
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
File: WY9YPfrp_JTaoww3iyFr7JcOM5g.mft (raw, json)
Hash identifier: JOGnJEYtiTDk9tAJE8tjNZDGg36SFtjTIbC44vDUTHs=
Subject key identifier: A0:ED:1B:C7:7F:41:CE:E4:40:0C:E3:97:4B:5E:9E:46:26:0D:B9:5D
Authority key identifier: 59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98
Certificate issuer: /CN=A91EBD8F/serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
Manifest number: 9B
Signing time: Fri 25 Sep 2026 07:29:42 +0000
Manifest this update: Fri 25 Sep 2026 07:29:42 +0000
Manifest next update: Fri 02 Oct 2026 07:29:42 +0000
Files and hashes: 1: WY9YPfrp_JTaoww3iyFr7JcOM5g.crl (hash: PSoop4XvRNUt+XUny9Rn/npdBPMwMcUFewwHzIVluOQ=)
2: 53EF3992D97F11F0B42EB3E75ED3641D.roa (hash: CB3oUxbQq+oYolrrHdTJzTMonbK2g+QTxJH/oX6hwkY=)
3: 54F9E058D97F11F0B42EB3E75ED3641D.roa (hash: IbfmTJT4slGXqqy5jBNMbpSI8oHXqAY0nysJ/plorU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl
rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBD8F, serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
Validity
Not Before: Sep 25 07:29:42 2026 GMT
Not After : Oct 2 07:29:42 2026 GMT
Subject: CN=6ab622e6-9535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:27:ce:be:d8:da:91:6b:f6:28:a5:86:e9:
f5:d7:15:36:cc:97:83:bb:82:e1:7a:5f:1c:c8:c7:
00:3e:d2:69:6e:0b:75:ca:fa:71:06:45:72:75:bc:
11:6d:7e:91:a5:fa:63:36:59:6d:2c:16:98:22:5f:
93:45:d3:0e:61:1e:e5:07:ef:2a:ad:c8:e4:bc:4b:
5e:00:ea:e1:12:fe:87:65:72:f8:28:33:98:7e:39:
46:bf:d6:e6:ec:a6:a7:2f:99:28:97:19:81:58:d8:
be:e8:95:ef:c2:55:44:be:3a:44:7d:56:6b:62:2a:
ec:4e:62:46:2d:15:d3:a1:0b:4b:e9:89:1b:49:22:
97:95:8e:d9:ac:bf:b8:15:09:9e:e6:61:54:bf:c0:
59:d1:b0:56:1c:c3:1c:c8:6e:a8:88:ec:22:3f:59:
c2:e9:4f:1c:39:14:82:10:f1:9b:65:ab:87:c6:8c:
5f:c1:67:14:1d:2d:0e:51:33:5e:3d:67:dd:be:bf:
d7:cc:fd:fb:71:37:c9:6f:80:55:66:02:1b:15:c4:
f1:0e:b7:99:0f:3d:3b:c6:21:1f:ca:44:20:b7:6a:
d8:c0:c1:8c:36:31:ab:bc:b1:48:8e:dd:55:24:23:
d1:30:c8:1e:4b:a1:3e:95:ac:67:57:61:8f:9b:3c:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:ED:1B:C7:7F:41:CE:E4:40:0C:E3:97:4B:5E:9E:46:26:0D:B9:5D
X509v3 Authority Key Identifier:
keyid:59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9d:66:52:60:bb:37:94:0e:81:68:53:dc:c1:f3:d2:15:e5:
32:71:92:1f:03:5a:a5:81:44:83:0d:e2:63:0a:ba:ff:15:02:
af:90:1e:fd:3f:d8:76:4f:b0:b7:35:cd:a7:30:30:bf:d7:49:
08:93:c2:e7:26:6f:ed:0f:04:a9:50:9e:a9:9c:45:16:b6:a5:
5f:89:fd:2e:ae:7e:9c:99:37:03:29:9c:5e:66:2d:8e:bb:26:
54:59:17:04:1a:cd:4c:8d:f8:9f:47:a4:b3:2d:03:79:47:ff:
8b:ee:a3:5e:9d:9f:53:30:4d:67:a9:0d:4a:81:0b:1a:24:94:
d0:c4:fa:b3:40:2d:59:60:25:0e:07:05:c5:7c:d1:b5:18:cb:
b5:e6:de:58:02:0b:af:1d:74:0a:73:2f:6a:36:eb:53:70:6f:
97:37:d7:b2:49:74:a6:60:e1:6c:e6:22:0f:c0:c2:63:97:78:
63:90:fe:fe:61:8d:5b:b2:43:50:e1:65:f2:13:0f:f2:8b:ff:
9b:07:71:7c:71:d8:e6:a3:96:db:df:ea:88:b3:26:7d:95:3a:
f8:6c:19:2e:05:4c:24:f6:5c:73:10:9b:cc:68:01:29:a5:0c:
8b:64:8a:32:97:8b:a5:84:39:1b:72:df:bd:79:f6:41:77:b6:
d2:0b:b0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:00:26 2026 by rpki-client