
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json)
Hash identifier: jJpVn6l7QgCmOHCbCUItuTn2JGBuNCdIu2gThYagiFA=
Subject key identifier: 95:C4:38:D6:06:54:08:C6:A8:20:E9:28:93:E2:CC:39:48:82:7E:CC
Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Certificate serial: 0D3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
Manifest number: 0CED
Signing time: Sun 26 Jul 2026 18:42:40 +0000
Manifest this update: Sun 26 Jul 2026 18:42:39 +0000
Manifest next update: Sun 02 Aug 2026 18:42:39 +0000
Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: 1cuhFTaWUXBXbrhu52j90jKRQ5/PLZnin7grA6gX5Gg=)
2: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: 3FuLmxDCD+MP2E5xN50Lj/x322ZG9I8Yf6S6pBk1v9I=)
3: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: EvFkN9ZYuEFDBnjNtq9mVeqEYzT9yDvOX5AijaVncLY=)
4: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: ljKSat9M5iVgEMjN0irLGI7aCNi5tcJLeC8QiDxfwJM=)
5: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: AHjXiMIEVnSzV4RLfQ08q+VyTYzKnjva9QjgZk6PmpU=)
6: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: 9QLph5XKLgZKwZp92nb4WN3QSXDopmzK9+Xmf9Dp/gQ=)
7: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: AHwHR5P2unOzFbZF5/kMyWr9jBEmZP7l5z9TXIMdKwk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3387 (0xd3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Validity
Not Before: Jul 26 18:42:39 2026 GMT
Not After : Aug 2 18:42:39 2026 GMT
Subject: CN=6a665520-41a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:06:da:92:66:11:44:e1:63:32:dc:f8:d5:
ff:75:4e:df:9c:c3:b7:a7:4e:06:9b:5d:dc:af:c4:
15:86:37:e8:e6:90:a9:a0:2c:28:28:8b:52:f7:c0:
e3:0b:33:18:92:0a:a4:a4:5d:be:83:6e:70:c5:6c:
9b:1a:a2:bc:d1:83:44:11:46:79:a8:1c:a8:1d:ae:
13:6b:ed:7f:49:72:50:71:91:8f:22:60:b1:6b:94:
ae:98:25:9d:5f:f6:32:f5:22:8c:1e:c3:7b:d3:6d:
cd:bf:29:ad:66:f7:e9:cc:50:a2:9e:c4:f1:72:6a:
af:c7:30:c2:f7:77:29:79:e0:be:13:3c:3e:38:cb:
77:e1:ec:86:16:23:ed:8a:1b:f3:b6:a5:aa:f1:8f:
b7:e4:7f:92:36:5e:bb:3f:b3:5a:d6:40:e9:63:cb:
90:7d:48:24:79:c3:86:33:e5:ba:83:f0:8a:4d:46:
32:41:9f:e9:98:c1:e0:1d:a1:91:df:46:1b:3a:a0:
0b:e1:47:0c:ef:57:53:01:9e:8c:af:81:08:44:bf:
01:b0:01:04:f3:37:86:1b:b7:19:17:3f:89:96:ac:
21:84:c1:4b:9a:a8:77:62:6c:28:38:99:4f:20:00:
95:8a:c5:a2:f1:35:6b:bf:47:89:d7:dd:6e:38:7f:
92:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C4:38:D6:06:54:08:C6:A8:20:E9:28:93:E2:CC:39:48:82:7E:CC
X509v3 Authority Key Identifier:
keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:df:3e:e8:90:34:2c:c3:95:e9:bc:51:8a:c5:75:13:6d:ab:
aa:b6:b7:0d:5b:05:0b:05:06:d9:de:a3:33:22:ea:aa:93:ed:
d5:9e:35:29:47:4b:a2:c3:5e:3f:2f:fd:04:3c:25:05:08:49:
d7:55:49:2e:9a:9c:f4:e1:11:cb:01:96:72:1d:ae:5d:28:64:
c4:b2:82:72:a2:85:0b:ce:f2:96:0d:aa:0a:52:ce:24:aa:c9:
44:2c:8e:92:a2:7d:ba:33:f0:ce:64:0b:33:d8:dd:e6:4a:9c:
7b:26:25:e3:b7:91:bf:48:4a:03:3d:ca:a3:2a:74:80:c1:a6:
26:fa:03:b4:e0:51:2d:a7:32:02:f1:02:13:a9:e9:96:ae:43:
6f:1c:c3:de:4d:ef:5b:27:e1:44:d2:61:75:83:43:fe:39:99:
c2:7a:1e:10:47:2a:13:30:0c:62:8c:3f:33:57:9f:b0:55:c1:
cc:f9:6b:c0:c7:6b:42:78:e9:7f:34:53:e5:f0:72:d6:a1:62:
bf:df:d6:bd:eb:1d:8e:97:1e:26:51:90:a6:96:0c:6a:c3:39:
45:47:ac:c5:91:f3:e9:97:11:bf:76:a5:6e:97:63:24:aa:11:
97:ee:43:c8:b8:a6:51:cf:82:d7:88:8e:9c:f8:b5:55:c9:52:
fa:eb:84:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:15:35 2026 by rpki-client