
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json)
Hash identifier: Ph+4PEAYGil9lPzTAESEOmTTOpQ06MZevS1/yWOKOc8=
Subject key identifier: DF:FA:E3:F7:AD:C4:83:95:CB:CF:1A:96:3D:85:70:B4:9B:27:26:41
Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Certificate serial: 0643
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
Manifest number: 0631
Signing time: Tue 24 Mar 2026 22:27:53 +0000
Manifest this update: Tue 24 Mar 2026 22:27:53 +0000
Manifest next update: Tue 31 Mar 2026 22:27:53 +0000
Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: OqpkCozmgeCNpFB/F4bLaV6TWTnVbP2btj0elOfyvfQ=)
2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: j5ZJEpzdtOEiGnvXhEWjzNgokm2dtSBgk89RWseZw8s=)
3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: e7QKn7+kdQj0gCw0LNLlb5Q7271gVnMQQic/lrYBjOA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1603 (0x643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Validity
Not Before: Mar 24 22:27:53 2026 GMT
Not After : Mar 31 22:27:53 2026 GMT
Subject: CN=69c30fe9-7303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0e:64:de:1d:67:67:ec:36:98:d6:01:06:17:
35:07:38:8c:69:89:0d:1e:11:aa:74:4e:64:89:98:
2f:f5:10:97:9f:95:50:5e:ab:5b:77:f5:36:0f:87:
09:e7:3f:9a:c8:69:f4:6e:74:24:07:ad:74:53:e7:
e0:94:46:de:67:51:25:35:c9:a8:81:80:38:0d:b1:
59:99:9c:37:55:6e:a4:fd:42:99:63:39:5e:cf:54:
93:3b:ab:df:a9:15:e1:df:94:aa:ab:75:3d:1d:b4:
a3:9e:6d:27:8a:a1:74:78:2f:dd:72:d6:6d:82:c6:
d2:e2:b9:32:4f:9c:ea:fe:ce:24:ad:7f:d8:f5:28:
07:bc:23:fd:9e:b5:55:e6:55:ec:e4:7c:62:af:f8:
2f:2d:e1:69:09:6b:0c:5f:45:2d:c6:c0:35:9d:93:
ed:07:f1:69:9b:82:f8:64:35:89:4d:19:b4:5e:63:
1d:15:08:23:ed:99:ef:19:4d:3c:31:50:2f:67:66:
07:26:62:42:5d:12:c4:45:ee:28:74:a5:b0:33:e2:
94:1d:b0:2f:f7:7a:0d:b8:bc:1d:8f:ac:3f:50:8d:
1f:75:e3:13:c4:2c:24:b7:66:f4:e0:3d:c1:f2:91:
92:c3:26:8b:bc:bb:25:42:63:99:75:7d:e7:22:13:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FA:E3:F7:AD:C4:83:95:CB:CF:1A:96:3D:85:70:B4:9B:27:26:41
X509v3 Authority Key Identifier:
keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:9c:c3:ed:0d:d4:ab:53:33:32:14:28:65:5d:6e:97:c0:3e:
92:17:9e:16:38:89:4b:b5:00:1d:1b:31:65:bc:c9:bd:82:43:
25:73:cc:0c:c3:e6:db:bc:91:b0:56:50:91:0f:e9:4f:fd:92:
99:ed:6f:2d:d7:76:0e:e2:ea:f3:5a:4c:c0:bd:55:5e:d1:30:
6e:17:31:be:a1:c1:a9:5a:3e:38:bb:9f:f9:26:26:a1:b3:ad:
1d:e2:e7:c3:71:e0:d9:48:96:9d:ac:1c:3d:ce:e9:9a:75:7c:
c0:18:0c:12:56:f8:94:28:44:f3:22:ea:e8:10:d6:58:31:2c:
90:86:ac:32:02:92:d4:6f:33:98:e5:6f:41:e8:7d:db:66:5e:
2f:cc:c5:14:8a:14:db:1d:fd:47:29:a4:15:2e:2b:05:91:cf:
9c:34:6a:fb:24:52:a1:5f:5a:fc:3e:2f:3f:96:38:8b:62:07:
8c:53:30:f5:d7:4b:4a:34:79:99:e3:2e:95:01:d5:e3:f0:4a:
41:c8:ac:b0:41:54:40:35:f3:1f:30:28:c5:d0:54:32:a3:96:
e9:74:c4:df:eb:bc:d1:f4:cf:d9:79:8f:f3:72:fe:e3:a7:50:
d6:09:7b:fb:86:76:5c:d2:d6:81:4b:64:95:8e:34:5f:f4:15:
36:24:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:33 2026 by rpki-client