
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
File: WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json)
Hash identifier: xZ51eqTDfFDWcFCKEEgQlifVxMQFdIUgf5R/+oB2pJY=
Subject key identifier: 12:66:CE:62:8C:43:49:87:BD:13:45:FC:26:C4:0D:C0:FF:C2:53:05
Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Certificate serial: 0251
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
Manifest number: 0248
Signing time: Thu 23 Jul 2026 03:45:29 +0000
Manifest this update: Thu 23 Jul 2026 03:45:29 +0000
Manifest next update: Thu 30 Jul 2026 03:45:29 +0000
Files and hashes: 1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: d0evuiyoNaO31qn8dAJB9z22Ox1aU6IwsQ5jCsteyBs=)
2: 7893F3DC0B8511F086B2C121C4F9AE02.roa (hash: 6s8dW9eLTERLyjzRmVjBJQp0yaZ34l8yCtxJv23gVCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl
rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Validity
Not Before: Jul 23 03:45:29 2026 GMT
Not After : Jul 30 03:45:29 2026 GMT
Subject: CN=6a618e59-bf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:6b:1d:dc:8b:a0:8a:e7:95:c8:5f:96:3e:
b5:a4:e8:55:62:ac:42:5f:0c:46:1a:4a:be:08:6c:
ff:22:11:53:95:f2:b8:20:30:e0:d9:d3:e7:c8:aa:
73:f2:25:41:d0:01:c5:c3:6a:2b:e5:e4:a6:33:77:
a5:31:ba:12:0f:4f:7e:11:f8:5b:9d:85:56:37:dd:
05:b1:fe:5c:93:28:48:b8:f4:c0:df:43:3e:43:f5:
bd:b1:a1:b0:d3:f0:14:41:17:b8:9d:9c:38:49:f5:
b1:1e:17:bb:3d:9b:4c:27:71:55:5d:bf:dc:31:63:
b3:f3:9f:ac:90:78:16:47:4d:e1:57:e3:01:14:e4:
bb:d0:4c:d7:1a:96:66:7b:1b:e5:eb:fb:46:2b:84:
8f:67:48:68:fb:29:cc:34:f5:ed:05:31:02:e1:44:
4e:6d:c1:c2:52:3a:b4:d6:14:a4:a4:e8:8b:d8:5f:
a0:22:49:9b:6a:b3:e8:9a:7c:c2:c6:82:bc:3a:eb:
eb:d7:59:e4:21:b0:98:6a:5d:fe:07:a4:56:c0:06:
86:86:20:da:09:1c:26:f3:55:fd:21:7e:1d:2a:f0:
55:14:4e:b0:56:47:64:e7:81:9c:23:be:5b:58:2d:
fa:89:7c:69:e3:1f:50:32:3c:e8:ea:77:11:39:c1:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:66:CE:62:8C:43:49:87:BD:13:45:FC:26:C4:0D:C0:FF:C2:53:05
X509v3 Authority Key Identifier:
keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:aa:1c:52:ea:22:bb:4a:d7:f4:e9:1b:b7:78:e0:ea:e0:a5:
1d:d5:b8:bb:d3:2e:79:c2:2a:c6:d7:7f:5d:c9:d0:d3:59:27:
57:38:d2:74:a5:f4:cb:7c:ab:9f:51:93:02:9a:c7:14:df:6c:
85:ad:f2:2f:c6:76:fe:54:db:3f:ca:5b:b9:49:32:31:74:ca:
75:7b:0a:74:c9:69:22:d6:fe:21:bb:28:86:0d:58:83:71:62:
e8:93:45:75:9d:33:49:e5:14:6f:7c:5a:83:0d:38:66:d5:8b:
02:34:0c:4a:da:f2:2b:3d:17:3f:4d:a2:a9:12:2c:6e:cc:8e:
0d:c8:06:3d:94:d3:97:21:77:d5:c1:47:82:d2:a5:24:d5:3b:
23:ae:57:8e:f9:aa:b3:48:8a:0e:fc:26:2f:9e:fb:9c:04:05:
6f:43:eb:88:aa:16:87:5e:dc:c9:fa:15:cf:96:32:4c:c5:e4:
b4:df:0b:3e:cf:73:6a:99:07:09:31:70:d3:48:f7:fb:ba:d2:
4b:05:89:f0:ab:bd:7d:6b:b4:7c:94:26:2e:d2:ec:5e:32:c6:
b2:54:09:54:76:5f:ad:1f:7b:26:c2:c2:64:ef:3e:61:f7:1f:
03:f8:b2:ca:f7:7e:6a:28:12:6a:c0:23:33:b0:17:bc:11:6f:
d4:60:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:20 2026 by rpki-client