
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json)
Hash identifier: wKvp4hA4OmaC2O4ehasCADUszDZKVqyOwHqob7IwLoQ=
Subject key identifier: 5C:56:2F:BD:6A:82:70:8D:03:CA:16:65:00:E5:50:0C:6B:7C:AB:E7
Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
Manifest number: 024F
Signing time: Wed 13 May 2026 02:23:39 +0000
Manifest this update: Wed 13 May 2026 02:23:38 +0000
Manifest next update: Wed 20 May 2026 02:23:38 +0000
Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: eov7lDQxLOofUbZGiuHDomfA2xPpsPHw9eCAWkY+1Fw=)
2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: 8F41x2fmLZ5M8u7RlY+aL2kU1d0Mkh7PiR5sgAseHxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Validity
Not Before: May 13 02:23:38 2026 GMT
Not After : May 20 02:23:38 2026 GMT
Subject: CN=6a03e0ab-7a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:3f:d0:fb:7e:b0:d9:dd:3d:9b:85:1f:b0:
12:a8:2a:a1:14:3e:33:b7:32:61:08:c4:3b:91:90:
d3:9a:e1:d8:a3:9a:10:76:a2:6e:18:0a:e3:f7:cb:
cb:b0:23:34:cd:cf:39:d4:88:7c:5c:ce:16:aa:92:
d0:6c:42:ee:03:74:b0:12:a6:08:ee:e6:0e:fd:d1:
44:1f:db:15:b1:28:72:a1:3f:6a:67:6c:90:bd:76:
c4:c6:cd:7e:2a:ae:01:ca:0b:06:97:61:0a:6d:2a:
33:3e:33:ec:69:6a:ba:82:e9:79:3f:72:a4:15:67:
da:b1:90:99:28:31:28:29:f2:e9:fd:99:d8:55:66:
28:44:b6:1a:aa:37:a7:9f:b8:27:0b:19:c6:af:35:
6d:78:da:81:89:2e:f2:ab:03:c6:02:e4:07:86:93:
3f:98:e1:dd:58:0c:25:f8:6b:2d:9b:26:6d:60:ea:
70:3a:46:53:c8:6d:b7:a1:48:92:fb:61:7d:2f:73:
66:b0:fb:02:9d:a0:1f:39:7a:f1:c7:59:fd:e6:28:
03:21:da:4e:56:8b:50:54:f2:dd:86:3d:c7:86:41:
68:d4:2f:c6:ea:22:27:c8:5e:85:46:35:a7:d3:78:
cb:14:7a:38:3c:06:68:39:d9:48:32:29:37:3f:da:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:56:2F:BD:6A:82:70:8D:03:CA:16:65:00:E5:50:0C:6B:7C:AB:E7
X509v3 Authority Key Identifier:
keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9a:79:9c:7c:78:94:13:04:49:9a:8e:89:61:15:01:ba:7c:
3e:d3:d8:de:ef:ea:b4:ae:34:b0:7b:30:3c:bc:c4:12:ad:60:
fe:15:7b:86:3d:82:79:49:99:52:8b:a6:1a:23:f4:af:0f:0f:
ba:49:f4:b0:a0:2c:60:c6:29:36:4f:86:83:3f:53:5d:f7:44:
37:66:37:4f:f0:9d:12:be:f5:7f:c2:d9:a3:d4:bf:1f:f4:9f:
d1:84:45:e9:d6:ed:97:d4:c3:c4:c5:68:64:31:4c:2c:58:50:
c9:01:4a:5a:47:e5:ef:4e:96:6f:61:09:49:c5:3e:9b:f3:c3:
60:8c:51:18:3a:b8:5d:17:36:73:37:f4:fe:50:f7:af:84:6b:
a7:54:cc:34:bf:fb:38:f4:12:2d:3d:05:8a:1d:64:5a:16:3e:
87:95:59:33:a1:f2:cb:ab:53:ad:dc:aa:7a:3a:58:d0:9d:1c:
47:c9:35:40:72:dc:e7:20:7c:36:9d:d3:a1:de:6b:3f:2c:71:
05:74:fd:49:e9:07:ab:cf:67:e2:bd:08:e6:b0:49:da:3e:2b:
6e:80:3c:9f:09:63:e9:c7:8c:b5:b0:33:0b:0d:2f:21:9c:37:
7c:b2:18:06:35:cc:c3:a4:0f:2e:3e:95:22:93:91:41:e2:99:
21:74:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:45:36 2026 by rpki-client