
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft
File: wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json)
Hash identifier: p8SOFfqaGrujnyTVujphw/APJudJHHlofhTP2CSB3Ps=
Subject key identifier: 0D:E4:59:B3:0A:2F:24:52:3B:37:75:30:4B:8B:9C:52:1E:54:D9:FA
Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36
Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
Certificate serial: 1486
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft
Manifest number: 1457
Signing time: Tue 30 Jun 2026 17:08:10 +0000
Manifest this update: Tue 30 Jun 2026 17:08:10 +0000
Manifest next update: Tue 07 Jul 2026 17:08:10 +0000
Files and hashes: 1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: pcmZVVG1k3xgCemL1kRQCTzqsdX8IDZ2srSPYw35lxU=)
2: 7A6DC1B2ED5011F0BF908D85516F56BC.roa (hash: Pf2Xcfz159pyHDj2hXgdqjwAgXXP/RYEqTKSIfi/V/I=)
3: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: z/b7i8bugbJfMnPzMbcPCKt6lu9pPtbu5hUl0vugU0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl
rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 07 Jul 2026 17:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5254 (0x1486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
Validity
Not Before: Jun 30 17:08:10 2026 GMT
Not After : Jul 7 17:08:10 2026 GMT
Subject: CN=6a43f7fa-e402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:7e:60:8d:d0:37:99:a2:4c:46:b2:e8:91:
b1:a2:09:ac:0e:4d:e2:eb:dc:78:49:a0:96:bb:35:
68:11:e6:cc:b7:39:03:b3:d5:47:bc:41:a7:e4:39:
e1:34:73:dc:12:ae:7a:16:c3:f7:d4:d7:12:a0:e8:
ae:f9:db:f8:e0:c4:5c:30:5a:aa:b0:d0:b1:ec:b7:
2f:f8:ac:78:c8:73:c1:ad:0b:47:35:5b:a1:b8:0a:
94:d7:72:0f:94:3e:2f:36:50:09:58:1b:d7:2c:67:
98:cd:b2:33:6d:30:d2:77:fc:e9:ff:2e:39:c2:34:
cf:4d:a1:42:45:ad:bb:a9:d4:0c:ba:fe:f8:6c:e5:
b5:66:de:90:16:a5:48:3b:fa:59:98:7d:e8:62:2b:
7d:83:0b:da:a0:63:76:24:1b:d3:58:b1:98:31:d4:
4b:38:50:1d:98:bd:80:ac:4a:2b:56:22:c3:e1:57:
7c:df:07:09:5e:86:6f:a5:ad:da:f2:75:da:53:5c:
d0:7c:5d:e6:ef:92:c9:d4:68:aa:b1:7c:76:ed:38:
93:02:b7:71:69:d3:65:86:f1:50:8b:f4:36:5f:07:
5e:0c:99:14:fb:d0:20:ca:52:28:89:73:48:23:33:
bd:fe:1c:3f:b2:ee:86:4b:d2:83:87:47:f1:ed:61:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E4:59:B3:0A:2F:24:52:3B:37:75:30:4B:8B:9C:52:1E:54:D9:FA
X509v3 Authority Key Identifier:
keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f5:50:a8:13:bf:68:31:95:1f:7c:ac:bb:08:fa:9c:1d:b5:
a4:ee:2f:86:ff:42:e1:76:2a:ae:19:37:89:f4:83:24:78:2e:
f4:8e:e3:c8:4b:6d:44:71:5d:c7:75:33:db:3d:66:10:ff:23:
0b:7a:94:17:15:eb:5b:e0:b2:2a:bc:4c:0c:11:b0:39:e3:cf:
50:51:15:0e:c2:7a:94:9a:a9:95:5f:5c:49:8c:55:34:3b:4b:
1e:fd:22:f2:3e:e2:21:a7:a7:ed:a1:56:62:8b:d3:5b:0a:d2:
6f:52:d1:48:61:86:e1:ac:99:be:8a:5f:43:06:c8:66:3b:ce:
f2:9b:25:e8:6e:65:61:ba:19:fb:62:02:85:d7:9b:2f:eb:7a:
4d:62:2a:b2:40:2b:b9:03:ea:07:ac:2e:fa:77:4b:21:11:ac:
7c:65:a7:1c:07:26:5b:de:e9:1a:51:81:60:c4:2e:5e:15:f6:
8d:98:58:c5:95:d2:6a:e5:9c:b8:13:07:8a:1f:52:45:89:3e:
a7:b3:a4:b5:68:44:7a:14:ca:d3:b2:3a:38:2f:d5:18:69:fb:
a8:d3:77:56:37:17:12:36:94:75:3f:b9:98:3c:1c:09:62:a3:
f1:18:27:9c:86:36:7f:2c:f2:11:b3:32:1c:3f:f4:b3:ae:ba:
4a:c5:73:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 09:04:18 2026 by rpki-client