
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
File: WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json)
Hash identifier: 9aGpyYjZCJ0+LHFJuIORNIxmEgCyPCOo+OOiyYq7A/U=
Subject key identifier: 97:FF:94:DB:9F:BB:32:24:35:F6:A5:51:A3:65:14:56:4A:0B:09:92
Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Certificate serial: 03DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
Manifest number: 03C5
Signing time: Wed 09 Sep 2026 00:36:22 +0000
Manifest this update: Wed 09 Sep 2026 00:36:21 +0000
Manifest next update: Wed 16 Sep 2026 00:36:21 +0000
Files and hashes: 1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: oTg1G2YDZBOb3YBF+E3cJtlIyr9YTn3VdkedgR3cWNs=)
2: E15780AA32E111EFB163924BC4F9AE02.roa (hash: bzNQiyAKc14b2YsJ0ACA9zxJopod+tvzEv/bYGNnKyM=)
3: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: mKFpBz7LnTMIno4TR7tCdYsZBoH90M0+D1suFZ+WgoU=)
4: 8409527078B011EE8D737723C4F9AE02.roa (hash: LVprJ5d8tMhR1z5h1C8mZdP/Z7v1X0R55VbhyFfScwk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 00:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 989 (0x3dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Validity
Not Before: Sep 9 00:36:21 2026 GMT
Not After : Sep 16 00:36:21 2026 GMT
Subject: CN=6aa0aa05-5edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:61:d2:3f:2a:4b:17:31:65:02:a3:4b:b7:
c7:1d:8c:7e:53:67:b2:b0:6b:b2:2c:d6:bd:28:ef:
71:2f:d1:ae:43:97:f3:89:41:45:49:05:63:75:2a:
e0:4e:e6:12:bd:a3:50:f5:38:7f:54:f9:41:d7:50:
f6:46:8a:9f:91:e7:04:3b:7d:6c:d4:97:a5:de:ff:
8e:8b:9b:f3:fc:96:cb:7f:0b:a9:b4:12:e4:cc:7f:
99:b8:ab:25:40:03:03:d5:86:49:59:3c:28:b3:97:
81:42:07:e0:7d:f9:20:e1:35:2b:21:dc:e1:93:2b:
04:53:e9:28:58:d8:cc:ba:52:60:e7:ca:17:fa:1b:
1b:a1:43:b1:d5:c4:88:1c:12:a6:7b:ad:e4:0b:bf:
56:ca:30:0d:e7:3d:1b:17:3a:29:19:d8:ee:0b:6d:
f1:aa:61:ea:9f:21:00:c4:22:28:8a:55:72:f8:87:
6f:fc:90:2c:cc:49:06:6b:92:a7:4b:fd:d5:a0:3a:
90:88:4e:ed:4e:e5:b1:5d:47:58:91:49:da:c2:04:
8c:2a:4d:55:25:97:9a:be:94:9b:cf:dc:0d:0f:54:
11:b3:bd:96:f0:41:c2:42:c7:ea:c9:84:a2:1b:91:
f0:12:ad:33:95:b3:62:b8:78:2f:e9:9a:f6:0d:ac:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FF:94:DB:9F:BB:32:24:35:F6:A5:51:A3:65:14:56:4A:0B:09:92
X509v3 Authority Key Identifier:
keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:d9:6f:c6:6f:13:2d:c9:28:64:06:5c:50:e5:3f:99:63:70:
9c:00:00:da:c2:d3:e2:bb:31:7b:63:f6:d3:41:01:80:2b:fb:
b3:c5:c2:7c:d2:cb:f8:7d:3f:5c:81:dd:32:7a:77:bf:e7:48:
d2:d1:e1:14:3e:b3:2e:23:40:68:dd:ab:77:64:1c:db:d4:5b:
ff:8b:10:a6:7f:88:ac:ba:93:b0:ac:92:f0:7b:34:1c:30:33:
be:40:f5:c2:2c:21:62:2e:88:7a:2b:e0:59:33:e8:ef:9c:a4:
61:a0:f6:ff:2d:1d:61:6b:00:d3:5d:4d:f7:e4:85:3b:dd:e0:
83:ff:3d:b4:db:3c:f9:fe:b5:7c:49:21:a7:59:e0:09:f0:66:
05:61:37:47:49:c7:41:07:78:51:98:76:d0:5a:2a:c6:02:ff:
5a:22:5b:c7:c5:69:e1:c1:91:38:e3:b4:4f:2a:41:fa:b9:68:
ef:d0:6e:99:cd:27:e0:9b:94:12:5b:75:08:db:21:de:c3:ea:
79:15:09:7b:4c:59:56:da:84:19:4d:0d:d3:d6:4a:b7:2e:3c:
34:6f:58:65:51:0b:e9:f5:61:e6:18:4b:28:e5:22:3f:b6:a0:
17:8a:90:7b:4b:67:93:6e:c9:1b:18:5e:77:da:9e:52:36:b4:
be:f0:9e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:18:58 2026 by rpki-client