
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
File: WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json)
Hash identifier: 7t9fIEn4ie2ktv0K6sdGn9TjbqZwgh2DL94gCFGYGVA=
Subject key identifier: 18:93:FE:70:54:94:7A:24:07:71:C7:E9:44:BC:01:AB:08:35:6B:F6
Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF
Certificate issuer: /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF
Certificate serial: 055D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
Manifest number: 0557
Signing time: Sat 04 Apr 2026 23:10:59 +0000
Manifest this update: Sat 04 Apr 2026 23:10:59 +0000
Manifest next update: Sat 11 Apr 2026 23:10:59 +0000
Files and hashes: 1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: YcM2k55bonHvEGA/RSRITu1yveQ9hXfsjTBcTvhR/IY=)
2: 846935702CD911ECA528B744C4F9AE02.roa (hash: Rx8c2/nFV7enk7jXl4vzWbU4QjFW1Gfdl0mQ9/3oQuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl
rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1373 (0x55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160DF1, serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF
Validity
Not Before: Apr 4 23:10:59 2026 GMT
Not After : Apr 11 23:10:59 2026 GMT
Subject: CN=69d19a83-ab40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:84:5b:a2:b3:fa:10:99:4b:14:c9:3c:83:
f0:00:ae:df:b3:9c:8e:c6:05:92:b8:8a:9e:5f:45:
c4:5c:df:af:00:ea:a1:10:74:59:e0:65:ee:9f:f7:
1c:3d:15:e6:55:89:33:a0:9e:e1:a5:3d:12:12:cf:
73:4d:c6:c2:dc:c1:b5:58:e8:6b:76:81:f2:fe:ef:
ab:55:75:aa:3f:8d:68:8e:04:bd:95:26:62:8c:10:
f4:29:3a:ce:a6:df:4d:24:26:68:ce:a9:94:ed:a5:
84:61:9e:de:87:84:6d:6c:d8:f5:e2:8a:e8:62:7a:
9d:d0:82:eb:38:a1:e2:d2:7c:43:04:35:6e:e7:0d:
00:be:b8:e8:f8:42:8f:90:ad:97:ef:37:c1:68:49:
f2:7b:cc:26:40:fe:ca:33:d3:2a:10:73:cb:9e:0d:
0a:23:17:50:4d:d6:da:ac:e1:cb:a3:cf:09:ea:05:
6d:2c:79:b5:95:c6:00:8e:af:1f:7e:cb:6b:ea:d6:
6e:4d:da:d5:cf:fe:c8:18:a6:fc:21:4c:37:8f:ef:
e1:0f:14:46:0a:87:29:c8:cb:11:bd:a5:b9:65:12:
51:e2:89:57:fe:b6:d1:c7:e2:35:e3:ba:1a:71:f5:
22:39:5b:71:6b:38:0f:88:7b:b2:80:be:a3:ad:c3:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:93:FE:70:54:94:7A:24:07:71:C7:E9:44:BC:01:AB:08:35:6B:F6
X509v3 Authority Key Identifier:
keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:c4:7b:35:9c:87:46:94:80:46:b4:88:0f:01:32:72:8a:1c:
f7:7c:12:88:8c:17:8a:5e:30:e1:f9:ae:b8:f1:3b:da:36:28:
ba:0b:44:73:44:3a:21:ac:01:c8:a5:06:fd:aa:63:97:6e:e5:
69:d0:ed:c9:67:7f:71:56:79:7b:6d:d0:e7:17:d9:61:18:4e:
2d:c8:e1:20:17:b9:3d:98:4d:6c:5b:79:10:b6:70:fb:96:34:
c7:87:d6:c4:fc:73:72:d1:74:ca:0c:4d:08:d1:91:ad:b3:d3:
33:62:8c:68:ab:52:4c:56:42:ed:c9:85:66:64:3d:04:1a:1b:
a9:ff:0a:32:08:f4:f0:e0:37:5b:78:7c:e3:1d:61:7e:71:22:
77:ce:29:8b:91:5b:ce:a8:e1:89:9d:6a:24:6e:e7:db:b5:54:
1b:6a:d3:11:5c:88:fb:15:b2:e4:98:dd:a7:78:f0:37:00:d8:
1b:d8:e3:8d:bf:f3:8d:3b:ea:9d:1f:ad:2f:a3:8d:cc:89:33:
30:46:8e:f1:8a:ad:10:94:0d:5a:72:30:09:fc:38:04:ae:81:
e9:99:d9:c0:49:08:5f:2a:20:a7:b0:21:8c:3a:1c:6f:bd:27:
10:7e:73:3e:13:54:e1:5b:7a:95:59:85:22:4f:e6:c0:0c:6d:
e6:9a:3f:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBERjExMTAvBgNVBAUTKDVBMDg0MzEwNjBFNUNCNEE3MzQxMzg0M0E2QzJGMDA0
QkVGQzMyQkYwHhcNMjYwNDA0MjMxMDU5WhcNMjYwNDExMjMxMDU5WjAYMRYwFAYD
VQQDEw02OWQxOWE4My1hYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwm2EW6Kz+hCZSxTJPIPwAK7fs5yOxgWSuIqeX0XEXN+vAOqhEHRZ4GXun/cc
PRXmVYkzoJ7hpT0SEs9zTcbC3MG1WOhrdoHy/u+rVXWqP41ojgS9lSZijBD0KTrO
pt9NJCZozqmU7aWEYZ7eh4RtbNj14oroYnqd0ILrOKHi0nxDBDVu5w0Avrjo+EKP
kK2X7zfBaEnye8wmQP7KM9MqEHPLng0KIxdQTdbarOHLo88J6gVtLHm1lcYAjq8f
fstr6tZuTdrVz/7IGKb8IUw3j+/hDxRGCocpyMsRvaW5ZRJR4olX/rbRx+I147oa
cfUiOVtxazgPiHuygL6jrcOcIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBiT/nBU
lHokB3HH6US8AasINWv2MB8GA1UdIwQYMBaAFFoIQxBg5ctKc0E4Q6bC8AS+/DK/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERGMS9FMzc5RDVBMDJD
RDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkwcHpRVGhEcHNMd0JMNzhN
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dnaERFR0RseTBwelFUaERwc0x3Qkw3OE1yOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MERGMS9FMzc5RDVBMDJDRDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkw
cHpRVGhEcHNMd0JMNzhNcjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR8R7NZyHRpSARrSIDwEycooc93wSiIwXil4w4fmuuPE72jYougtEc0Q6IawB
yKUG/apjl27ladDtyWd/cVZ5e23Q5xfZYRhOLcjhIBe5PZhNbFt5ELZw+5Y0x4fW
xPxzctF0ygxNCNGRrbPTM2KMaKtSTFZC7cmFZmQ9BBobqf8KMgj08OA3W3h84x1h
fnEid84pi5FbzqjhiZ1qJG7n27VUG2rTEVyI+xWy5Jjdp3jwNwDYG9jjjb/zjTvq
nR+tL6ONzIkzMEaO8YqtEJQNWnIwCfw4BK6B6ZnZwEkIXyogp7AhjDocb70nEH5z
PhNU4Vt6lVmFIk/mwAxt5po/9g==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:17 2026 by rpki-client