
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json)
Hash identifier: HZE5g9gOzSiLVuHzrSnpwKOGIgBQXnDS6Eu5nAMB/KQ=
Subject key identifier: 0D:3C:CF:FD:84:2E:D0:AB:79:FA:EA:BD:5D:B8:06:E6:2E:1E:E6:EF
Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Certificate serial: 0290
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
Manifest number: 028B
Signing time: Thu 04 Jun 2026 16:49:42 +0000
Manifest this update: Thu 04 Jun 2026 16:49:41 +0000
Manifest next update: Thu 11 Jun 2026 16:49:41 +0000
Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: i0gLUs4PwnOAwGmf43BfKUGjr2jMaK37CukaI2HEaUQ=)
2: 04594232DEA011EE91181415C4F9AE02.roa (hash: c8YRBXzB3c5ZciuZ47whRGlvNacQEORBuyS+ujABTZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 16:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Validity
Not Before: Jun 4 16:49:41 2026 GMT
Not After : Jun 11 16:49:41 2026 GMT
Subject: CN=6a21aca5-c05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1d:0a:d6:4c:48:b2:d3:64:35:23:25:be:e8:
92:2e:e0:93:10:f8:89:04:05:93:65:2e:1d:8b:77:
7c:2a:46:d6:15:34:ad:31:d9:22:6e:d9:95:ba:64:
7a:e3:56:95:58:f3:e1:0c:26:04:dc:89:07:c0:9d:
76:b9:10:28:1a:c3:42:e5:01:d7:47:1a:57:50:07:
dc:4a:bb:a8:35:bd:25:b8:04:67:08:73:1b:73:2b:
39:49:b8:ef:38:46:8a:cc:09:65:8f:4e:39:02:f7:
91:c4:2c:5d:5c:2e:15:cc:81:75:79:70:b3:2c:bc:
3f:04:b8:38:07:15:21:1a:17:64:99:96:44:88:ef:
17:b9:f4:fa:51:16:3a:ed:34:42:50:25:93:aa:b2:
8d:f1:61:b0:04:8c:d6:a0:0a:a2:f5:73:49:df:ea:
bb:e6:9c:a1:71:4c:4f:46:26:d7:bd:45:fa:82:2e:
34:94:ca:20:82:60:1f:a6:d0:ae:00:f2:b7:ec:6c:
01:8d:30:ab:e7:55:ab:c4:f4:76:09:92:ed:96:60:
bd:1d:b5:8f:c0:4c:60:36:8b:d0:c3:39:31:a5:8a:
b3:ee:3d:fb:ae:28:48:6f:69:09:c7:ed:06:e7:e9:
71:03:6f:f2:7b:75:0b:5e:02:7f:61:55:37:f8:94:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3C:CF:FD:84:2E:D0:AB:79:FA:EA:BD:5D:B8:06:E6:2E:1E:E6:EF
X509v3 Authority Key Identifier:
keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:b7:16:cf:a2:6f:a7:47:99:59:89:33:d3:dc:a9:a6:a4:f3:
76:4c:17:f4:ad:3c:ff:78:0b:e0:93:11:4c:a4:b7:91:2a:15:
30:ba:12:30:b3:f0:9e:a3:7e:c2:a6:9a:91:a0:99:5d:1a:3b:
11:41:84:7e:be:00:3c:11:ad:8b:fc:40:5b:06:e7:7d:08:3e:
a4:68:a1:a9:9b:92:4a:6f:42:d5:4c:0b:36:3c:f8:01:84:2b:
b3:7e:e9:a9:c7:11:95:7e:0e:3d:7b:20:69:f6:d1:18:1d:b4:
43:f9:1d:41:59:85:cb:ca:19:e9:c3:21:f1:72:4b:cc:bf:d3:
5b:a0:52:08:21:b0:3a:06:04:81:01:db:24:20:19:cb:2b:6a:
d4:53:c8:71:b7:f5:b7:52:ec:58:4f:5e:52:eb:5c:13:2b:9c:
d2:aa:e6:19:44:20:53:42:18:2a:6b:31:3a:c4:04:d9:a7:58:
39:ec:ed:73:a3:7a:91:ff:ec:33:ab:bf:2c:39:5c:0b:4b:7c:
ee:19:87:a8:b7:e2:b4:7e:38:28:11:0d:58:a2:45:ef:66:4c:
de:f3:b4:ff:e8:38:de:96:81:61:2e:91:59:b7:96:94:58:11:
6a:d1:b8:cc:69:44:e7:0c:d3:ee:52:e6:c4:ec:2b:41:8d:41:
1e:d6:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:13:36 2026 by rpki-client