
06:4c:9c:a9:56:d7:aa:57:8a:af:f6:e6:bc:9f:39:17:1b:58:
0d:5b:2e:9a:40:cb:54:ac:8e:60:7a:6b:52:da:7f:92:47:50:
5a:e9:84:de:bf:19:82:73:0e:6e:38:da:70:de:30:1a:c3:f7:
1a:13:03:dd:63:ab:d9:06:6b:69:53:16:cf:7d:27:6d:b7:aa:
9d:10:98:2a:a5:16:ee:4c:92:91:51:ff:b9:aa:19:ac:6a:d7:
39:00:d0:bd:47:21:2d:a8:0a:eb:37:b5:c0:69:de:43:ae:81:
3e:28:7c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:15 2026 by rpki-client