
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
File: WKqOb2Cb9VgUA20moSpeKyUViTo.mft (raw, json)
Hash identifier: DwQYRwdSjAeVlNR6+PtCbluHyWXIwRTe9ZuxE2m2FKs=
Subject key identifier: F5:FE:84:3C:C7:67:37:43:C5:E6:F3:74:7E:CF:88:F3:1E:5D:CF:CE
Authority key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
Certificate issuer: /CN=A914EBB2/serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Certificate serial: 52
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
Manifest number: 4B
Signing time: Wed 13 May 2026 04:56:23 +0000
Manifest this update: Wed 13 May 2026 04:56:23 +0000
Manifest next update: Wed 20 May 2026 04:56:23 +0000
Files and hashes: 1: WKqOb2Cb9VgUA20moSpeKyUViTo.crl (hash: Es9r53ouDgd3uZSs/8znMVfCiefuyol8+jNLPP/fV7Y=)
2: 651B78142DD711F187F45729B3833773.roa (hash: orGvvH8EtrQFqpfDS8Xvz4vEWTgyCI2f9BcO9d6cJBw=)
3: D23FC546011111F1B3598E67446F56BC.roa (hash: vcrWn/T7PWva5wilhUJF83D5sEdB2Zxd5D/0CZVE3OU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Validity
Not Before: May 13 04:56:23 2026 GMT
Not After : May 20 04:56:23 2026 GMT
Subject: CN=6a040477-de53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:03:95:f8:0b:5b:8f:6d:c4:06:33:ec:08:
9c:a8:d6:2b:83:46:c9:4f:4a:dc:a5:ff:45:6e:ee:
52:bd:dc:9b:b2:99:6a:2d:20:78:59:5e:77:79:8e:
90:e7:85:9f:71:d9:da:7d:b3:21:1f:46:3a:c8:98:
0e:12:9a:e7:cd:4b:12:5f:a2:dc:aa:78:db:00:c0:
5f:c3:1c:68:e5:55:23:78:10:d4:8a:83:d9:61:68:
89:d4:fe:db:0c:ba:0a:76:30:6e:a7:4d:d3:c5:37:
23:71:e7:1a:65:2d:98:34:0c:78:55:1d:43:5c:c8:
31:d3:4d:a3:55:07:25:23:ff:ee:7d:8e:27:3b:b1:
6b:5b:42:4a:5e:58:49:e6:7f:ce:f6:d8:54:77:53:
9c:d8:ce:8f:e1:e2:6c:22:57:43:b6:0f:b8:20:af:
1e:ce:89:93:1a:b2:38:72:73:9b:71:1c:ae:46:50:
bb:30:1a:f6:42:f3:3b:de:81:f8:ac:d8:90:6a:8a:
51:0e:87:08:08:16:52:b3:e3:50:b9:29:2d:c7:d7:
07:48:ae:54:c5:0a:6f:cd:ce:af:82:65:9a:e6:97:
b2:51:20:02:7f:9a:db:12:08:05:4b:f4:a1:60:66:
6e:5a:41:6f:6a:db:dd:46:db:a9:e2:00:c1:b1:e5:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FE:84:3C:C7:67:37:43:C5:E6:F3:74:7E:CF:88:F3:1E:5D:CF:CE
X509v3 Authority Key Identifier:
keyid:58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6c:4b:fe:d8:ce:60:32:57:94:3b:e0:9b:ea:33:01:ab:23:
3c:93:b9:82:c2:77:43:46:1c:8e:df:9d:7e:b3:69:98:e7:48:
0c:08:c6:2b:25:49:f7:a5:ca:6e:17:2b:8f:6f:28:bc:4e:11:
40:84:fa:5f:86:5e:5e:b7:94:03:cf:8e:97:db:35:eb:b7:28:
ae:9f:dc:f4:c0:12:3d:80:20:ad:ba:50:65:88:46:99:04:63:
5a:b8:26:82:a7:e8:13:6f:6f:1c:62:aa:c8:77:63:33:80:b5:
22:32:21:1e:59:ac:63:95:1d:fe:28:a2:2f:13:fe:08:93:f0:
c1:5d:6d:ad:46:32:47:af:f7:fa:34:25:11:ff:4b:5d:96:73:
78:18:a2:24:7c:d6:d6:ff:39:48:62:f2:84:a3:20:59:03:ad:
6b:a0:9f:48:a8:fc:5c:fa:8a:fe:6a:15:e6:37:65:f5:1d:dc:
1a:85:84:2f:7d:ec:24:a1:c5:25:63:a8:00:96:01:fd:0d:02:
2f:9a:6b:00:de:02:10:d6:77:25:8b:e6:f8:de:81:97:af:cd:
b6:75:9a:d4:7a:35:6b:98:1e:64:81:d1:9d:a5:18:2e:7d:eb:
a4:9e:c2:6f:8b:df:5e:9f:4c:95:a1:f6:3b:fd:03:4c:76:1f:
28:cf:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:50:47 2026 by rpki-client