
$ rpki-client -vvf rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
File: W7mo4aQGCswvO_oh78rSwwZujok.mft (raw, json)
Hash identifier: DyxpheK8imHjCLMrdNQUwibmbjM5+DArk5SjSnX2bC8=
Subject key identifier: 4C:4C:01:2B:8F:B4:44:B4:60:70:5B:48:7D:CF:72:B5:29:AC:E7:82
Authority key identifier: 5B:B9:A8:E1:A4:06:0A:CC:2F:3B:FA:21:EF:CA:D2:C3:06:6E:8E:89
Certificate issuer: /CN=A914699C/serialNumber=5BB9A8E1A4060ACC2F3BFA21EFCAD2C3066E8E89
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
Manifest number: 39
Signing time: Thu 23 Jul 2026 10:46:05 +0000
Manifest this update: Thu 23 Jul 2026 10:46:04 +0000
Manifest next update: Thu 30 Jul 2026 10:46:04 +0000
Files and hashes: 1: W7mo4aQGCswvO_oh78rSwwZujok.crl (hash: SE3oFDLnQYzjmj8VhDNkmXv6m3VkBD2K6DXIIPjjReY=)
2: 787214AE502D11F1B0D3D52AC9833773.roa (hash: wrle5esD5kunfyi/rtL/mG9W39WCBeUw3VOv/boPy9I=)
3: B241C102502D11F1A5FC1C3EC9833773.roa (hash: pXNb9fqL8rNJsyMIH/TKizTjSzJWlaSb0X5J6/gFCyQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.crl
rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914699C, serialNumber=5BB9A8E1A4060ACC2F3BFA21EFCAD2C3066E8E89
Validity
Not Before: Jul 23 10:46:04 2026 GMT
Not After : Jul 30 10:46:04 2026 GMT
Subject: CN=6a61f0ed-6eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:24:7f:3b:ea:f1:44:15:53:b1:62:e9:0a:
9f:73:e8:ba:db:96:f3:f3:72:8d:6b:13:5f:02:0d:
a3:07:50:88:74:47:65:79:32:d8:bf:42:63:5e:35:
31:42:1a:41:8f:f6:5e:c4:9f:ba:7e:be:9d:65:80:
0d:af:43:82:e1:6b:b1:db:31:d3:7f:f7:78:0e:fb:
8e:13:e4:8c:d7:28:26:bd:8b:6d:ea:52:97:31:c5:
9b:f2:8b:f4:d5:fc:fb:67:fe:d2:57:62:d7:6a:90:
dc:4c:7b:e2:0d:3a:4a:43:52:aa:b8:0b:c6:36:6c:
52:62:1b:01:ea:4e:6e:a2:d2:77:25:f8:cb:5d:e3:
da:b7:af:ea:7c:88:28:23:83:fe:62:d3:56:77:9f:
0e:ae:0c:8c:df:14:36:10:9e:bd:57:5c:b2:96:08:
0e:cb:43:28:2f:12:48:72:19:2f:02:72:0c:13:f0:
a7:60:cd:55:93:b1:bf:5e:f1:df:43:e7:d4:16:63:
45:fd:7d:eb:3c:e1:a0:30:8f:8c:37:75:49:f4:6f:
1a:bc:49:bb:10:bd:14:79:7b:84:c7:29:63:38:14:
da:25:e4:f9:3d:9a:dc:ad:a2:9c:ed:52:e7:70:b1:
b2:03:ef:c1:89:dd:49:1c:d3:9b:7d:48:58:63:3c:
15:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4C:01:2B:8F:B4:44:B4:60:70:5B:48:7D:CF:72:B5:29:AC:E7:82
X509v3 Authority Key Identifier:
keyid:5B:B9:A8:E1:A4:06:0A:CC:2F:3B:FA:21:EF:CA:D2:C3:06:6E:8E:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:38:a5:1a:1f:e3:b8:41:93:a4:ce:78:8d:ab:1d:a8:ca:5d:
0c:21:31:07:58:22:bf:84:73:64:2a:64:e1:19:00:1b:4e:f6:
53:69:ca:4e:34:5b:b8:18:42:01:ea:3f:01:30:35:02:ec:1a:
0d:72:c1:fb:78:8d:c0:ed:62:02:0e:f7:c3:01:ed:a2:6b:2b:
2f:20:02:b2:02:a6:bb:43:62:fc:aa:32:a2:d7:7e:07:d8:6d:
49:47:8e:d5:08:4a:5d:52:20:b9:b3:7a:3c:ad:e3:33:5a:5a:
fe:96:db:99:e4:4e:57:75:35:ef:0b:5a:78:91:d5:cf:48:ff:
a8:d7:df:ae:c3:8b:e5:93:b6:b5:72:3c:1b:e1:29:ba:23:71:
98:6d:31:31:e5:b0:ec:bc:3b:92:11:2e:44:d1:dd:0f:20:ca:
d2:fe:7d:fa:5c:94:19:93:6b:06:4e:08:75:f9:72:a0:3e:ce:
f3:77:d8:af:c2:a8:e9:c5:6b:51:5f:f1:c0:b9:c0:94:75:6a:
55:38:d5:b6:2d:5f:03:87:7f:8a:f0:52:95:01:45:ae:3f:8c:
2e:95:19:cc:63:09:58:ce:e6:d8:57:29:63:24:1b:0c:c7:15:
5a:db:37:a6:69:e5:70:ec:81:6b:7c:be:49:91:bb:e3:de:85:
97:cf:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:27:17 2026 by rpki-client