
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json)
Hash identifier: 3b6DkQI1xYFJdR1CPVavk8tjAhUP5MPC16cDKO3PHFk=
Subject key identifier: 54:5F:92:94:C3:62:0B:10:3A:8D:33:5F:29:17:36:D5:4C:B5:48:51
Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Certificate serial: 0681
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
Manifest number: 066D
Signing time: Thu 16 Jul 2026 23:04:16 +0000
Manifest this update: Thu 16 Jul 2026 23:04:15 +0000
Manifest next update: Thu 23 Jul 2026 23:04:15 +0000
Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: P6cXx6RMjMjgPIXFeHzaEAxEM8O7ad2cc0v8+TQot08=)
2: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: AVEGvtOF0iwaeq96YQ9QUqPUhESEUdl2ZAme82upoYA=)
3: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: 8jTO1g3DnI3Mc9HbbuIXEWUONxgdq2EyXq0caoNDXcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 23:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1665 (0x681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Validity
Not Before: Jul 16 23:04:15 2026 GMT
Not After : Jul 23 23:04:15 2026 GMT
Subject: CN=6a596370-4e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:64:0a:87:45:04:69:be:ca:e5:c9:94:e8:
1d:c6:c8:1e:db:f8:4e:06:b8:7b:04:46:a3:2d:5b:
7d:02:a7:82:f7:dc:41:00:59:db:17:18:01:8c:81:
2d:ec:fa:71:7d:3b:bc:45:86:3d:58:50:a8:2b:5b:
17:81:09:40:53:f8:58:55:0f:81:ce:ab:a7:84:e1:
34:34:86:7f:14:29:dc:1f:ad:f8:8f:b7:d5:79:c2:
80:0a:a7:11:dd:50:a6:96:d9:c0:1f:38:fa:61:72:
e7:29:ad:13:51:a3:da:1b:cf:7c:dc:f1:41:bd:51:
15:17:f0:cd:62:ca:8f:5b:24:f8:6f:9c:a9:31:b3:
d6:19:2d:10:04:fd:c3:03:85:2c:27:a4:88:f6:48:
3e:56:4d:0e:b9:77:8f:44:8e:c0:84:a8:6e:89:73:
9c:0c:f2:27:3e:be:4f:48:34:04:4f:01:28:09:bc:
eb:40:be:06:d3:96:af:e1:b2:50:98:d8:84:12:30:
18:4d:b6:a3:d6:63:f6:8e:d5:82:1b:61:f9:ef:fc:
01:46:7e:74:5c:52:65:e1:e0:d3:d8:37:c9:6f:9a:
e2:46:ab:79:78:92:eb:4c:88:23:76:29:df:0c:ad:
ab:22:c5:32:f0:7e:ac:e5:ca:82:87:c0:bf:b6:21:
27:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5F:92:94:C3:62:0B:10:3A:8D:33:5F:29:17:36:D5:4C:B5:48:51
X509v3 Authority Key Identifier:
keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a7:6d:22:1e:7d:3c:d1:b9:14:04:a5:c6:fe:82:45:1f:df:
e3:16:45:be:85:ac:2d:83:d6:e1:15:92:b1:ff:c8:c6:fb:09:
93:64:31:f3:a7:2a:7d:1b:f2:29:d4:01:c4:a6:af:cf:22:d9:
8e:31:c8:6b:c4:6c:80:d2:71:30:ea:4d:4e:d5:81:7c:d2:67:
21:a3:04:6a:19:bd:d1:76:5b:52:37:68:32:f3:1f:6f:c6:80:
47:a8:c7:01:40:a8:cb:72:7b:b3:9f:db:cc:12:1c:d8:2a:ec:
d0:3d:69:de:05:40:2a:02:64:f8:23:22:0b:ef:9d:dc:07:b2:
49:74:62:2f:dd:4d:e7:72:aa:31:99:c2:e5:75:c2:43:a2:4d:
6e:f6:d3:d5:01:95:3f:2d:84:d9:31:0f:1a:fc:04:4f:4b:5f:
1b:94:a5:52:4d:ec:65:1e:13:71:d4:cf:e2:85:4f:e2:0c:ee:
56:58:f4:8d:b6:ed:da:a3:6a:25:a6:23:01:e9:74:64:d2:82:
db:dd:cd:86:8e:f1:7d:51:e0:1c:50:15:a4:e0:0c:9c:2e:87:
84:ae:dc:b3:24:21:b3:9e:86:6b:ac:b1:59:a7:5e:0d:38:ea:
21:cd:b6:d6:b1:61:bf:16:eb:46:90:30:38:48:d4:56:c1:6f:
61:32:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:26:27 2026 by rpki-client