
$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier: zOw683GChir1zg9zTdAZAkW/d7MpQEyWDNoL3q6P7rM=
Subject key identifier: C3:09:8C:8F:FB:02:10:9B:63:C0:0B:0F:E8:2D:2A:01:DE:5E:46:86
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial: 1870
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number: 1833
Signing time: Mon 20 Jul 2026 16:39:06 +0000
Manifest this update: Mon 20 Jul 2026 16:39:05 +0000
Manifest next update: Mon 27 Jul 2026 16:39:05 +0000
Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: BNjx7Mt6jjDqspn9KXPqrU1wIBQQS49YaqAn3QNFI4U=)
2: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: t9gfSRrRBhg5aKee6bLsa2HCvO/wXMYsjYUGDi3D7i0=)
3: 047C0BCC373211F1887E264A90833773.roa (hash: LWhnCQp9VfJYhsJdhzflBR7RBHFtlmggsyH3Tj4cj0M=)
4: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: n1u9iSyb9bdQc1QOK/WYlhLEbmOoYxOlffVDVXq1fW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:39:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6256 (0x1870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Validity
Not Before: Jul 20 16:39:05 2026 GMT
Not After : Jul 27 16:39:05 2026 GMT
Subject: CN=6a5e4f2a-47b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:37:17:de:5c:f8:1b:df:5e:89:77:c8:55:
e7:6f:fe:4a:24:ab:2a:56:20:58:39:c8:90:e9:5b:
ea:5d:49:62:60:52:ce:19:4d:7c:12:47:46:6a:67:
fb:3c:49:5b:dc:7c:26:46:52:97:0e:08:9d:e8:f2:
98:09:49:49:2c:f5:e7:84:98:4a:5d:ec:66:33:09:
b1:b1:41:02:5d:4a:39:ab:b3:ae:10:7a:dc:60:df:
23:1e:03:f2:d6:c3:5b:20:19:ef:9a:c9:4b:4f:4b:
a0:0d:51:16:c7:4c:d3:67:0b:7f:58:e7:9e:00:6f:
58:57:35:05:75:06:da:a3:02:36:e8:8b:64:98:c4:
db:03:a1:b4:4c:a0:21:d4:43:48:74:f5:ef:0a:8e:
c3:22:42:f2:86:31:9b:cb:d1:47:0c:54:ef:5b:41:
81:22:80:23:e7:c2:d8:fc:19:c6:ca:7b:9f:3a:ad:
19:59:3a:69:fe:43:30:aa:71:45:d9:a6:61:94:12:
39:d9:02:14:54:97:0e:88:52:7f:05:dc:22:53:54:
2a:07:e1:5e:18:71:2d:23:5d:1e:6e:15:52:d8:5c:
30:d5:ce:9d:0e:8f:8e:3b:f5:b1:39:fc:23:2f:8f:
17:09:c7:1f:ed:a9:d3:cf:e5:f9:50:03:a1:b7:c1:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:09:8C:8F:FB:02:10:9B:63:C0:0B:0F:E8:2D:2A:01:DE:5E:46:86
X509v3 Authority Key Identifier:
keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ee:08:00:8b:3f:56:67:49:d0:91:9c:86:e4:a4:15:0f:b2:
a2:ef:d9:69:42:e9:a9:77:11:e0:1d:9b:97:2e:80:4f:68:56:
b7:e3:cd:65:58:0f:b7:1d:a5:ea:3a:5c:5c:d7:06:7b:db:d6:
d9:15:6a:9c:e2:07:dc:5d:0c:5d:e4:2d:b1:1d:92:1f:35:ed:
20:24:5e:3d:d1:d3:e9:ef:20:e8:00:28:3d:53:1a:6b:fa:77:
84:41:45:74:83:64:35:3a:e0:31:4a:0a:3a:0d:c2:33:ed:7f:
4d:b4:18:c8:24:e3:cf:0d:d5:b2:00:7b:fd:7a:fc:af:5d:34:
15:05:db:1c:5b:82:ab:e4:ad:7d:fc:77:42:54:10:81:86:05:
7e:dd:0c:7b:c4:e3:a4:69:17:65:6e:cd:86:62:c0:c2:6c:76:
95:c1:ec:4a:2e:4e:fe:bf:82:47:1c:fc:68:6b:a3:f3:ed:d4:
e4:74:4c:4c:1a:26:ab:78:b5:83:26:49:83:be:db:3b:47:07:
88:7b:ea:b8:4d:9c:c2:5e:15:e3:ae:e9:ce:ce:03:03:39:3c:
2c:10:13:b0:8e:f6:5b:cf:0b:29:88:bb:6a:ce:e6:bd:f0:5e:
5c:93:f1:1b:18:9c:b0:c9:59:e6:57:19:f5:7a:29:eb:02:ee:
77:b3:16:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:56:39 2026 by rpki-client