
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
File: WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft (raw, json)
Hash identifier: nJEAKbMHuk2oLCiorqa7UZYo/Zp8ZFYd8Tr0ZDJSDCc=
Subject key identifier: CF:E0:DF:B9:36:8F:08:C1:EE:07:90:85:BD:BF:FE:5A:6D:1E:26:E0
Authority key identifier: 58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24
Certificate issuer: /CN=A91A1366/serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
Manifest number: 10
Signing time: Tue 19 May 2026 08:58:11 +0000
Manifest this update: Tue 19 May 2026 08:58:11 +0000
Manifest next update: Tue 26 May 2026 08:58:11 +0000
Files and hashes: 1: WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl (hash: 3d/5VyTf3OKTUZZK6W8tD+4fxCYLE9EZfug15yNvsXM=)
2: 9DE21B78534111F196833CCBCD833773.roa (hash: iWhECy1x9/z+pNHrmbB47ZpXN/6JBvmDD3uJXEz+FFU=)
3: 857B25F03EDF11F1939FAF8DB6833773.roa (hash: hrTGcT4S/oECSZNAnaIaPC0x5VQUPpGmV9BjkauiTgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl
rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1366, serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
Validity
Not Before: May 19 08:58:11 2026 GMT
Not After : May 26 08:58:11 2026 GMT
Subject: CN=6a0c2623-0d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:1a:01:cf:41:b1:f7:e9:7f:a5:45:b4:03:
75:b1:28:a0:bc:d5:24:2e:2a:ba:4b:db:6d:69:b3:
aa:73:e9:64:19:23:89:ed:1f:c3:90:41:9a:cf:d0:
28:6e:ed:f2:6b:49:d3:81:17:2d:b3:e8:19:61:07:
3f:a8:60:a8:17:ad:4e:a8:bc:df:53:25:b0:80:03:
92:77:53:8c:33:b2:5d:c5:6c:2c:a3:63:67:b4:3d:
af:67:1e:52:6b:b5:0b:7e:e2:3b:74:c3:f0:c4:43:
36:db:d2:9b:a7:cb:9a:ea:61:cf:0c:f0:26:4f:e0:
e1:37:b8:53:e4:62:7c:29:91:14:32:15:1b:9f:d1:
29:6a:72:3d:fd:67:17:73:eb:52:42:1b:8a:c7:a7:
f1:e1:04:bc:99:56:3a:07:cc:18:ba:28:7b:0f:19:
c1:75:b6:c4:38:44:61:8f:1b:69:4e:1e:e8:4a:8d:
58:84:ca:f0:cb:45:90:fc:dc:e2:4c:a0:b1:e5:52:
0c:b0:9c:75:fe:72:1a:37:95:19:7e:b5:e4:7a:68:
81:3f:61:d2:04:ed:37:96:47:a9:e3:c1:d2:04:4f:
10:72:eb:54:08:03:c1:69:e7:8a:a9:a2:30:90:71:
b8:b1:57:90:62:0d:4b:1f:fb:dc:69:75:5b:fd:65:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E0:DF:B9:36:8F:08:C1:EE:07:90:85:BD:BF:FE:5A:6D:1E:26:E0
X509v3 Authority Key Identifier:
keyid:58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:f0:12:e6:d5:8b:95:a8:3b:9f:93:7b:32:1b:dd:d9:e9:87:
f0:8a:54:d9:6d:98:ce:ff:2a:be:2d:8f:5c:17:1f:76:82:8e:
2d:cb:91:45:63:bc:ee:19:b0:a3:dd:97:48:17:90:bb:78:af:
20:fd:bb:43:fe:be:59:05:12:20:ea:f1:13:c8:39:27:ff:2c:
52:a3:31:7d:a5:5a:21:a8:43:63:40:9a:31:49:78:d8:4d:c2:
d2:7b:5e:0a:79:d4:ff:09:44:f4:f2:96:8e:60:87:95:ec:f7:
46:71:c2:af:f1:11:7f:61:dd:25:26:9b:0d:11:77:9a:d9:6b:
4d:28:c0:da:70:19:1f:9f:d2:19:34:99:8e:5a:34:e1:2c:af:
32:24:67:ba:e7:fe:f0:8b:f6:24:5e:8e:f4:df:42:26:1f:5e:
73:46:bd:7d:1f:fd:50:e3:44:6e:dc:2c:d3:b9:96:49:d2:25:
06:1c:a2:17:ac:25:ea:ef:95:2a:d9:a1:bc:7c:e9:fc:f9:ab:
03:8c:ee:ef:1e:4b:2d:e7:a2:0e:b7:60:4f:cc:2e:0f:eb:f0:
0f:73:9b:a0:65:49:0c:93:06:b2:e4:eb:5a:3e:d0:c0:a8:c3:
5b:04:94:8d:33:79:cb:61:2d:7c:78:6a:00:15:f5:25:d0:12:
17:53:f0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:27 2026 by rpki-client