
$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
File: WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json)
Hash identifier: aCpYsrG3bCad7gnV6TPlvbxUpsswjPyqVrxEJ8EnwbE=
Subject key identifier: 32:12:FE:0D:CC:34:39:20:A6:A5:40:FF:C2:D2:D8:54:34:CF:BC:B7
Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8
Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8
Certificate serial: 0397
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
Manifest number: 0557
Signing time: Tue 23 Jun 2026 00:49:03 +0000
Manifest this update: Tue 23 Jun 2026 00:49:03 +0000
Manifest next update: Tue 30 Jun 2026 00:49:03 +0000
Files and hashes: 1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: iiDqHt7CDXVPEgwyCeKdLnHujof9YxTkjaquB5jDT7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl
rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 00:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 919 (0x397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91422D7, serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8
Validity
Not Before: Jun 23 00:49:03 2026 GMT
Not After : Jun 30 00:49:03 2026 GMT
Subject: CN=6a39d7ff-fd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:5a:13:43:ae:ed:98:94:fa:63:27:b6:d4:
6a:74:6c:cf:2a:bc:43:6a:7d:ee:f5:92:71:72:ec:
23:72:b0:d7:8c:c3:92:51:aa:6a:d5:af:4e:6d:18:
1d:be:d0:3c:2b:3a:c3:e5:a6:3d:82:6b:8b:ef:30:
33:02:fb:d3:7b:2d:0b:84:da:03:a0:ac:97:fa:29:
cc:6a:b4:d6:fd:2b:62:05:0b:ac:6b:3f:7a:97:d8:
5b:3c:c6:8b:3d:5d:7f:a2:0c:b1:9d:67:98:6d:82:
92:bb:df:b6:bb:ab:16:35:0f:db:99:95:1e:76:45:
6d:72:9b:be:16:c1:11:a5:27:39:94:bf:58:9d:07:
b1:c2:ae:37:f9:9f:ce:ce:d6:b4:8d:9d:66:ea:38:
11:77:ad:a0:15:74:2f:2d:26:c4:a6:d3:0a:0a:64:
e9:2e:26:72:b4:b1:58:66:ac:c2:53:c4:62:bd:eb:
c6:a0:c6:e9:3d:62:2e:cd:75:2e:e3:e6:a5:3d:8d:
27:d6:f3:76:cf:76:5a:c6:8f:2d:51:c8:1e:db:e4:
86:2e:d2:90:78:77:fd:27:a3:cd:c5:75:9a:de:e7:
9d:b9:1f:20:1a:40:d2:69:31:e7:bd:6d:5d:a3:8e:
b3:39:9c:dd:7e:e9:c0:d6:87:70:ee:cc:70:bc:75:
45:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:12:FE:0D:CC:34:39:20:A6:A5:40:FF:C2:D2:D8:54:34:CF:BC:B7
X509v3 Authority Key Identifier:
keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5c:3e:e7:9c:41:f4:43:1b:5e:fe:2a:bd:c9:7b:7c:15:78:
f3:03:77:61:62:6f:1c:b5:d7:a6:b8:e1:09:1e:45:80:97:df:
ce:8a:13:22:d3:f9:bb:77:14:d5:83:df:b8:47:26:66:f1:85:
3a:b1:46:7d:73:4b:be:23:06:cd:51:3e:b9:2e:25:69:b8:d7:
b4:aa:2f:ac:bb:7d:75:43:9e:b1:fe:4d:ab:19:f4:aa:1e:9a:
2a:97:97:a9:cf:11:a0:e4:fd:07:17:c8:8c:6e:84:34:12:f2:
c1:dd:b6:b1:18:87:23:58:08:c1:c8:24:e8:de:97:89:b2:8f:
be:2f:ae:f2:42:a9:1f:31:39:ad:bb:a0:56:28:5a:a1:61:a0:
69:fa:f6:4f:b9:25:a6:57:29:1f:c3:cc:25:2c:3f:7f:90:2f:
83:dc:e3:c4:6b:cd:42:43:4b:04:7c:40:69:b1:aa:96:95:8d:
dc:91:17:91:66:ea:ce:5f:26:24:96:4d:a1:e4:ad:b4:59:35:
08:f2:9e:db:b6:00:ef:20:7f:19:ae:69:b3:a9:27:e0:c2:b6:
f3:1d:51:a6:22:ea:12:7f:2b:26:7f:a0:8d:76:80:08:62:5a:
47:fa:c2:f9:1e:61:99:6f:d8:1c:77:e7:b5:5f:fb:75:11:26:
ab:ae:5b:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIyRDcxMTAvBgNVBAUTKDU5RDE5NzM1QUREQzZFODA4MDk3QUM3NzFCNDZCQjM3
NUJDMjMwRTgwHhcNMjYwNjIzMDA0OTAzWhcNMjYwNjMwMDA0OTAzWjAYMRYwFAYD
VQQDEw02YTM5ZDdmZi1mZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlaRaE0Ou7ZiU+mMnttRqdGzPKrxDan3u9ZJxcuwjcrDXjMOSUapq1a9ObRgd
vtA8KzrD5aY9gmuL7zAzAvvTey0LhNoDoKyX+inMarTW/StiBQusaz96l9hbPMaL
PV1/ogyxnWeYbYKSu9+2u6sWNQ/bmZUedkVtcpu+FsERpSc5lL9YnQexwq43+Z/O
zta0jZ1m6jgRd62gFXQvLSbEptMKCmTpLiZytLFYZqzCU8RivevGoMbpPWIuzXUu
4+alPY0n1vN2z3Zaxo8tUcge2+SGLtKQeHf9J6PNxXWa3ueduR8gGkDSaTHnvW1d
o46zOZzdfunA1odw7sxwvHVFAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDIS/g3M
NDkgpqVA/8LS2FQ0z7y3MB8GA1UdIwQYMBaAFFnRlzWt3G6AgJesdxtGuzdbwjDo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE
MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2JvQ0FsNngzRzBhN04xdkNN
T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dkR1hOYTNjYm9DQWw2eDNHMGE3TjF2Q01PZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2Jv
Q0FsNngzRzBhN04xdkNNT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAelw+55xB9EMbXv4qvcl7fBV48wN3YWJvHLXXprjhCR5FgJffzooTItP5u3cU
1YPfuEcmZvGFOrFGfXNLviMGzVE+uS4labjXtKovrLt9dUOesf5Nqxn0qh6aKpeX
qc8RoOT9BxfIjG6ENBLywd22sRiHI1gIwcgk6N6XibKPvi+u8kKpHzE5rbugViha
oWGgafr2T7klplcpH8PMJSw/f5Avg9zjxGvNQkNLBHxAabGqlpWN3JEXkWbqzl8m
JJZNoeSttFk1CPKe27YA7yB/Ga5ps6kn4MK28x1RpiLqEn8rJn+gjXaACGJaR/rC
+R5hmW/YHHfntV/7dREmq65bPA==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:31 2026 by rpki-client