
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
File: WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json)
Hash identifier: UzeXMdDgoxAQCIL5vnfg12EnppX44Su1EnoCISuPpEE=
Subject key identifier: FA:19:81:D0:AA:2E:B0:D1:CF:FD:FC:86:84:FA:82:4C:2A:78:C7:F8
Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
Certificate issuer: /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Certificate serial: 07CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
Manifest number: 2DA3
Signing time: Thu 08 Oct 2026 15:42:28 +0000
Manifest this update: Thu 08 Oct 2026 15:42:27 +0000
Manifest next update: Thu 15 Oct 2026 15:42:27 +0000
Files and hashes: 1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: WAIaDZ7FfimIu2hZSUDtZ9haW5SR5na9x7QnL7yzwKA=)
2: C7AE32F886EE11F19E006003A7EE528E.roa (hash: Iu+bax6wDIKs0ITGdOOsApp6bvsSxsdltknY3o3Rdtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1995 (0x7cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Validity
Not Before: Oct 8 15:42:27 2026 GMT
Not After : Oct 15 15:42:27 2026 GMT
Subject: CN=6ac7b9e3-7a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:11:63:30:22:d2:f0:0b:93:af:d5:2d:99:
a6:fc:2f:3a:17:97:6c:c6:ed:d2:4d:20:ff:f8:e5:
71:a4:4d:b9:2c:24:e6:d3:33:fb:9e:f1:48:0a:21:
ca:d6:b8:cb:15:b1:dd:81:7c:ef:2d:fb:d3:3e:a5:
96:79:88:ec:cc:9b:d0:eb:50:84:e5:4b:81:7d:d0:
5a:32:28:7f:16:69:83:2b:c7:5c:a7:68:3a:9b:a3:
8a:e1:75:56:ff:11:f5:54:b3:53:06:f2:28:7e:ff:
ba:a9:5c:0b:09:34:79:33:03:c6:af:c3:f6:94:24:
ee:0e:e0:fc:79:ef:76:3e:fb:30:18:cc:fa:98:78:
d4:49:77:51:1c:0c:fd:08:a8:a6:80:ac:38:89:ed:
74:b7:1a:d3:3b:c5:5d:50:e0:9f:0f:73:9b:8f:82:
d4:ea:e3:9e:33:b3:97:e8:44:9c:ca:7e:8d:59:eb:
fa:9c:d2:38:c4:8b:ed:0f:fc:5a:a6:c2:06:27:f2:
11:a1:37:fe:f4:dc:a2:17:2e:46:c9:33:31:e7:5a:
3a:fe:93:d7:e7:e3:14:e2:87:cb:b2:63:c6:95:7b:
a7:59:10:29:f3:8f:9a:2c:27:96:03:4b:9f:96:24:
de:be:35:ed:41:a0:0a:84:b4:32:d4:d4:39:e2:a8:
6f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:19:81:D0:AA:2E:B0:D1:CF:FD:FC:86:84:FA:82:4C:2A:78:C7:F8
X509v3 Authority Key Identifier:
keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:60:c3:e9:0b:47:e9:09:21:a7:d1:a4:a6:f5:b7:de:82:8e:
3b:ad:a8:9e:d8:82:1e:ca:64:29:87:2e:57:8b:ac:f8:e3:ac:
c6:ec:40:a7:1c:36:09:7c:ae:59:01:c8:0a:65:c2:b7:1a:3c:
2b:2d:df:fa:4a:b2:1a:be:d1:7f:5f:97:e5:22:f3:41:c8:4d:
15:6b:4b:ba:af:ba:9f:05:94:43:8f:8e:8b:08:1a:b7:2a:d7:
75:92:19:47:63:f1:a0:09:c0:31:b2:3c:01:38:7a:e5:cf:82:
13:88:d2:88:70:27:43:57:59:67:9f:39:de:58:f0:56:95:ea:
40:d9:5d:5e:7d:13:ba:0f:0e:a3:08:2c:c2:65:47:1c:4a:46:
7d:e3:a0:de:67:bd:e0:c2:7b:84:1f:f3:2e:f3:08:42:3d:79:
95:96:e2:ef:99:62:5f:49:bf:92:6c:12:d7:06:76:88:80:5d:
8a:31:2d:99:2b:18:ea:68:28:da:e7:ca:33:a9:c6:d0:0f:dd:
17:e2:b1:5b:ae:30:a7:e6:96:cd:05:50:9c:33:8d:29:e1:91:
66:d1:4b:8c:89:0e:01:ea:17:82:19:2a:6d:57:0a:5c:6f:23:
c8:1d:c5:00:fd:fc:38:8a:b5:13:1d:64:e9:48:f5:27:d4:b1:
b4:8b:1a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:40:57 2026 by rpki-client