
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json)
Hash identifier: vqKBMrl2OWQJ4yY21fBQEUr7yw+jbH/AvcCgm5MpDDs=
Subject key identifier: B9:74:72:46:BE:B8:58:EF:3C:77:4B:1E:5E:F1:E7:79:66:FC:B2:C4
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial: 02B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
Manifest number: 029E
Signing time: Mon 27 Jul 2026 03:04:34 +0000
Manifest this update: Mon 27 Jul 2026 03:04:34 +0000
Manifest next update: Mon 03 Aug 2026 03:04:34 +0000
Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: pmZQmbY5H6X3bbHt6WyTJDulo47rg2MBnUNVlMAlmv8=)
2: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: 0AcNJYbPABCo7geahEBKTRdq6wGpuolAL2JTEM7M9Jk=)
3: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: lA0GUtoywdP3W0s4fPvZbdcVPY5+3iGjlHV5SalUa/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:04:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Validity
Not Before: Jul 27 03:04:34 2026 GMT
Not After : Aug 3 03:04:34 2026 GMT
Subject: CN=6a66cac2-00b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:3d:af:99:e0:0e:4f:1b:b5:a3:44:0b:ee:
e5:6f:aa:57:fa:28:6f:6b:d5:6b:a4:7e:74:9a:46:
78:aa:76:03:01:69:f2:ae:de:a8:f0:35:d7:ce:21:
ed:b4:33:58:1d:72:31:28:b5:52:33:75:2a:d9:c6:
98:cb:04:7c:57:37:3d:62:2e:9e:84:fb:19:a5:82:
14:e8:d5:12:a0:87:cc:e5:3b:d0:4d:9b:b1:6b:ad:
07:64:24:13:cc:bf:9b:45:0f:fa:0a:15:ee:e2:9f:
7f:72:e8:56:cd:3a:f8:cf:5e:9d:c2:28:12:46:28:
8f:0a:6b:d5:48:f8:0f:5f:a6:0e:a2:17:92:82:c4:
e3:3b:bd:36:84:8c:f0:58:49:02:71:3b:e9:b5:22:
25:79:51:2a:94:a4:ee:dc:bb:34:bf:f9:98:c6:1c:
77:67:43:1d:98:37:84:c9:5c:c9:a9:02:26:12:f2:
18:43:57:08:17:ab:f4:bc:22:ca:08:ae:fb:b5:5f:
ec:35:cc:31:e7:39:71:94:14:8b:d2:e4:16:44:56:
19:09:81:e0:d9:0d:41:59:d0:24:73:1c:c6:84:b3:
d3:64:6a:9d:f0:af:7e:a3:cc:1b:c9:8a:94:2f:8b:
26:0f:92:95:bf:37:ed:c0:8c:ec:97:4e:98:18:e1:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:74:72:46:BE:B8:58:EF:3C:77:4B:1E:5E:F1:E7:79:66:FC:B2:C4
X509v3 Authority Key Identifier:
keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:b5:d4:07:f9:03:81:7c:75:14:69:84:d4:45:d8:f8:51:77:
6c:73:62:69:b2:84:6b:cd:07:47:fe:79:71:3e:b2:e8:c5:69:
19:df:96:0b:88:11:35:aa:c4:7e:d6:19:4a:5c:c7:c4:11:f2:
90:03:c1:b1:c2:86:1e:19:6d:d2:27:de:1f:f4:96:a7:12:5e:
88:23:a2:1c:db:42:15:e3:84:d5:8a:d3:2f:ff:22:f4:49:95:
d6:77:0f:bb:aa:8f:f3:5e:7d:67:9c:f2:a7:26:4f:3f:78:08:
5c:db:5b:61:7f:cc:06:9c:81:0a:e2:b6:87:c4:ba:d6:0d:f0:
f4:81:73:2a:80:31:0b:51:49:3c:a6:d4:1d:a9:34:9e:94:dc:
20:48:3a:9e:f2:9d:4f:5d:ef:e3:f1:33:7c:f4:58:95:45:f7:
c6:7b:1a:a3:21:98:84:c5:b0:3f:2a:dc:9e:c4:cd:0c:04:cc:
b5:0c:85:54:13:73:62:28:da:69:2a:7e:49:5c:4b:13:f8:82:
52:2e:64:5f:84:15:8f:f4:33:3d:2a:44:49:9c:15:ef:f0:fa:
a4:c7:41:e8:97:4b:1e:47:d1:ec:52:6e:b3:a3:81:43:6b:94:
c1:5c:91:72:b2:b3:c7:1a:5d:8f:b6:1b:ac:3d:45:0c:29:94:
9f:13:de:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:51:44 2026 by rpki-client