
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
File: wfSjmGHK0883hCGN7aegXoUvIn8.mft (raw, json)
Hash identifier: I8ZvlsrKcbDNn/oYzieEODdSJraLfNvO6iSfq7zWYfE=
Subject key identifier: 94:22:D2:84:D4:C6:46:8A:3D:3E:E0:96:10:4F:8E:70:77:FC:C1:F8
Authority key identifier: C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F
Certificate issuer: /CN=A912DB97/serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
Manifest number: F9
Signing time: Thu 23 Jul 2026 08:01:32 +0000
Manifest this update: Thu 23 Jul 2026 08:01:32 +0000
Manifest next update: Thu 30 Jul 2026 08:01:32 +0000
Files and hashes: 1: wfSjmGHK0883hCGN7aegXoUvIn8.crl (hash: sNKFIZlS9nny1+nth5EqGPOJ9myyZNOko9FADPVG3bc=)
2: 28F87D180A1611F0BC8FD10DC4F9AE02.roa (hash: Jgehc0dNGWJlml8ypNr1T5HmtWN0p5K48gpU2FwQ+nU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl
rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB97, serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
Validity
Not Before: Jul 23 08:01:32 2026 GMT
Not After : Jul 30 08:01:32 2026 GMT
Subject: CN=6a61ca5c-542a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:00:6e:75:86:10:cb:ff:9b:fa:94:c2:44:
e5:3c:01:86:b7:5a:25:f5:5a:f8:1c:b4:4c:7d:42:
aa:fb:94:5b:72:62:58:f9:3d:8d:15:82:48:23:72:
61:6b:ee:36:ed:e0:11:97:55:af:89:1a:88:c0:f1:
e9:2c:f1:45:01:4d:fb:ca:56:eb:2f:06:63:09:f0:
32:90:c8:50:a3:06:09:5d:7e:3d:a1:8a:88:32:07:
83:a1:3c:50:0e:1c:fb:0a:04:86:b4:60:bb:19:ae:
02:98:b9:54:3e:ab:ff:e3:3c:9c:50:ae:a0:e4:55:
79:76:6d:ec:16:42:a5:5d:03:cd:9c:24:dd:f1:c6:
ca:3f:59:22:06:5d:8e:41:b0:75:b8:5f:39:be:19:
99:a4:95:57:97:07:1f:e3:71:ca:28:ad:82:b7:7f:
ce:54:71:c0:cd:9c:e6:d2:da:6a:dd:df:b4:5b:32:
4c:cf:c9:87:75:0d:00:b6:40:a6:fc:56:ad:29:68:
36:33:5a:81:49:99:d4:54:62:dc:b6:2e:ca:c2:11:
e9:ef:d4:3e:d2:1a:80:23:37:a3:35:a3:d2:5d:18:
a2:9a:b4:f0:56:42:e4:54:46:4c:37:15:fa:63:e7:
08:bc:bd:7a:8c:7c:f3:19:0e:32:00:fb:04:07:23:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:22:D2:84:D4:C6:46:8A:3D:3E:E0:96:10:4F:8E:70:77:FC:C1:F8
X509v3 Authority Key Identifier:
keyid:C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:09:02:94:22:53:91:c4:3a:9e:3d:63:01:55:0e:b8:c6:61:
51:12:0a:f9:c0:94:fa:ee:26:75:f4:46:09:89:a4:fc:01:3d:
6e:46:40:b5:90:88:65:5d:f3:dd:fc:19:f4:36:aa:61:4c:a3:
63:4d:9e:63:30:ff:4a:82:76:2b:5b:c9:72:0a:97:43:97:a9:
67:5f:e4:75:2e:b1:f8:78:05:c8:f5:c7:64:2a:c6:02:8e:74:
8d:f7:c4:99:96:93:5b:b6:b8:a1:52:76:11:27:68:5d:80:62:
9d:bc:aa:a8:52:3b:b6:6e:a0:d8:bb:dd:59:15:66:14:98:2a:
d1:14:84:d2:50:7c:ce:fd:9e:e4:9b:f1:f2:97:45:a2:9b:ed:
ac:63:01:a8:74:ec:b6:45:ba:79:c5:3d:19:15:4d:32:a2:67:
b9:06:1b:9b:06:0a:59:db:7e:04:74:a6:59:f8:3c:94:80:35:
e6:73:12:21:3b:a9:c8:90:f5:bb:b5:f7:c1:a8:32:20:d7:6b:
f3:bd:0a:66:14:9a:24:d9:df:c3:dd:8b:b1:c0:70:59:85:fd:
4e:f5:24:75:50:fe:fb:81:32:b5:3f:a4:6e:6d:74:9b:6f:66:
9f:2c:5d:a5:a8:8c:7e:2d:99:18:c9:4a:99:d4:85:82:da:09:
4a:e5:f1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:03 2026 by rpki-client