
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
File: WKqOb2Cb9VgUA20moSpeKyUViTo.mft (raw, json)
Hash identifier: N4i4zlh97+mtvVXNx+UuAZA4SzYe7m3PvktJs/HyKAs=
Subject key identifier: 76:9A:80:DD:A6:FE:83:11:B3:FD:F4:42:3B:44:25:6D:E8:92:DA:1A
Authority key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
Certificate issuer: /CN=A914EBB2/serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
Manifest number: 93
Signing time: Sat 03 Oct 2026 04:43:07 +0000
Manifest this update: Sat 03 Oct 2026 04:43:06 +0000
Manifest next update: Sat 10 Oct 2026 04:43:06 +0000
Files and hashes: 1: WKqOb2Cb9VgUA20moSpeKyUViTo.crl (hash: SPK8IM8QIg2rkW++p/UGe3R1Z2HUiGBYWULTMwVF3ck=)
2: D23FC546011111F1B3598E67446F56BC.roa (hash: vcrWn/T7PWva5wilhUJF83D5sEdB2Zxd5D/0CZVE3OU=)
3: 651B78142DD711F187F45729B3833773.roa (hash: orGvvH8EtrQFqpfDS8Xvz4vEWTgyCI2f9BcO9d6cJBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Validity
Not Before: Oct 3 04:43:06 2026 GMT
Not After : Oct 10 04:43:06 2026 GMT
Subject: CN=6ac087db-00b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:a8:38:94:1d:eb:82:73:50:6d:1b:c0:7d:
a4:13:db:b9:3b:e5:bf:5c:32:77:65:6a:cb:6d:f6:
da:74:04:43:3b:70:5e:8d:ca:be:f9:3b:b4:d7:6d:
8a:4a:1d:a9:4b:a8:23:d4:e2:24:b7:47:f5:6c:05:
65:b3:73:94:f6:c8:98:e6:71:c3:77:e8:d3:24:b1:
2b:c6:f2:07:cb:a7:44:86:80:64:de:d1:6e:75:4b:
70:3d:e1:1b:3d:6d:80:d9:0a:29:56:4b:ac:35:9e:
0a:ed:96:5b:b2:40:ae:ed:67:7d:fe:31:af:a3:40:
42:8c:80:14:9a:c2:9d:3a:9f:0d:83:b5:b6:14:13:
06:38:88:e1:b9:a0:cf:0e:bf:7a:64:5c:d9:4f:f5:
23:ae:24:52:8b:bb:b6:c5:a1:1c:d1:6a:12:fa:0d:
2c:06:e0:07:56:bd:97:3f:22:d0:33:e7:23:37:44:
0c:e6:4c:73:43:67:31:e1:76:7b:da:d2:c4:95:09:
5f:e8:78:b3:15:37:fb:77:a2:8e:61:4c:19:a4:18:
af:4c:1e:28:00:c0:73:0d:92:9d:0a:87:3b:7a:c7:
2f:c2:35:3e:bc:c8:5a:73:35:e0:eb:7a:94:ed:3a:
f1:b8:54:52:be:52:ca:0b:e0:5b:97:8b:3c:63:52:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9A:80:DD:A6:FE:83:11:B3:FD:F4:42:3B:44:25:6D:E8:92:DA:1A
X509v3 Authority Key Identifier:
keyid:58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:a6:6a:56:14:3f:4f:6b:14:56:c3:86:91:0e:41:3d:39:d5:
65:69:aa:71:a0:94:30:8f:75:7b:1d:e1:e5:0f:a8:48:d1:64:
dd:8b:73:51:f4:4d:21:e9:04:e2:b0:21:41:88:0f:31:e1:b6:
d2:da:3b:59:fd:58:9d:cf:65:3e:7d:bd:fc:f0:df:95:aa:a5:
d2:ab:fe:d2:5c:b6:88:19:90:ae:d8:58:29:92:e2:c6:b6:5b:
f4:67:91:a9:a3:3d:76:2c:f4:8e:49:5c:c8:a2:f4:86:01:9c:
a2:3f:b1:e7:ee:02:53:f4:da:70:ca:83:88:9b:a1:78:71:be:
f5:b6:a0:42:10:56:14:bf:82:cd:78:6a:66:11:ab:f2:ed:be:
70:e5:8a:2d:29:47:e2:a8:43:f7:1a:11:f5:d4:5a:4e:2d:46:
5c:d1:ee:90:3d:d2:1e:ce:99:19:ce:e5:e1:d9:f3:6c:e8:30:
6f:cb:48:c2:d9:aa:34:f0:2a:80:0c:8b:e2:fa:8d:8b:db:b9:
51:79:2d:1c:fc:b8:6a:21:7b:da:0a:99:ed:51:5f:51:47:10:
5f:27:cc:fd:12:73:a7:3e:83:31:4d:6c:b4:d2:f7:22:3f:ab:
3d:71:e3:d0:15:1c:e7:44:03:df:0d:ea:b4:03:06:22:3d:f2:
7c:63:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:56:17 2026 by rpki-client