
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json)
Hash identifier: Q8UVqOsjL3EU7Fr0FAWH6bphHp8VqXCVysUwDV+ej7g=
Subject key identifier: C4:72:A5:31:DB:AC:EE:8E:B4:FC:02:CA:61:6A:FE:E5:B6:39:E2:A1
Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Certificate serial: 0660
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
Manifest number: 064E
Signing time: Wed 20 May 2026 22:43:37 +0000
Manifest this update: Wed 20 May 2026 22:43:36 +0000
Manifest next update: Wed 27 May 2026 22:43:36 +0000
Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: x6dLAvXiW9rt2TgIUr1HVhZ4p8XZO7NsxPvJApaHxYA=)
2: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: e7QKn7+kdQj0gCw0LNLlb5Q7271gVnMQQic/lrYBjOA=)
3: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: j5ZJEpzdtOEiGnvXhEWjzNgokm2dtSBgk89RWseZw8s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1632 (0x660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Validity
Not Before: May 20 22:43:36 2026 GMT
Not After : May 27 22:43:36 2026 GMT
Subject: CN=6a0e3919-4fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:89:cc:d1:e3:14:c6:4d:61:dc:f0:52:8b:
85:06:06:4e:c7:1a:05:71:9e:ca:a8:b1:eb:4e:49:
0a:f9:37:90:15:d5:5d:fe:6e:5f:3e:43:71:6c:76:
79:9a:3f:d7:77:eb:fd:c0:90:a0:2d:73:6c:4d:e6:
b1:d7:2c:55:01:f2:a7:0e:4c:db:f1:b1:57:cc:1d:
f0:48:70:1c:80:b4:69:2e:3e:4c:65:f6:8b:de:03:
70:8a:a9:cf:1d:06:06:7c:56:2f:ed:9e:29:e0:3a:
6f:3a:8c:f2:cf:70:6e:f0:29:f4:eb:ac:c9:ab:d7:
1a:3f:4a:6b:21:30:87:2c:75:10:df:0e:c5:49:f8:
ee:ae:5d:2d:d2:52:cf:8e:e1:fd:36:f2:b2:d3:0f:
da:3a:49:40:41:76:5b:8c:3a:f4:03:7d:8f:cd:64:
36:ec:c3:d8:0e:b9:a7:5c:1d:9f:88:bc:30:c6:8a:
3e:a0:b0:e3:03:37:94:4b:a9:d9:d1:1e:6a:f2:65:
11:93:e7:62:ab:07:0e:69:84:1a:1c:19:2e:96:91:
33:d2:f4:23:b0:e1:19:4a:3c:00:55:9f:f8:b4:29:
e3:c5:6f:71:f3:e5:21:e0:20:a5:15:fb:30:39:fc:
64:5b:e3:1c:92:52:36:48:ce:57:58:70:c0:79:3d:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:72:A5:31:DB:AC:EE:8E:B4:FC:02:CA:61:6A:FE:E5:B6:39:E2:A1
X509v3 Authority Key Identifier:
keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:d0:89:41:15:18:03:8f:1d:ce:a1:5b:2f:ea:b2:f9:91:40:
64:f5:90:da:45:e1:cf:9c:a3:67:84:c5:3e:2b:bf:1a:92:37:
11:8d:3c:83:a2:c9:08:de:4b:d8:39:e7:5e:9e:44:1b:69:c9:
36:81:31:44:82:47:05:f7:2a:52:ff:e4:33:92:33:ca:f9:fc:
78:a0:0f:d3:0a:b4:00:ab:69:89:99:bb:5e:b6:0a:10:ac:99:
21:0b:76:a7:c5:10:a4:a6:95:b1:ae:4a:c8:a9:04:8a:47:00:
85:b6:c9:f5:5b:f2:12:d3:17:cc:88:f7:cc:e7:45:2a:57:4d:
87:49:0f:26:db:73:58:dc:3f:11:f9:46:c2:30:7d:99:c4:dc:
62:3e:cd:03:77:3d:04:7b:ec:8e:a0:47:74:16:2b:94:20:ee:
94:b1:61:5c:a7:80:c1:cd:02:1a:35:0c:86:8a:83:58:e7:ae:
17:31:6b:09:0a:bb:62:09:e8:13:db:5e:f6:ce:5a:bd:fd:cd:
aa:db:a8:e5:6e:e6:02:3f:65:ba:41:5a:97:f6:50:6d:2b:34:
b4:be:5a:0c:ed:b1:44:03:fe:eb:37:1a:8c:74:6b:65:27:11:
7f:63:78:32:d1:29:4f:28:1e:61:fa:7c:79:2e:38:94:26:64:
6a:3e:f4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:44:05 2026 by rpki-client