
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json)
Hash identifier: +qDQwqZ4OoUvBAhaAJnV69QCheUP3z3NSgUCMfbPJAU=
Subject key identifier: FB:93:20:77:45:EB:EF:3C:8E:20:E9:5B:C5:3F:D0:22:C6:DF:E3:7C
Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Certificate serial: 0D0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
Manifest number: 0CBF
Signing time: Sun 26 Apr 2026 18:21:56 +0000
Manifest this update: Sun 26 Apr 2026 18:21:55 +0000
Manifest next update: Sun 03 May 2026 18:21:55 +0000
Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: /y8rvW5vbkZKDfCmXg5afg1iFDfhLr6I0yYryziiOHI=)
2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: EvFkN9ZYuEFDBnjNtq9mVeqEYzT9yDvOX5AijaVncLY=)
3: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: AHwHR5P2unOzFbZF5/kMyWr9jBEmZP7l5z9TXIMdKwk=)
4: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: ljKSat9M5iVgEMjN0irLGI7aCNi5tcJLeC8QiDxfwJM=)
5: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: 3FuLmxDCD+MP2E5xN50Lj/x322ZG9I8Yf6S6pBk1v9I=)
6: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: AHjXiMIEVnSzV4RLfQ08q+VyTYzKnjva9QjgZk6PmpU=)
7: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: 9QLph5XKLgZKwZp92nb4WN3QSXDopmzK9+Xmf9Dp/gQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 18:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3341 (0xd0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Validity
Not Before: Apr 26 18:21:55 2026 GMT
Not After : May 3 18:21:55 2026 GMT
Subject: CN=69ee57c3-7b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:16:65:19:13:ea:c1:6e:b7:e0:a5:27:37:
0a:12:3a:86:14:45:90:be:d9:41:8f:61:e1:97:20:
4a:ef:59:48:5c:51:77:9e:44:bc:10:63:11:54:d9:
6e:b9:ea:7a:9c:27:b8:10:21:e0:28:a9:1c:ee:86:
8a:7d:2d:d0:4d:6d:82:8e:71:dc:4d:f9:4f:7d:96:
6c:e9:ad:74:36:8d:8f:ee:7b:5c:7f:57:38:1c:99:
3a:d5:f4:5b:f5:4a:32:3b:8d:f9:ed:0d:4f:a1:57:
6f:54:59:52:d4:6b:83:45:6a:da:dc:bc:6e:42:be:
39:84:2a:5f:31:26:60:5c:e9:4b:a8:5c:a3:57:5a:
05:f8:08:05:8d:a1:1f:51:86:0f:73:20:ed:78:53:
c2:05:ed:8b:b9:08:8f:57:1f:70:e0:69:36:1d:d5:
cc:df:e9:c4:5d:ed:6b:ea:cc:2f:07:c9:b0:c2:15:
57:8e:a1:a6:22:f4:62:0c:aa:ed:c8:b5:30:96:ec:
a4:f9:37:cc:f5:bc:dd:29:c9:16:90:b1:97:b7:5c:
e4:07:e8:5b:5a:1e:c9:17:f4:d6:91:c2:7e:b5:2d:
2f:46:49:f6:c0:d7:82:63:01:2c:b4:d5:cb:55:cf:
f8:0d:eb:9d:23:08:3c:85:b8:fc:08:2a:1f:4a:ed:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:93:20:77:45:EB:EF:3C:8E:20:E9:5B:C5:3F:D0:22:C6:DF:E3:7C
X509v3 Authority Key Identifier:
keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:91:74:d1:9a:f4:f7:94:0d:ee:7e:77:e0:bf:9a:0d:96:6d:
46:c8:ae:c1:5f:56:30:fb:25:3c:e0:d1:c2:42:ea:43:e1:82:
fb:98:a9:3d:3e:9c:e2:97:1d:de:ba:d4:0d:b2:c7:5c:91:d9:
37:34:63:af:ed:1e:2a:75:09:b5:53:70:06:cc:41:0e:8c:53:
48:a4:47:0a:1d:56:f3:d5:8c:3e:85:0c:55:5e:60:1e:25:a8:
c2:bf:77:2b:9e:63:67:41:03:c9:a0:e3:28:b9:05:66:76:30:
7c:b0:88:0e:f2:68:29:46:fa:cf:c7:42:67:69:9a:4c:a2:a4:
d9:66:12:e9:3a:92:fb:ba:d4:ca:66:89:f5:49:fc:7a:78:d7:
5a:7c:ea:cd:44:78:86:ee:db:96:57:fb:57:1e:9c:aa:8a:c4:
52:e2:14:05:1d:1c:94:fe:2f:da:36:ff:ef:40:68:1a:3e:9c:
09:ee:54:b6:a3:bb:39:10:a8:75:15:e5:c8:a4:ec:40:85:c1:
11:8d:cb:0b:f9:8f:d1:b3:d4:49:07:a1:ad:64:c9:60:6e:a8:
22:fd:61:da:24:61:94:5e:9d:76:ca:c8:a3:36:3b:8e:f5:81:
ff:f8:9a:06:5a:01:a5:c1:ca:43:16:67:11:a7:86:8e:bd:db:
a2:6e:5f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:20 2026 by rpki-client