
$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier: XWyw+QytsQrTJKO2Z19n/Htzn4DBRhuepAIsWj4EQ4k=
Subject key identifier: C3:B9:18:71:67:D5:A6:D4:23:6B:25:A8:B3:DD:BB:0D:55:5D:3B:E8
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial: 1871
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number: 1834
Signing time: Wed 22 Jul 2026 16:37:45 +0000
Manifest this update: Wed 22 Jul 2026 16:37:44 +0000
Manifest next update: Wed 29 Jul 2026 16:37:44 +0000
Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: TgxhDQw2zFhz/GA9L4JXdHTvnG2hGgJwl+Dz3TvwG20=)
2: 047C0BCC373211F1887E264A90833773.roa (hash: LWhnCQp9VfJYhsJdhzflBR7RBHFtlmggsyH3Tj4cj0M=)
3: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: n1u9iSyb9bdQc1QOK/WYlhLEbmOoYxOlffVDVXq1fW4=)
4: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: t9gfSRrRBhg5aKee6bLsa2HCvO/wXMYsjYUGDi3D7i0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:37:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6257 (0x1871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Validity
Not Before: Jul 22 16:37:44 2026 GMT
Not After : Jul 29 16:37:44 2026 GMT
Subject: CN=6a60f1d9-b3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:18:7d:d2:4e:f8:0a:73:ca:2e:4e:01:54:6f:
08:5b:92:77:c6:38:06:cc:99:73:a5:fa:7d:7a:e3:
f0:0b:00:33:a6:3d:db:5a:24:4a:df:3b:d3:31:ed:
30:ec:be:1d:0c:45:1d:dd:5a:1b:65:87:c5:e2:0a:
56:24:16:61:8a:cd:e8:ec:63:39:3c:8e:b0:ea:85:
a4:63:2f:d9:87:22:64:61:d0:4c:13:11:e3:b7:2c:
40:14:4f:6f:86:4c:1c:80:bf:5b:c1:7d:f0:4a:cd:
18:8d:33:ce:81:9c:a1:bf:4f:a5:8a:a0:1a:17:33:
cf:f9:19:61:af:05:b4:53:c4:cf:af:3a:a1:58:ee:
c3:30:96:2e:46:a8:52:0e:c5:5f:8d:80:04:b7:1e:
a5:aa:eb:f8:c1:d4:bd:91:67:df:55:e9:77:32:04:
a0:4f:1a:98:9a:53:b5:7d:2d:bb:26:99:89:f1:56:
85:40:3e:7d:94:3f:ad:66:d0:1b:4f:1b:97:ec:39:
0e:53:94:53:4f:8d:18:1b:c5:b3:3c:e0:53:55:6a:
a3:25:c0:fc:85:ce:96:7a:ee:0c:e6:ec:56:ce:ae:
09:26:62:15:66:02:f2:f3:3b:a0:13:a3:6d:3d:c8:
c9:3c:3b:8f:0a:bc:78:1e:7b:8e:f0:5b:63:e4:39:
94:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B9:18:71:67:D5:A6:D4:23:6B:25:A8:B3:DD:BB:0D:55:5D:3B:E8
X509v3 Authority Key Identifier:
keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:fd:cc:97:17:1c:49:c3:d5:3a:04:8e:bc:89:d6:85:5f:b9:
65:6b:ce:6e:e4:61:02:7c:30:ac:dd:c6:fe:34:e8:6c:29:d8:
cd:01:5a:83:c3:57:07:4e:25:7a:f2:ea:2a:67:90:3f:17:d7:
e8:58:ee:ce:1f:ee:46:4f:7f:70:43:49:e5:21:fb:db:4b:6a:
cd:88:12:13:f3:05:fa:d6:28:da:db:68:c6:e5:c9:97:e8:15:
f3:61:3a:fc:50:27:0e:58:42:5f:7f:67:c7:1e:08:e9:95:4b:
aa:23:5f:f5:61:be:bf:64:66:c6:34:d8:f8:75:5d:6d:47:11:
b9:03:cc:a2:b1:e6:e1:66:3a:d1:27:52:9d:de:17:59:d6:81:
30:45:85:4b:79:1b:7d:54:67:2e:36:e3:bb:cb:b9:9b:3a:1f:
35:6d:35:ad:48:f7:62:d9:74:84:09:b6:0e:d4:f3:b7:73:c0:
19:92:8c:4a:35:9f:a4:c5:e7:8b:85:ac:b4:53:c9:92:c7:c7:
2b:48:77:cf:dc:d9:cc:70:e4:de:21:93:a2:cd:e4:16:74:0a:
17:12:27:e0:bf:5a:79:b6:e5:4d:2a:59:9a:79:56:30:95:11:
16:1a:86:8e:df:49:35:c3:92:c6:25:1f:4b:fc:f9:02:03:4a:
37:5f:3e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:10 2026 by rpki-client