
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
File: wtbHmmd8l-xwBjE76RZ-DeZspFI.mft (raw, json)
Hash identifier: tKndAraIYsG0OD0D2LvSbWhlVpW0jmQ0WVk+7hjEt4g=
Subject key identifier: 1A:33:B9:98:43:C8:06:B4:44:89:6A:CF:95:91:5A:66:BF:02:04:AF
Authority key identifier: C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52
Certificate issuer: /CN=A9192F5B/serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
Manifest number: C2
Signing time: Thu 29 Oct 2026 07:38:43 +0000
Manifest this update: Thu 29 Oct 2026 07:38:43 +0000
Manifest next update: Thu 05 Nov 2026 07:38:43 +0000
Files and hashes: 1: wtbHmmd8l-xwBjE76RZ-DeZspFI.crl (hash: 4s4FhTMEjxHd8x7xZlWljYmDn0gIcDce0xRzCj4uZtg=)
2: 4619B082F15C11F0A6B34B2B5F6F56BC.roa (hash: TM/bR3a8aAzEdS9047xbUVBGRvkOI8XThDLKWxFsYu4=)
3: 283AD1AEF15C11F092AE22215F6F56BC.roa (hash: iQT1BpKJwTgvvQmF8C+Try08CeS6YRGE1ESciKhbwPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl
rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 07:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192F5B, serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
Validity
Not Before: Oct 29 07:38:43 2026 GMT
Not After : Nov 5 07:38:43 2026 GMT
Subject: CN=6ae2f803-a925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:49:f6:1e:c9:6f:b0:a4:57:5b:05:65:7b:
85:d7:40:08:ca:8a:e1:10:45:95:05:ec:a0:f5:ee:
99:dd:2e:0c:e8:5f:f2:26:6d:4b:a8:a6:d7:c0:be:
db:f8:f4:4b:c1:12:4e:e0:b5:ec:bb:7b:2c:26:7a:
79:62:b7:4d:fb:c6:9c:e1:10:e8:69:45:ea:c6:2e:
13:f2:5a:99:53:2f:ce:e7:05:0d:b0:0f:b7:d7:35:
eb:2e:8f:06:b4:75:e8:51:f2:91:e1:b2:14:57:41:
25:dd:7a:5a:3b:d8:94:e8:2f:c7:2e:e2:9d:81:41:
1c:e0:51:f2:73:05:1a:f0:7c:a1:ba:9a:a3:fe:31:
2c:a0:31:f7:4f:2e:bd:35:43:97:af:eb:74:48:ee:
86:fd:54:2d:4d:76:34:10:40:d0:4a:20:37:a8:4f:
68:f9:ed:0c:34:31:50:a5:74:83:1b:03:e2:e9:35:
ee:42:bf:10:26:e7:b8:1e:8a:14:d6:0b:4f:f8:15:
39:a8:e2:74:ab:40:db:53:7b:4d:f0:45:49:46:61:
57:fb:c5:02:0e:6a:45:03:df:7c:8d:4a:cb:92:1b:
69:00:c2:90:b9:93:8f:b7:ed:eb:93:a3:16:ef:a4:
51:79:d1:d9:d5:b7:dd:e5:5f:10:38:ef:66:7d:74:
2f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:B9:98:43:C8:06:B4:44:89:6A:CF:95:91:5A:66:BF:02:04:AF
X509v3 Authority Key Identifier:
keyid:C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:3d:8b:55:f7:b9:d6:ba:c8:84:97:6b:9e:96:0c:7d:97:6c:
9b:20:f1:d5:45:29:41:3b:56:6f:d0:5c:e8:da:a1:19:cd:94:
31:14:9f:a7:67:cd:53:09:6e:55:fb:36:38:88:a5:44:41:e6:
cb:25:63:5b:64:cf:31:ee:cc:0f:6a:4f:56:04:50:2f:e5:cb:
14:67:a9:39:a3:28:07:f8:de:dd:76:b6:4d:ef:93:7f:03:56:
9f:d6:18:29:83:d5:51:66:46:d7:47:80:74:99:9b:3c:d0:0f:
f5:d6:e3:69:cd:82:e5:be:6d:68:d0:dc:48:bf:c7:7b:f8:38:
2a:fc:ac:c9:d4:a3:1c:a7:85:41:a3:f1:20:2a:dd:ca:04:19:
c6:5b:9c:45:a9:14:a7:80:82:d9:36:cc:fa:9b:0f:db:2a:bb:
2a:b8:31:5a:32:2e:71:e0:e6:91:1d:d5:c3:26:d5:e3:d6:a4:
f7:83:df:4b:ba:09:06:c5:45:7a:75:54:81:3f:33:62:d9:90:
de:d0:9f:b3:e8:85:2a:ea:9b:94:40:80:28:5b:69:32:fc:db:
67:17:98:cb:b5:f4:1c:f1:a3:66:93:57:3e:be:f0:29:4e:4f:
14:1b:5c:17:b3:9f:a1:33:88:d5:cf:26:6d:d2:a0:a3:5b:74:
32:4c:28:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:16:39 2026 by rpki-client