
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json)
Hash identifier: 9sr5Dmwxx1QEGGEcRMQ6Ag0BhsXATnwaOiAguhznneI=
Subject key identifier: 08:65:B5:5B:0E:78:7E:FC:1D:11:62:BF:4D:7B:13:20:4E:7D:E9:26
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial: 0686
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
Manifest number: 067D
Signing time: Tue 18 Aug 2026 22:53:14 +0000
Manifest this update: Tue 18 Aug 2026 22:53:13 +0000
Manifest next update: Tue 25 Aug 2026 22:53:13 +0000
Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: RZutBB6uvBght6vhAwAEifKx+Ool8IkMqqYAph0Dn28=)
2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: xX6xLmXsGMhA6ynOHDJr+09/J6zrlE/mAc8SSCuWzQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1670 (0x686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Validity
Not Before: Aug 18 22:53:13 2026 GMT
Not After : Aug 25 22:53:13 2026 GMT
Subject: CN=6a84e259-d4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:79:f2:70:f6:cb:68:8d:08:ba:2b:c3:89:
2d:a2:89:a2:26:78:42:8b:1a:2d:e4:a7:02:25:34:
a7:5d:ca:b7:7e:0b:a4:2e:c4:01:e9:97:47:f8:4b:
32:1d:1a:60:f7:29:a9:35:5f:e0:54:46:37:75:5b:
b0:bf:ae:c8:6d:b8:98:59:03:03:90:17:18:c5:e2:
d9:a3:33:6b:e7:c3:ee:33:07:a4:a9:03:9f:e6:95:
0a:21:e5:e4:ad:9c:0f:53:5b:48:7a:53:9a:bc:89:
4b:6b:22:fd:56:93:39:21:ef:9f:f0:b9:9c:51:a5:
7f:92:47:b3:78:b5:73:0a:c5:09:4c:08:fb:35:f4:
7a:01:3a:93:1b:d6:e2:0c:78:eb:59:a4:63:30:d1:
bc:37:a2:a4:a5:c0:86:15:00:85:de:85:77:9e:57:
2a:53:be:a0:28:73:59:6d:87:1d:d2:93:d2:41:32:
f9:e5:bb:8a:e1:a0:b2:16:c9:0f:ac:9e:d1:d5:65:
2b:dc:04:00:b9:86:8f:34:81:39:28:93:0a:68:38:
20:fc:90:79:5e:e0:c2:94:e1:1c:28:32:68:b5:b1:
43:34:59:6e:72:8f:cc:85:27:e0:72:13:76:1a:20:
32:9d:c7:46:41:cd:2e:c1:89:5b:fa:da:8b:be:5f:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:65:B5:5B:0E:78:7E:FC:1D:11:62:BF:4D:7B:13:20:4E:7D:E9:26
X509v3 Authority Key Identifier:
keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:99:33:35:b5:14:ac:e2:80:1e:91:bc:39:60:b9:c1:92:d1:
80:05:76:c0:49:d8:f5:47:1b:70:2d:42:c3:54:21:45:af:fe:
d5:30:bd:cd:b3:53:2c:b5:73:47:17:b5:fb:fb:aa:6e:9c:59:
f5:3a:d3:17:3e:1b:11:3d:e7:b9:76:cb:f3:af:e5:58:c6:65:
dd:55:8a:e0:f2:a3:09:70:dc:cf:c7:18:4d:af:f6:c2:0e:3b:
b9:1c:51:fe:9d:71:1c:da:32:3b:f2:66:03:59:23:f8:24:7b:
91:3f:61:88:1c:1d:5b:cc:7b:77:07:0f:db:a8:2b:3f:95:16:
c0:e9:ee:40:d1:43:90:b1:7b:b2:0e:85:50:89:a5:e0:2f:29:
bf:98:f7:fe:2b:ba:01:18:12:ba:09:4f:51:ec:ad:32:0b:f1:
cc:02:47:a3:12:9b:5d:bc:a5:4f:ca:f9:d8:69:d7:5c:61:54:
7f:44:98:3c:83:56:34:66:27:bc:da:a9:7c:64:69:f3:67:ae:
74:3d:0c:22:2a:5e:4c:5e:42:5b:f5:b0:16:51:29:ec:26:37:
7c:0d:f6:c2:f5:13:54:a5:24:ed:5e:e7:f8:1c:f2:f9:07:c0:
60:a4:f0:af:4b:cf:a7:6d:ad:3c:43:15:a0:2c:e8:4b:d7:97:
05:0d:dd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:54 2026 by rpki-client