
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
File: WKqOb2Cb9VgUA20moSpeKyUViTo.mft (raw, json)
Hash identifier: wSyGMmkfYK7RzKinwVct/vjpQa6IgtWJf8266R1dwh0=
Subject key identifier: B0:31:B0:6B:A8:01:A9:68:57:49:34:BC:BA:A2:CB:F8:E0:F6:E6:13
Authority key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
Certificate issuer: /CN=A914EBB2/serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 05:55:39 +0000
Manifest this update: Thu 23 Jul 2026 05:55:39 +0000
Manifest next update: Thu 30 Jul 2026 05:55:39 +0000
Files and hashes: 1: WKqOb2Cb9VgUA20moSpeKyUViTo.crl (hash: YlyF9mlketVshMC8b2NxNIPiopJ+EHMnoQlJV0Gi+t8=)
2: 651B78142DD711F187F45729B3833773.roa (hash: orGvvH8EtrQFqpfDS8Xvz4vEWTgyCI2f9BcO9d6cJBw=)
3: D23FC546011111F1B3598E67446F56BC.roa (hash: vcrWn/T7PWva5wilhUJF83D5sEdB2Zxd5D/0CZVE3OU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Validity
Not Before: Jul 23 05:55:39 2026 GMT
Not After : Jul 30 05:55:39 2026 GMT
Subject: CN=6a61acdb-2b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:97:a3:24:9a:a1:ab:89:d2:58:14:7a:0b:
d8:dc:1e:8c:4d:c2:0c:d9:4e:eb:12:5d:82:3b:7b:
a9:b5:c3:e2:3a:d8:06:df:7a:d0:34:05:cc:e3:26:
86:83:53:e2:e0:e3:84:e2:6f:16:35:6b:63:66:36:
dc:3f:d4:c8:62:42:c4:04:00:36:93:c5:97:7c:15:
c6:5c:ad:36:f8:fb:e0:58:2c:43:f7:6f:fc:c4:d8:
cf:43:37:be:9a:32:e2:9b:05:09:6a:74:e1:75:03:
a8:e7:4d:99:e9:4c:fb:78:59:b4:9e:2d:ae:a9:2f:
74:17:c9:2a:2b:54:6d:8f:6c:92:7a:90:3d:29:c6:
4e:93:28:e7:e4:8f:1b:0d:99:a8:f7:f2:df:f0:a1:
e9:79:76:39:e9:f1:8b:66:82:21:7e:f9:78:de:a5:
e4:56:1d:56:df:26:94:fc:12:06:8f:7f:93:8d:1a:
d9:df:47:5a:10:f9:11:52:63:92:55:cc:b2:b6:a3:
72:be:d4:39:61:9e:64:3b:16:df:6b:d1:32:f9:16:
54:96:8d:fb:99:f6:a1:4b:06:7d:fb:3e:6c:6f:0b:
f2:fd:48:63:91:2d:5d:0d:5e:d3:04:8a:4f:cc:70:
5e:eb:9f:af:8b:58:90:99:e2:67:58:12:62:61:13:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:31:B0:6B:A8:01:A9:68:57:49:34:BC:BA:A2:CB:F8:E0:F6:E6:13
X509v3 Authority Key Identifier:
keyid:58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:08:af:41:21:af:cb:fc:a8:bf:39:ad:b9:d2:cb:59:41:f5:
df:aa:c0:e8:d4:41:03:71:9e:00:09:30:5a:4d:b0:62:f3:3e:
15:40:34:a0:71:63:86:a6:19:34:ae:e7:b4:5f:20:51:62:bc:
db:91:78:e4:01:19:84:fa:6d:7d:9e:a0:26:e6:79:a1:60:d0:
92:1e:25:b1:4f:6f:90:9b:c9:66:4c:83:a8:b2:d8:86:6c:3b:
10:4b:ff:8f:48:48:0e:dd:09:f6:c6:25:d4:d1:c0:7a:e2:93:
ac:cb:20:9c:54:13:a7:91:07:be:ef:7d:e4:66:c3:6c:a3:a5:
a1:da:6d:57:13:93:37:c2:64:e7:42:a0:56:8f:2c:24:7d:42:
26:20:23:61:4d:6b:3b:57:c7:80:4c:57:88:ae:da:f9:99:16:
31:b7:0f:0e:9d:ea:0a:c5:cc:96:13:3b:04:d3:89:9b:81:c3:
57:a4:73:34:af:88:7f:f6:77:e5:76:79:af:0e:1c:f3:e3:79:
c7:14:87:b7:50:ba:6a:a9:88:27:33:f1:81:18:e0:89:2f:ff:
15:75:40:c3:fc:b3:3e:98:92:91:7f:d8:0d:aa:dc:3b:0c:5b:
b1:41:83:3a:6f:78:b0:a9:4e:6a:3b:ff:0f:78:75:44:68:7b:
e3:cd:ef:2b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RUJCMjExMC8GA1UEBRMoNThBQThFNkY2MDlCRjU1ODE0MDM2RDI2QTEyQTVFMkIy
NTE1ODkzQTAeFw0yNjA3MjMwNTU1MzlaFw0yNjA3MzAwNTU1MzlaMBgxFjAUBgNV
BAMTDTZhNjFhY2RiLTJiN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVCJejJJqhq4nSWBR6C9jcHoxNwgzZTusSXYI7e6m1w+I62AbfetA0BczjJoaD
U+Lg44TibxY1a2NmNtw/1MhiQsQEADaTxZd8FcZcrTb4++BYLEP3b/zE2M9DN76a
MuKbBQlqdOF1A6jnTZnpTPt4WbSeLa6pL3QXySorVG2PbJJ6kD0pxk6TKOfkjxsN
maj38t/woel5djnp8YtmgiF++XjepeRWHVbfJpT8EgaPf5ONGtnfR1oQ+RFSY5JV
zLK2o3K+1DlhnmQ7Ft9r0TL5FlSWjfuZ9qFLBn37PmxvC/L9SGORLV0NXtMEik/M
cF7rn6+LWJCZ4mdYEmJhEyZbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsDGwa6gB
qWhXSTS8uqLL+OD25hMwHwYDVR0jBBgwFoAUWKqOb2Cb9VgUA20moSpeKyUViTow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFQkIyL0YwOTFGMDcwRUQw
RjExRjBBODEwMzQwNEExRUU1MjhFL1dLcU9iMkNiOVZnVUEyMG1vU3BlS3lVVmlU
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvV0txT2IyQ2I5VmdVQTIwbW9TcGVLeVVWaVRvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF
QkIyL0YwOTFGMDcwRUQwRjExRjBBODEwMzQwNEExRUU1MjhFL1dLcU9iMkNiOVZn
VUEyMG1vU3BlS3lVVmlUby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCtCK9BIa/L/Ki/Oa250stZQfXfqsDo1EEDcZ4ACTBaTbBi8z4VQDSgcWOGphk0
rue0XyBRYrzbkXjkARmE+m19nqAm5nmhYNCSHiWxT2+Qm8lmTIOostiGbDsQS/+P
SEgO3Qn2xiXU0cB64pOsyyCcVBOnkQe+733kZsNso6Wh2m1XE5M3wmTnQqBWjywk
fUImICNhTWs7V8eATFeIrtr5mRYxtw8OneoKxcyWEzsE04mbgcNXpHM0r4h/9nfl
dnmvDhzz43nHFIe3ULpqqYgnM/GBGOCJL/8VdUDD/LM+mJKRf9gNqtw7DFuxQYM6
b3iwqU5qO/8PeHVEaHvjze8r
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:28:39 2026 by rpki-client