
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft
File: WfcM8WVJPKOohcgfFJYqhNv7-do.mft (raw, json)
Hash identifier: tkx7WKksZ7zd8za/fQEACxChtuvlwtNkbs7K6YReBZI=
Subject key identifier: 0B:76:72:50:F3:48:20:03:08:5C:8C:91:04:E5:FE:20:AC:7B:F5:D0
Authority key identifier: 59:F7:0C:F1:65:49:3C:A3:A8:85:C8:1F:14:96:2A:84:DB:FB:F9:DA
Certificate issuer: /CN=A917F9C3/serialNumber=59F70CF165493CA3A885C81F14962A84DBFBF9DA
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfcM8WVJPKOohcgfFJYqhNv7-do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft
Manifest number: 37
Signing time: Sun 23 Aug 2026 08:13:45 +0000
Manifest this update: Sun 23 Aug 2026 08:13:45 +0000
Manifest next update: Sun 30 Aug 2026 08:13:45 +0000
Files and hashes: 1: WfcM8WVJPKOohcgfFJYqhNv7-do.crl (hash: ctOp7mNvoAwSeONzr/pk3JazKRjd2aXNbHxJEwLrs2s=)
2: 6BD47C4C4AB911F18A4D3DF6BB833773.roa (hash: ebv4da5ihfjLA6qrd11hFHVIha6XG9+Q5KSSUG/SzsI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.crl
rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfcM8WVJPKOohcgfFJYqhNv7-do.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 30 Aug 2026 08:13:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F9C3, serialNumber=59F70CF165493CA3A885C81F14962A84DBFBF9DA
Validity
Not Before: Aug 23 08:13:45 2026 GMT
Not After : Aug 30 08:13:45 2026 GMT
Subject: CN=6a8aabb9-74b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:68:0e:d6:e5:1f:f0:0c:78:82:c2:a9:d9:
d8:bc:ec:39:14:46:d5:93:17:63:35:d1:d6:54:a3:
15:b6:f8:71:7b:c8:40:ca:e8:79:ba:12:b5:bc:fd:
1f:da:79:6b:26:ff:4f:53:ad:31:6f:44:6a:68:4d:
55:78:a5:b1:34:71:7f:c6:25:42:21:c0:4e:a9:66:
78:0a:cc:aa:c1:7d:24:25:fe:e7:11:04:19:f2:dc:
e1:30:62:da:29:85:35:1b:b6:53:f4:c3:58:47:57:
01:ee:08:93:70:30:3e:37:fe:d9:b0:00:d2:66:c9:
ac:6a:e4:96:74:a3:ce:17:f2:9e:46:ce:c6:f7:3f:
d1:03:31:c8:88:10:96:f0:09:cf:c6:07:dc:fd:bd:
c8:7f:8e:ee:81:31:9a:98:fa:00:e2:d1:64:1f:6d:
0e:4c:11:d2:d5:cb:1f:0d:9e:50:fb:54:c9:ba:6b:
ff:7d:76:95:a9:89:cc:91:47:23:e9:4c:8a:d4:63:
6b:a5:bd:36:f0:fc:a6:7b:41:18:63:b6:9c:72:f4:
dc:ee:7f:99:dc:e8:4d:0f:d0:db:e8:1e:71:ae:0d:
25:e2:bc:d8:46:38:c2:90:40:5e:0f:7c:99:b9:f8:
d9:b8:29:ab:37:85:b2:a3:d5:df:07:2a:b8:42:6f:
00:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:76:72:50:F3:48:20:03:08:5C:8C:91:04:E5:FE:20:AC:7B:F5:D0
X509v3 Authority Key Identifier:
keyid:59:F7:0C:F1:65:49:3C:A3:A8:85:C8:1F:14:96:2A:84:DB:FB:F9:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfcM8WVJPKOohcgfFJYqhNv7-do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:23:f9:71:2f:8e:f2:33:4e:d5:08:a5:a6:20:26:e7:f5:eb:
1b:e0:c9:e3:81:a4:d4:56:d2:58:1c:1b:40:89:4d:76:6e:6a:
7e:a2:b3:0b:8a:10:f0:25:46:a8:eb:c2:3c:2f:c1:f4:eb:bc:
33:39:dd:55:78:59:cc:93:66:e7:30:e3:e4:7a:8c:c2:a3:c6:
ac:34:19:72:72:1d:de:b3:ec:84:22:ae:77:c0:be:1f:d6:03:
0a:25:05:ce:53:82:c5:62:72:e8:30:7b:06:81:7b:c2:71:59:
56:59:0b:1c:03:42:ac:c7:a9:e3:2a:64:31:32:ea:27:3e:89:
e7:f4:a6:1a:7e:fd:e1:5c:2d:1c:f0:ee:2e:9f:87:c8:ac:9c:
cb:76:e4:c6:62:c9:46:2f:1b:6e:38:c1:e8:e7:d7:ea:b7:db:
28:35:43:83:fe:dc:a2:ee:4a:f4:63:fc:77:2f:4a:fc:24:98:
01:71:fc:33:3f:84:fd:3e:49:f9:40:ac:a3:98:fc:de:7a:19:
73:3b:f3:6b:34:d3:9b:79:e8:51:8a:71:8f:58:bc:31:19:51:
45:9a:4c:c7:be:6b:62:6c:9c:04:ab:5c:e9:cd:1d:4b:fb:6d:
b4:85:18:08:32:90:6c:3d:af:f3:78:95:e6:dc:df:77:69:14:
5f:d9:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 00:59:23 2026 by rpki-client