
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
File: wcRvxKcZaeWFBKc01JBKe9L_BUM.mft (raw, json)
Hash identifier: fRaFC/mH3nWBbW2Smj2CMeRJg71bZ7uVEpdsQhNQuXY=
Subject key identifier: 9E:08:C8:A2:AA:A4:61:BA:AA:43:26:C8:4E:EC:D1:53:19:5C:9F:4F
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Certificate issuer: /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial: 278F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
Manifest number: 2740
Signing time: Wed 28 Oct 2026 15:41:13 +0000
Manifest this update: Wed 28 Oct 2026 15:41:13 +0000
Manifest next update: Wed 04 Nov 2026 15:41:13 +0000
Files and hashes: 1: wcRvxKcZaeWFBKc01JBKe9L_BUM.crl (hash: ERyjdrJC+RdWHkwOnxDWr/kcsWO7Y1dvZC56stIP3b0=)
2: E7B633AABB1111F1910A51D86211F970.roa (hash: f3MM7jUH2mei3SwI3jPzIoq5z5L+5zWNIG3DuxRGOZw=)
3: 62ECC3BAA50311F1837970963211F970.roa (hash: OsqWtGsk5yaQ7MLtQOaVKyu/ZYYQuyY5bEBsO+I5kb8=)
4: D12CC256A5F011F1A34023553E11F970.roa (hash: pSUbkfXFck/jPE3kJOp36sul2ZkNhVQSncLCkFu7R+Y=)
5: 17EC9B8AB18B11F1B198EBDF6911F970.roa (hash: Wm/+KvW7BYvppPw9yKSV8+WE9nUR1tD6vS1t41CpcV8=)
6: ACDC884E1C1511EF93C5F728C4F9AE02.roa (hash: tV5F8hmOrgJTaFpw324B4L93JaBRIRLntkgGN1twqeI=)
7: 2AB59F90B32B11F18709B4406B11F970.roa (hash: clvnbHXIKELJptfVK6hqDlF+vZurzpLAxjAzDVUqsa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 15:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10127 (0x278f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Validity
Not Before: Oct 28 15:41:13 2026 GMT
Not After : Nov 4 15:41:13 2026 GMT
Subject: CN=6ae21799-aca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:49:04:f9:71:e5:de:57:2c:aa:71:24:a3:eb:
8d:f0:e7:6a:39:45:0a:30:ca:b4:65:3b:88:43:bc:
c4:ac:65:c3:76:d9:2c:9a:1c:f4:e8:6d:b6:58:8b:
f3:92:f4:d2:ed:61:d8:6a:b3:1e:60:08:50:47:27:
78:27:2e:d5:f6:13:e0:28:b3:1f:1b:a0:cc:75:54:
2a:02:d6:46:13:f7:26:b9:1d:2d:c7:3c:d6:6b:c0:
ca:fc:ed:17:69:a1:91:79:4e:3c:d0:c9:02:29:3d:
b0:51:f1:5d:45:ae:bb:73:84:c2:7b:03:83:82:cd:
0f:f6:eb:35:c4:76:56:6d:ad:d0:1d:2d:01:2d:3e:
5e:7a:f2:ad:ad:e3:9a:26:d3:48:30:e7:42:7d:4f:
6f:fa:af:bf:f0:06:85:db:6c:04:1d:cb:18:63:69:
06:6c:11:d1:d5:7f:e6:0e:65:8c:5b:16:98:f1:a1:
64:38:b6:aa:82:3c:76:f8:1f:81:40:aa:17:b9:8f:
ac:1d:42:20:ed:48:43:38:23:04:e2:02:25:ff:4e:
cb:90:80:3e:67:26:12:88:7e:fb:67:7b:c4:56:46:
29:90:1e:35:77:00:97:41:79:3e:f9:ee:d7:e0:52:
d7:d5:72:a2:77:5c:18:f5:a5:18:5a:0e:08:42:d4:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:08:C8:A2:AA:A4:61:BA:AA:43:26:C8:4E:EC:D1:53:19:5C:9F:4F
X509v3 Authority Key Identifier:
keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:7a:ed:e4:13:24:4e:5a:dd:c2:43:bd:1b:d2:16:a5:91:1f:
e9:1a:3e:f9:9d:78:38:53:7f:b4:ec:67:2d:2e:8d:a4:c1:89:
07:e2:5b:56:0c:24:34:7a:b0:f1:8a:20:e9:f3:a9:3f:13:85:
0d:a9:3e:2e:32:2b:ef:9e:4a:e4:37:9c:27:72:c0:6d:07:87:
e3:86:15:57:a4:64:7d:20:e0:91:53:7e:19:b6:49:9c:bf:a4:
61:3a:7f:c8:21:65:f3:78:54:d6:cc:c1:8a:f3:52:da:46:c1:
bd:fe:32:da:e0:60:20:55:63:7d:3f:98:b7:0d:74:4f:b8:54:
43:52:5e:fc:ca:4f:60:ba:b7:6b:45:23:d9:f9:ed:d6:0f:1a:
e2:08:7a:07:24:91:58:12:09:4c:5b:76:81:01:88:5a:0d:67:
cf:31:45:25:50:77:cb:73:82:c8:f1:8c:18:a0:4c:6d:7e:d4:
c7:f2:e5:e0:ac:7a:79:c4:0b:05:bb:9c:1f:7d:e5:1d:50:13:
20:de:d4:bd:0e:5f:45:65:62:e1:98:f0:07:5f:8f:57:dc:30:
2b:d1:2b:a4:10:e8:51:6b:b5:b6:45:8d:17:d3:ce:df:08:99:
72:07:ab:0f:3f:d4:47:c2:f6:3d:55:1c:3d:3a:c9:6a:fe:b8:
7e:d7:4c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 06:41:26 2026 by rpki-client