
$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
File: wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json)
Hash identifier: bKg5anv+caqW8WZfSwmohzH6Nc7WdCs0vfJhgn6DqO8=
Subject key identifier: 82:1E:27:EC:D6:7E:8A:12:EF:C3:41:77:E9:38:C1:D2:D5:62:A2:00
Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD
Certificate issuer: /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
Manifest number: 0189
Signing time: Sun 05 Jul 2026 05:01:43 +0000
Manifest this update: Sun 05 Jul 2026 05:01:43 +0000
Manifest next update: Sun 12 Jul 2026 05:01:43 +0000
Files and hashes: 1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: EgfvYCMFXUH+l6gePYThxVGOQGZ3CshEe24Acgrc0Cw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl
rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91653D3, serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD
Validity
Not Before: Jul 5 05:01:43 2026 GMT
Not After : Jul 12 05:01:43 2026 GMT
Subject: CN=6a49e537-76d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:10:c4:70:3b:4a:12:29:d3:a1:26:fb:bb:e1:
33:af:9d:86:c1:1a:e9:d4:bb:45:e4:81:39:49:64:
be:d9:96:d7:39:c5:a3:b3:f5:13:f3:39:d3:5e:f7:
e4:c4:83:64:01:f8:a7:74:b7:e2:d5:b5:2a:0a:93:
ba:35:0a:75:9b:3a:32:00:e5:23:93:e6:25:17:e2:
2a:08:cc:5f:95:a9:63:9e:b1:81:45:7c:ec:e0:46:
2a:42:ab:1e:89:0b:0a:e8:23:47:16:32:a5:6f:34:
8a:ef:16:a0:c2:f3:0d:8c:9b:8a:cc:cd:79:67:21:
33:f7:89:31:ab:4c:b9:18:85:6b:b5:60:86:f5:a7:
f9:f7:46:ad:b8:9e:e1:a7:5c:c8:56:09:81:33:a7:
c7:47:f5:3c:f7:7f:d0:cd:6f:bf:a6:a7:b8:33:e9:
8f:9a:9c:6a:5d:37:3c:4b:b2:6a:3f:c0:f0:af:90:
dc:ea:c1:49:7d:c5:82:a6:4a:22:72:0d:25:80:8b:
24:77:db:52:26:44:0c:36:ba:12:db:38:1a:6a:71:
99:23:71:35:ff:12:9c:2e:b4:ce:40:81:4d:c1:18:
34:87:6e:24:1e:41:43:b5:d9:2f:9f:6c:8b:60:ac:
fa:1d:06:db:ba:ed:78:ca:52:49:7d:96:13:79:89:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1E:27:EC:D6:7E:8A:12:EF:C3:41:77:E9:38:C1:D2:D5:62:A2:00
X509v3 Authority Key Identifier:
keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:0f:13:bb:31:e3:20:aa:cc:61:c7:62:ae:7b:e9:6c:42:c2:
e8:bb:6d:8e:cb:18:e8:3a:c9:74:ae:b1:bc:7e:97:72:08:e6:
d1:ae:5f:5f:7d:d0:04:a5:0a:6b:ec:96:a9:7f:19:61:77:a7:
41:ba:c5:d4:e2:05:b0:7c:19:30:8c:7e:a8:36:6a:23:9a:f9:
e3:ce:ed:da:46:21:d2:21:56:52:40:6f:b6:7b:c4:22:a7:68:
e6:fb:fc:8e:1d:cb:f3:fa:12:b1:9e:e9:b5:74:b6:32:d2:f0:
af:91:f6:ba:25:ab:11:d6:83:aa:d6:44:b1:f7:75:11:a4:2f:
a4:9a:d0:24:1e:79:fa:c1:83:9c:8b:a6:c1:f6:51:83:d0:9b:
45:46:5e:51:6d:fb:9c:5d:92:ec:08:9f:9a:b7:7d:9f:d7:d7:
aa:38:1e:e5:42:5c:a5:d1:dc:3b:f7:2e:8e:a9:78:f6:b4:e4:
e6:87:60:69:88:c0:6c:9c:e8:fe:3e:b5:7d:9a:a7:b2:c6:c9:
19:c7:7a:5e:3e:e5:c4:21:77:5f:27:48:00:f9:56:58:82:52:
ef:9b:d2:e1:35:d6:4e:f2:f5:7f:6c:25:84:95:a9:74:31:ae:
ec:a8:0f:ea:07:25:35:d3:ad:cc:e4:7d:9f:17:09:0c:20:e7:
36:f4:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:43:33 2026 by rpki-client