
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json)
Hash identifier: 8tw0Spx4gGHpDZECvQLOvwH1XvCXCnpoKX3wd5rhQXU=
Subject key identifier: 77:83:B7:FF:98:D2:84:9D:D3:64:E6:69:40:FA:23:D0:0D:78:C9:03
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
Manifest number: 020D
Signing time: Sun 05 Jul 2026 03:39:39 +0000
Manifest this update: Sun 05 Jul 2026 03:39:38 +0000
Manifest next update: Sun 12 Jul 2026 03:39:38 +0000
Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: T6D00tqz7gpZV6g3n3eAldhR4n/iHrcqJ0REGBr3WkQ=)
2: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: A4JCozIWp8wr/poP9Jp6dNkVfMHGLYtzZMkqHhGl4c8=)
3: A6F6E9E43C6E11F19CBF2AC991833773.roa (hash: 46x0HcGyg5ZqbRk9Z/I39DBeqCVUcYGSuLiYKPf2rpo=)
4: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: lnol3FDE+TIgmDpE8Hb5zoS0uAhkzs2Kf9xTWAAdaZg=)
5: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: TRYBWoWB1+O1h6++uHuCXlTu4HpKrVeUUMhvWRHclCc=)
6: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: ZCeCkuNAMK9rwX4/TECTij2fUOVdG//HOrl/aGbqzoQ=)
7: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: j8XwNmKzHtxOYC1qN4eC3Mdd11Pr7Jsabm08Gp7iA9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 03:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Validity
Not Before: Jul 5 03:39:38 2026 GMT
Not After : Jul 12 03:39:38 2026 GMT
Subject: CN=6a49d1fa-159f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:d4:29:9c:77:1c:27:aa:2b:15:e3:c6:76:
4f:ac:13:2f:bd:e1:a5:42:2d:d3:e5:81:60:e2:4d:
c2:85:50:17:83:6d:b2:01:4c:6c:a9:72:53:7d:32:
d1:2b:c8:f7:9f:5d:47:cc:ef:96:65:c7:15:c3:77:
97:33:da:2a:b3:af:53:35:68:e8:31:10:a7:b0:e9:
3e:22:b1:ee:6a:76:ea:7c:c8:4f:1f:ef:c2:92:c5:
20:20:cb:c6:27:51:3a:68:b4:5d:b6:02:7c:4e:f7:
c5:93:69:ff:1c:1f:52:00:10:77:f1:fe:82:bf:92:
f9:6b:a2:31:8b:6b:89:a8:49:cd:32:f8:53:d9:a7:
94:6d:07:5d:b4:76:25:9a:bb:4d:48:85:40:25:9c:
7b:6d:2b:20:74:ad:12:f0:63:36:ee:b7:b8:b3:08:
30:52:6e:74:48:e3:80:a3:c5:19:78:03:91:18:64:
4c:ff:ed:50:48:2a:d2:6a:4e:7c:88:76:f6:05:bc:
1f:62:30:3a:ed:8c:b9:d6:13:45:05:c0:49:53:ff:
83:6b:ea:26:6d:f5:de:d5:3f:87:fa:31:a5:cd:b2:
09:cc:30:d5:d7:24:7c:4e:a0:f7:81:da:a4:d5:58:
28:c9:d9:ce:bd:c8:a9:a2:81:03:70:d1:79:d4:92:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:83:B7:FF:98:D2:84:9D:D3:64:E6:69:40:FA:23:D0:0D:78:C9:03
X509v3 Authority Key Identifier:
keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:76:39:ca:81:ff:13:39:3a:17:eb:5c:80:5a:58:59:92:66:
24:5a:cd:fc:81:d7:c5:fd:13:b4:21:7a:00:06:bd:e7:5f:0d:
d9:2b:be:c0:0b:09:b0:02:9a:ac:2b:fe:02:56:7e:3a:ec:7d:
88:e0:7f:7d:e4:1c:9f:3d:21:a5:d9:fc:80:d2:c0:3b:a1:6d:
57:c1:f5:c1:c0:e8:24:71:f6:9f:0a:9c:06:b1:3a:b3:27:a1:
4f:90:b3:3c:55:bc:76:0d:f9:be:76:45:69:2d:f3:48:69:50:
f6:e2:20:7b:38:a9:c2:ac:2d:b2:37:3b:1f:ab:df:37:d8:94:
40:17:98:3a:99:ce:b7:db:ca:c1:26:fb:b9:72:d0:64:72:ee:
65:ee:e9:dd:35:56:11:68:91:3d:b9:bd:10:80:1b:d6:db:61:
1e:b2:10:1a:4d:3e:2e:af:f0:d7:c1:aa:a0:86:49:f1:54:4c:
58:82:f9:60:9b:d7:9b:4e:b8:53:61:87:cb:44:88:57:6d:e2:
a8:1e:2e:26:66:f9:3e:cb:26:96:20:15:a5:60:7d:22:74:9d:
d7:74:2f:4f:b9:13:d6:a5:60:7e:74:b0:29:96:45:f3:50:ac:
f1:7c:18:c0:0e:ec:96:ba:41:9d:61:37:d1:df:65:3b:d5:2d:
ef:9b:23:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:02 2026 by rpki-client