
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
File: WY9YPfrp_JTaoww3iyFr7JcOM5g.mft (raw, json)
Hash identifier: Vne/dqW/SjCQHB0ZWno7UXysZxbiSuFnUIXW6C/WQNQ=
Subject key identifier: 02:42:AF:97:AB:FF:58:37:7A:84:7A:BC:34:CA:CD:31:E9:8C:37:D4
Authority key identifier: 59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98
Certificate issuer: /CN=A91EBD8F/serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
Manifest number: 7A
Signing time: Thu 23 Jul 2026 09:43:27 +0000
Manifest this update: Thu 23 Jul 2026 09:43:27 +0000
Manifest next update: Thu 30 Jul 2026 09:43:27 +0000
Files and hashes: 1: WY9YPfrp_JTaoww3iyFr7JcOM5g.crl (hash: mC1B/5a81p+NnXSiHEe1lfj/tZObLwJE1DT+pGnRrmU=)
2: 53EF3992D97F11F0B42EB3E75ED3641D.roa (hash: CB3oUxbQq+oYolrrHdTJzTMonbK2g+QTxJH/oX6hwkY=)
3: 54F9E058D97F11F0B42EB3E75ED3641D.roa (hash: IbfmTJT4slGXqqy5jBNMbpSI8oHXqAY0nysJ/plorU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl
rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBD8F, serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
Validity
Not Before: Jul 23 09:43:27 2026 GMT
Not After : Jul 30 09:43:27 2026 GMT
Subject: CN=6a61e23f-6113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:c0:9c:7a:5e:68:6f:98:59:38:01:c0:18:
51:87:e4:36:cd:ab:86:62:7b:ea:2f:1f:de:50:3c:
96:e6:56:b8:57:44:2a:4a:02:b7:a8:2e:a3:b1:59:
84:6c:92:f6:ce:20:57:a7:d0:a9:a3:59:2c:32:7f:
07:69:33:e8:60:14:76:58:ef:e8:90:54:c3:45:ce:
aa:bb:00:1a:b5:e1:b1:80:ae:8c:40:b5:10:53:08:
9f:43:52:7f:9a:21:47:04:08:02:1a:90:5b:14:4a:
79:c1:99:17:4e:46:62:b3:f2:29:9e:73:60:32:9e:
49:a7:3e:2f:32:2a:6f:58:e6:c4:63:9b:50:26:b0:
38:7e:51:a8:72:cb:d6:14:eb:75:bb:66:c1:44:7b:
6c:72:ad:b1:30:f1:f4:3e:30:95:d3:dd:bd:8c:42:
2d:34:a9:0d:ae:9c:f8:a6:72:50:38:a9:46:18:6b:
cf:cc:62:81:8a:ac:3b:ac:d6:8e:b5:83:74:a6:ce:
10:02:09:34:aa:1f:e3:72:1d:03:58:b6:5f:16:54:
84:0b:9c:86:17:6d:5f:7e:11:2b:74:1e:d4:b5:ea:
f0:0d:81:db:5c:23:59:e2:2d:16:b4:79:3f:5a:e1:
f8:35:cd:e5:85:f6:bc:ea:30:2a:52:03:2f:56:c1:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:42:AF:97:AB:FF:58:37:7A:84:7A:BC:34:CA:CD:31:E9:8C:37:D4
X509v3 Authority Key Identifier:
keyid:59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:51:cd:c7:c5:95:15:74:bc:57:57:f6:9b:44:b5:a3:59:27:
66:ff:64:54:df:df:01:11:d6:6f:e0:2d:5e:b7:4b:34:ac:7d:
c5:ef:43:22:a2:43:ee:2e:ea:b8:ba:bd:6a:53:42:4f:ce:dd:
d7:8b:6f:e0:44:27:56:5f:ad:a9:31:7b:2a:b2:42:d5:89:82:
7e:b2:2a:bd:d9:5a:83:67:5b:de:e4:15:63:33:95:e2:a0:d3:
e1:44:c6:d5:22:59:87:1d:02:7c:74:80:ac:c5:16:88:85:77:
fc:39:b4:e6:0d:b4:f4:c4:6c:c7:54:84:76:ae:08:84:bc:52:
8d:da:81:7a:95:b3:7f:6d:51:35:aa:12:de:64:7a:7c:c2:68:
95:bd:56:bc:c1:0a:3d:f5:7f:2d:e4:ad:3f:47:5e:a2:92:fa:
bd:2d:24:2d:0f:93:90:d4:be:bf:ae:10:75:df:03:c5:b9:44:
87:9c:e1:ca:9b:ba:87:8a:a5:52:65:0e:d0:9b:c4:09:b6:f5:
f9:8f:3f:c2:25:2a:50:ae:5f:b3:92:b3:9d:72:02:f6:58:8f:
a0:9a:e9:35:b4:5f:be:66:ac:55:9f:58:3c:f8:d3:a0:a2:34:
a1:d3:18:2e:f2:ff:db:65:3c:d5:79:9f:58:55:af:64:a0:29:
54:3d:08:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:51:55 2026 by rpki-client