
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json)
Hash identifier: d2r6Ji+6xcCX1lzu4p3cBOVqiPTE6UNjQofDMHN0zOk=
Subject key identifier: B8:3C:A5:A7:FE:BE:BE:39:A3:D1:48:9F:FF:9E:A2:44:C4:80:CE:19
Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Certificate serial: 029A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
Manifest number: 0294
Signing time: Sun 27 Sep 2026 02:01:04 +0000
Manifest this update: Sun 27 Sep 2026 02:01:03 +0000
Manifest next update: Sun 04 Oct 2026 02:01:03 +0000
Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: CemkDtCwE0x96o9p/2OEPFXTJ+4nI6AqUXTwuNnRiHE=)
2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: 8F41x2fmLZ5M8u7RlY+aL2kU1d0Mkh7PiR5sgAseHxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Validity
Not Before: Sep 27 02:01:03 2026 GMT
Not After : Oct 4 02:01:03 2026 GMT
Subject: CN=6ab878e0-06ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:98:d6:41:b2:50:f0:67:d3:13:ff:e9:58:
2b:e2:e4:e6:16:75:f8:8e:d5:ef:3b:9b:c8:03:0b:
20:72:d9:e3:b4:a7:16:f6:e0:ca:1c:2a:8d:b6:4d:
dc:0b:e4:56:0a:d2:18:0d:c1:a5:94:15:71:27:4a:
f8:e5:32:ce:9e:f1:be:72:60:c0:6d:ec:f7:31:49:
de:3d:b0:bf:01:f2:36:5a:43:c6:2c:44:dd:ef:6f:
0a:49:a0:d7:3d:8e:9f:cf:d8:a3:15:6b:45:05:2d:
14:bb:82:e8:cc:dc:6e:f9:a2:6f:ad:00:22:e6:45:
29:0a:f5:3b:13:5b:fd:70:0c:b9:1b:67:ff:aa:6b:
e0:e5:c2:5e:1e:4e:96:7f:ce:df:2f:0f:56:15:7d:
8e:8b:9d:a4:bc:cb:c4:83:1c:db:60:16:52:58:98:
f3:95:7f:db:dd:9f:0c:3b:03:a3:88:18:ed:f5:71:
5f:4c:40:99:99:b5:7b:c1:2a:98:78:a6:fd:40:27:
74:1b:a0:1d:d7:e7:26:63:50:7b:69:43:a1:1e:fd:
d0:63:da:83:4f:be:05:ef:dd:17:77:04:eb:19:94:
52:d7:20:52:e3:69:23:21:22:c3:87:eb:1d:0b:15:
28:48:e6:18:08:f2:c7:1e:b1:6b:67:4c:bc:71:93:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3C:A5:A7:FE:BE:BE:39:A3:D1:48:9F:FF:9E:A2:44:C4:80:CE:19
X509v3 Authority Key Identifier:
keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:c4:f2:2d:f3:a6:ef:3b:db:72:33:4b:29:28:3d:2b:f2:48:
72:eb:9e:e5:ac:ab:54:06:f2:c5:ae:55:24:b4:de:b2:5b:63:
84:f8:2a:57:18:c1:b9:6a:47:bf:00:f8:56:0b:29:37:64:22:
b4:7b:44:18:b8:78:a0:40:c2:82:74:21:c2:c3:80:0c:3d:17:
80:ee:2a:f6:2b:b0:c0:e8:fc:d1:4b:82:ab:f4:20:bf:16:a5:
44:b3:28:7a:00:b2:1a:c6:5b:90:99:a9:c9:d5:85:11:6e:e3:
4a:0c:68:8d:e6:80:57:62:5a:b2:aa:f3:c7:4c:41:f7:cd:e8:
1f:c1:fb:12:41:ea:bd:0a:85:32:08:f9:82:76:bc:53:5c:bf:
ac:23:b9:df:a3:9f:dd:ed:48:98:c3:66:7d:0a:63:28:2e:f7:
a5:41:f5:a2:96:63:a0:9f:bb:94:46:71:70:2f:1b:74:54:40:
26:2c:8f:62:1f:e1:e2:b5:78:35:e2:3c:11:99:20:3c:89:30:
54:b0:25:ad:ef:17:5b:8a:db:09:9f:a7:4d:be:51:09:91:fe:
17:0b:00:25:24:4a:ab:06:88:3d:09:f5:87:5c:34:46:bb:4f:
de:c6:51:cf:6c:ce:4f:bd:27:48:04:98:9a:3d:63:91:65:e1:
d0:10:3c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:38:30 2026 by rpki-client