
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
File: WTnpc8iL_GpBqjWondhG-w0Wi8w.mft (raw, json)
Hash identifier: ecMdmfudHL/jsEGL3J0UfZ6xaQc15zHtHpeGW/80Ah8=
Subject key identifier: 9E:A0:BA:25:12:B1:F1:B0:F3:49:70:E9:CE:27:5E:27:C8:7E:DF:68
Authority key identifier: 59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC
Certificate issuer: /CN=A91E6776/serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC
Certificate serial: 0F83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
Manifest number: 0F7B
Signing time: Wed 20 May 2026 17:32:42 +0000
Manifest this update: Wed 20 May 2026 17:32:41 +0000
Manifest next update: Wed 27 May 2026 17:32:41 +0000
Files and hashes: 1: WTnpc8iL_GpBqjWondhG-w0Wi8w.crl (hash: /SdoY+j/eE/K08NLbOsOGY52qFJ7dlZ9fm5XNeR87U8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl
rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3971 (0xf83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6776, serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC
Validity
Not Before: May 20 17:32:41 2026 GMT
Not After : May 27 17:32:41 2026 GMT
Subject: CN=6a0df03a-e897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:7f:76:29:eb:fe:45:bb:1e:a4:4e:40:f6:
ed:bc:3a:6c:c9:16:df:98:bc:e4:f0:d1:47:7c:dd:
74:eb:b9:7b:78:51:cf:74:8e:9d:68:98:43:de:b6:
26:82:40:d0:a0:f8:4b:22:90:48:c7:30:52:9c:bb:
c2:52:5f:5b:a2:19:ed:c3:55:ea:ea:0c:28:23:60:
c9:ea:3a:4d:ad:c8:48:29:f5:bf:3e:8a:5b:5a:34:
72:47:af:61:87:02:cb:37:0b:59:2b:a0:87:6e:ce:
07:d9:74:b0:e8:70:84:d1:63:fb:48:39:9a:63:5e:
3f:ca:76:07:85:f8:36:d0:ec:c6:24:a6:57:a3:9f:
91:ca:d0:3c:30:87:47:05:c6:5f:d7:92:15:ee:8c:
fe:b9:33:24:81:0a:bd:11:61:bd:b1:15:9a:43:93:
1b:3d:08:18:3e:10:fe:79:17:5a:cd:eb:3c:20:ea:
5f:25:9d:4c:f0:88:c7:e2:9c:43:ce:96:ad:2d:f5:
d8:c8:cd:c2:78:93:cf:e2:fb:b1:f2:c4:81:3e:9d:
90:e2:92:dd:8b:1f:a9:c1:ae:b2:d2:2a:65:b1:7f:
30:22:4e:71:66:44:4f:f2:bd:88:ee:0f:e5:26:36:
16:2a:4d:12:6f:63:cd:21:35:2c:c8:8d:7c:a3:5e:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A0:BA:25:12:B1:F1:B0:F3:49:70:E9:CE:27:5E:27:C8:7E:DF:68
X509v3 Authority Key Identifier:
keyid:59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:45:c2:e0:ca:e0:a2:be:80:55:04:3b:9a:9f:0f:9e:f8:49:
cd:f6:49:f0:cd:12:40:d6:b3:5d:e5:f3:67:e5:30:ee:69:ef:
e6:64:15:6b:c5:27:54:1f:67:7e:77:88:0f:91:c3:8a:cf:6f:
e7:82:4f:41:8c:7b:4d:9c:ea:08:1a:43:dd:4f:ea:02:3d:c2:
bc:94:a6:f8:c3:f7:6f:af:0b:b9:a8:42:0b:92:78:13:7d:4f:
44:92:cf:ce:34:ee:71:37:e2:37:22:f1:e5:dc:ad:3a:aa:20:
95:58:b5:4b:ac:b6:9e:9f:a6:03:fd:3c:0c:cd:8c:c3:83:08:
38:ec:56:2b:78:95:9c:05:d3:53:18:f6:e2:c3:e6:ad:24:7a:
5d:f0:d7:d1:ce:b6:31:fb:70:3f:e5:a1:71:ce:ca:63:84:5e:
4b:6a:97:7c:1b:48:ce:3d:60:64:fc:9d:56:18:12:02:1d:75:
9e:89:f2:2d:61:cd:e9:21:16:a3:a1:95:69:b0:96:95:67:c0:
7f:a4:e1:c2:46:f0:95:87:b0:0c:34:15:49:7d:c9:95:8f:6a:
b2:6a:0a:1a:6c:dc:2e:dd:b4:c4:e6:c6:6f:39:21:74:5e:a1:
01:d5:00:45:53:c4:0c:11:28:36:96:e6:09:d0:8f:ce:c8:cb:
56:4f:ed:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:57 2026 by rpki-client