
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
File: wsO6iC7D3Pwn8TzociVgfaqheE0.mft (raw, json)
Hash identifier: FULBXnMlxVPcywNrKgk8nniuTyK+YRYJtJuZZ228rdY=
Subject key identifier: CF:BB:AC:B1:F3:B2:BC:D1:82:B4:71:57:DF:24:A3:13:A0:9A:DC:90
Authority key identifier: C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D
Certificate issuer: /CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D
Certificate serial: 0625
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
Manifest number: 061C
Signing time: Mon 22 Jun 2026 22:52:38 +0000
Manifest this update: Mon 22 Jun 2026 22:52:37 +0000
Manifest next update: Mon 29 Jun 2026 22:52:37 +0000
Files and hashes: 1: wsO6iC7D3Pwn8TzociVgfaqheE0.crl (hash: ACk3dSKk4x/73OJ7whZnAiLh3RiBzMB8umxkJLUTroc=)
2: B84B847AEF3911EBACC9E938C4F9AE02.roa (hash: fJFNVhrHKXOPT9xHSax1POpAyESfiKByTHIHaV1ut8U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl
rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 22:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1573 (0x625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3ED4, serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D
Validity
Not Before: Jun 22 22:52:37 2026 GMT
Not After : Jun 29 22:52:37 2026 GMT
Subject: CN=6a39bcb5-fc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:27:e1:8e:de:f2:33:a4:a0:c4:f1:15:b5:
39:b6:6b:5d:d5:38:9c:ab:e2:5f:19:3f:fa:e5:7d:
87:53:4e:32:8d:16:e0:cd:9c:64:b2:3e:41:b9:da:
ae:93:8e:f9:14:76:90:a9:d7:80:74:ea:78:b4:d5:
05:41:db:13:42:2d:53:e3:f9:60:ce:b2:ab:87:c0:
e1:39:9b:bb:b8:8e:9f:38:39:fc:69:d3:8a:e6:1c:
7d:be:d5:90:50:15:16:01:7b:65:e4:3e:ed:4d:80:
68:c6:47:ba:96:2e:d6:8a:96:63:2c:eb:6d:95:18:
9e:9f:da:5b:0d:8b:4f:eb:45:af:dd:40:1c:85:d4:
de:b0:9d:0c:27:79:6d:e9:b4:89:33:2a:39:32:6a:
6e:0e:9e:c1:f3:09:ce:ef:8a:f5:ad:95:0f:da:77:
85:73:54:ea:64:72:49:f7:e2:be:e1:f7:64:61:70:
e6:b2:75:16:78:b5:10:bc:a6:2a:45:c9:dd:d0:bd:
1b:f2:3f:83:69:a9:73:37:40:01:af:4f:92:09:e3:
7b:eb:12:d6:f7:13:2e:87:c4:7d:3a:6d:a8:25:f5:
8f:d4:57:2c:f8:b2:c8:45:7d:e3:28:a7:4a:0d:ed:
fc:0c:06:80:f2:70:20:57:8e:fc:45:58:99:30:94:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BB:AC:B1:F3:B2:BC:D1:82:B4:71:57:DF:24:A3:13:A0:9A:DC:90
X509v3 Authority Key Identifier:
keyid:C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:1a:f3:33:61:04:0f:e7:ba:14:3e:50:c3:18:78:04:ab:44:
31:e0:1f:c0:0c:2a:fd:fb:a2:ec:b0:74:6c:ae:71:45:82:63:
df:9e:ba:da:1d:5b:2b:c9:21:a7:cf:fd:bd:be:5e:60:b6:5a:
7e:65:36:77:85:72:d1:bc:73:c8:dc:98:b7:0e:08:19:4e:fc:
8c:70:da:b9:ef:fb:0e:f1:d3:47:7a:0b:0e:83:97:68:15:75:
c6:61:72:de:c2:b3:9d:53:8f:7a:8c:e4:85:07:71:94:27:05:
a4:0e:1c:46:f7:23:ed:12:51:e1:7d:18:7c:91:d2:9a:91:29:
38:63:da:64:91:e8:1c:dc:2c:f7:36:0e:b9:a1:4b:75:50:8d:
d6:93:bb:8f:62:79:93:3b:cc:22:5a:c1:af:1f:a4:23:f6:62:
e4:ab:9b:ae:3c:b9:63:42:1d:7b:7d:07:74:f3:13:aa:e4:33:
0c:59:79:ff:5a:bb:56:ea:74:8e:b9:43:ea:48:51:e9:65:a8:
79:5a:97:a7:9b:90:9a:d9:34:d2:67:f8:d8:30:d9:96:27:00:
32:68:f1:34:61:57:e4:07:5d:33:d7:d8:58:d3:c0:85:ff:e3:
92:9a:4f:70:92:d3:51:55:f4:ef:03:65:05:98:8f:a8:3f:02:
48:6d:1d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:27:42 2026 by rpki-client