
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
File: WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json)
Hash identifier: IPDyQ1tEGtuHKPZ0jlwbm7zR0GAdiOGhUVwFYENw1I4=
Subject key identifier: 75:43:37:94:52:D8:54:50:28:7A:A4:0A:C9:D5:E7:F2:FA:A9:56:DE
Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Certificate serial: 03AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
Manifest number: 0395
Signing time: Thu 11 Jun 2026 02:53:55 +0000
Manifest this update: Thu 11 Jun 2026 02:53:54 +0000
Manifest next update: Thu 18 Jun 2026 02:53:54 +0000
Files and hashes: 1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: EPBHHBfa472EINdj8KtXAHTXnZRkfSW3cQ1AstBTrwk=)
2: 8409527078B011EE8D737723C4F9AE02.roa (hash: S/EE8dzEnvlxDFYWVTl3pTW1+xiF5BVX2thc9vnDMAU=)
3: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: pAZV68jGjWuKWqhQJP5ckwM2V0tQYdqN4ZXDEqElElc=)
4: E15780AA32E111EFB163924BC4F9AE02.roa (hash: YJWEr2nrAdnP2NutE9Ms8r6Gtbwk3PCYEKG8MqYno4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Validity
Not Before: Jun 11 02:53:54 2026 GMT
Not After : Jun 18 02:53:54 2026 GMT
Subject: CN=6a2a2343-8ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:17:ca:89:e9:e8:23:57:73:66:ff:b8:e3:32:
d2:82:d5:42:f0:69:3a:a8:1c:3c:9e:81:c8:3c:83:
d5:27:3c:ad:c6:1f:58:cd:95:c1:fe:da:b3:a6:3c:
38:b7:0b:db:90:bf:f3:88:67:69:14:b1:94:f6:8d:
b4:68:52:16:7f:10:0d:ab:a3:34:7c:95:55:26:e4:
93:3a:6e:48:be:d0:c3:a1:b4:06:bf:e2:84:ce:82:
d7:1d:74:f5:19:fe:3d:1a:62:48:f4:20:8d:41:3b:
11:3b:a6:d1:ca:07:b4:e4:20:5d:e8:f9:72:8a:61:
9c:f8:ed:ed:97:a2:77:f7:25:d4:45:f6:2c:20:15:
49:3a:12:ca:18:8d:da:97:8c:de:a1:1b:af:6f:f2:
fd:29:3b:07:7b:2d:a4:6f:af:1f:51:fe:85:23:5a:
23:30:9a:42:52:c7:7c:f3:97:65:09:17:72:0c:6a:
97:ee:64:1a:a5:42:78:46:aa:35:b6:d6:d3:af:78:
81:4c:84:b6:f8:96:e6:c0:6b:75:3c:01:c3:88:1e:
fc:9a:f8:39:4d:10:64:cb:3b:4a:47:81:0f:c4:5c:
1a:c3:9f:96:93:f6:a0:8f:a2:af:a8:65:bd:69:5c:
d8:38:8a:7b:f0:41:2d:bd:7b:63:57:e0:c2:48:2e:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:43:37:94:52:D8:54:50:28:7A:A4:0A:C9:D5:E7:F2:FA:A9:56:DE
X509v3 Authority Key Identifier:
keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:76:85:df:a2:3f:82:cc:a4:f6:ea:8b:3f:77:5d:a3:19:a8:
85:4b:97:de:71:e0:e0:f7:0e:62:ba:37:4f:d4:f9:85:34:69:
a9:c8:38:8a:a0:15:7a:f5:19:06:0b:5c:99:d1:ae:f6:c2:a0:
10:51:fa:03:e0:16:0e:7e:4d:ee:8a:6f:74:5f:5a:60:03:18:
5c:e6:4d:29:2c:2f:22:d4:16:02:cf:fa:38:9f:c8:45:58:88:
e1:b7:f3:94:bc:d9:b2:ca:27:16:0d:0d:d8:1c:8a:24:36:d2:
6d:f1:83:1d:3d:8c:cf:0a:04:67:d1:58:84:10:19:81:71:95:
06:58:a8:f8:c6:62:82:7d:7d:68:a1:09:55:08:ed:fa:ec:93:
76:71:b1:27:35:a4:33:6c:9f:4c:35:de:91:c6:a7:83:5d:c7:
9c:8a:84:8a:7a:e9:2a:c2:f4:45:1b:6f:9f:25:c8:58:cb:82:
50:f9:0f:6a:f7:cf:4c:9a:0c:55:f7:c0:d7:e7:7c:65:7a:54:
2b:80:ec:92:93:63:5b:cd:1f:73:24:b2:ff:e4:45:ab:05:3f:
7a:b7:c0:5e:12:94:7e:47:d3:e6:7e:e8:31:ba:53:e6:4d:c6:
35:83:50:9c:1d:9f:62:1d:7a:75:07:4f:ec:a1:f1:59:63:1c:
22:6c:d4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:08 2026 by rpki-client