
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json)
Hash identifier: 2BqXBaBw+ipUkDwVaEw/5qpYepEfRGQ54Ofc+UFxOgE=
Subject key identifier: C4:AC:F2:1F:04:8E:07:73:77:A2:A7:D5:EA:26:77:44:4C:24:E5:35
Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Certificate serial: 0649
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
Manifest number: 0637
Signing time: Sat 04 Apr 2026 22:32:07 +0000
Manifest this update: Sat 04 Apr 2026 22:32:07 +0000
Manifest next update: Sat 11 Apr 2026 22:32:07 +0000
Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: Vk2KCxPQKKeoVzhakInE8GLMv7JviGt3vpCkYMcvnJo=)
2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: j5ZJEpzdtOEiGnvXhEWjzNgokm2dtSBgk89RWseZw8s=)
3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: e7QKn7+kdQj0gCw0LNLlb5Q7271gVnMQQic/lrYBjOA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1609 (0x649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Validity
Not Before: Apr 4 22:32:07 2026 GMT
Not After : Apr 11 22:32:07 2026 GMT
Subject: CN=69d19167-5ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:d4:ba:bb:5d:fb:0d:6f:75:9d:dc:17:7e:
4f:32:3a:9d:5a:ea:c5:db:0b:df:03:b2:1c:12:b7:
f7:d1:10:a8:e5:b0:d0:cf:d8:8d:0c:20:c8:2b:7f:
50:f2:c3:ba:c9:9b:5b:63:b8:fe:36:86:38:bf:75:
4b:82:28:b4:59:a7:4b:0c:52:6d:17:92:ec:94:a3:
b6:7d:9d:7d:2b:7f:41:0c:59:64:17:de:bc:ba:60:
31:3c:de:41:ee:52:42:71:27:72:7a:d8:0d:d9:91:
7d:95:3e:96:7c:65:6f:91:4b:83:5e:75:a7:fe:fd:
ce:97:2f:1c:c0:c8:7b:6e:af:73:d5:d8:4c:8f:b0:
44:14:46:9b:88:29:52:e7:0f:59:16:9e:b9:a2:63:
76:4f:46:bb:50:e0:69:43:1a:64:0b:ed:d7:2d:17:
4d:ed:10:79:04:9e:6f:c8:67:af:b0:0e:b2:5e:49:
01:74:82:3d:f9:3d:52:b3:94:e0:5e:b0:a9:ce:07:
4a:2c:0b:14:26:b8:8d:d6:c5:d6:21:b0:91:d3:be:
56:06:be:8a:29:0e:8c:fa:79:60:af:8d:d2:ba:df:
91:83:05:73:62:c5:e2:68:a1:5b:c9:08:54:8a:8a:
3d:cb:e3:17:47:79:5c:b7:50:17:8d:16:57:08:67:
77:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AC:F2:1F:04:8E:07:73:77:A2:A7:D5:EA:26:77:44:4C:24:E5:35
X509v3 Authority Key Identifier:
keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:8d:46:0f:a5:cd:c2:06:cd:9d:0a:a2:ed:65:2a:f5:13:4e:
5f:e0:77:54:0c:40:8f:24:a6:98:ae:78:e3:e4:2e:55:bc:cc:
2c:1d:ca:7c:4d:72:0b:e9:20:13:81:58:45:9e:93:a2:12:4b:
30:65:1a:a0:bc:06:05:be:20:b5:21:c9:ca:7b:1f:e8:78:36:
10:85:be:f0:4d:d2:fc:18:e4:f0:09:ec:40:e5:39:82:ee:ba:
70:b6:11:ba:94:bf:f4:f8:72:2d:67:95:be:75:ee:78:d8:93:
54:0c:e2:cc:40:69:71:98:4d:48:b1:e5:54:c1:c4:a9:dd:95:
64:1a:e9:e6:66:a5:7d:db:59:17:50:2f:a1:17:9e:e8:be:bd:
8f:46:9f:58:3a:e4:d9:95:6c:2d:e8:e6:c9:a2:f6:cf:49:91:
8a:68:01:5d:59:32:48:be:d4:24:b7:88:db:13:1c:23:30:22:
cf:d5:00:66:5e:37:6f:bc:da:44:31:40:ec:7f:3b:67:30:71:
17:b0:51:78:68:99:c1:d0:88:69:89:9e:47:68:25:1a:62:99:
71:ee:20:fc:5d:be:3c:2b:87:40:98:10:0d:8b:5a:b6:42:3d:
80:f1:a4:84:d0:f4:6e:cb:ff:6a:9f:ed:38:d9:f5:67:fb:b8:
05:10:6a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:33 2026 by rpki-client