
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json)
Hash identifier: edcCEShSNDVg8VklN3bd3s0rVInnYCfsnGlNgVPZbWc=
Subject key identifier: 6C:78:98:A2:CB:CC:67:D6:54:D4:22:25:6E:48:C3:07:D1:1B:62:E7
Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Certificate serial: 0D5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
Manifest number: 0D0C
Signing time: Thu 24 Sep 2026 18:18:37 +0000
Manifest this update: Thu 24 Sep 2026 18:18:36 +0000
Manifest next update: Thu 01 Oct 2026 18:18:36 +0000
Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: mDSp7DhzibWWQVf6GCqFdxqmzDKHttBERVcfD5fI04s=)
2: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: 3FuLmxDCD+MP2E5xN50Lj/x322ZG9I8Yf6S6pBk1v9I=)
3: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: AHwHR5P2unOzFbZF5/kMyWr9jBEmZP7l5z9TXIMdKwk=)
4: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: EvFkN9ZYuEFDBnjNtq9mVeqEYzT9yDvOX5AijaVncLY=)
5: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: AHjXiMIEVnSzV4RLfQ08q+VyTYzKnjva9QjgZk6PmpU=)
6: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: ljKSat9M5iVgEMjN0irLGI7aCNi5tcJLeC8QiDxfwJM=)
7: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: 9QLph5XKLgZKwZp92nb4WN3QSXDopmzK9+Xmf9Dp/gQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3418 (0xd5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Validity
Not Before: Sep 24 18:18:36 2026 GMT
Not After : Oct 1 18:18:36 2026 GMT
Subject: CN=6ab5697c-7f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:60:27:23:9f:46:db:c7:c1:fe:d4:b4:54:
47:7f:1f:aa:75:b4:09:e7:2c:83:da:c0:d9:2f:f2:
f7:69:f8:5f:f5:86:0e:cb:2a:24:d1:7c:d6:50:ea:
a7:64:21:ff:38:6f:26:3b:82:52:21:bd:34:2d:5b:
56:20:cc:04:1d:5b:ca:f9:b2:6d:85:82:d5:b7:24:
a4:5c:24:5e:d3:6c:66:f2:b4:a5:08:9b:b6:bd:6d:
86:e8:3b:2d:57:31:0f:9b:47:7b:6a:97:bd:4b:9d:
0f:63:e7:9b:54:5d:b3:9b:41:d3:39:5c:46:29:8b:
d6:83:70:30:49:47:a3:c7:f7:a0:92:52:6f:15:f9:
6c:31:e8:ef:e0:f7:b5:be:e3:b8:99:cf:91:2f:4c:
7c:cf:c3:fe:11:15:db:92:cb:c9:84:25:25:ee:99:
90:f8:97:7f:0e:76:ff:f2:b9:2f:34:f1:dc:4c:86:
14:87:90:74:66:57:21:13:0e:d2:c3:33:19:31:1d:
ca:95:17:55:4e:a1:f1:e7:6c:36:75:64:86:4a:b8:
99:92:f9:d3:46:45:3a:8a:f8:91:fa:34:2c:49:6c:
06:d7:3a:cd:cf:8e:f5:52:78:a9:98:ad:61:42:51:
66:ed:9f:b8:40:4b:d5:a6:07:8a:08:91:84:97:4d:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:78:98:A2:CB:CC:67:D6:54:D4:22:25:6E:48:C3:07:D1:1B:62:E7
X509v3 Authority Key Identifier:
keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:21:ea:e4:7a:99:f6:c8:38:76:df:fb:ca:36:3b:fa:21:24:
93:36:e2:71:c0:fe:4d:76:04:91:68:93:8c:e1:5c:ea:d6:1a:
40:36:f5:6b:20:86:b7:62:b7:35:ea:88:bf:42:88:aa:3d:54:
72:58:40:9a:6d:e7:10:97:f7:a9:25:6d:d5:ab:e1:a5:9c:84:
5b:b2:ed:3b:8b:cd:f0:3b:f3:b8:a8:47:63:16:24:5b:4c:02:
a4:7a:8b:d4:ea:06:ee:6b:22:56:cf:4b:54:70:99:84:35:d6:
f3:d1:c5:5e:a4:71:20:fa:c1:47:89:12:3b:f0:a2:40:51:07:
33:8e:69:da:24:68:59:57:82:9d:49:41:3c:38:56:51:b2:48:
70:21:c0:76:1b:27:16:bd:95:67:24:5f:cd:90:ae:bc:3f:11:
ff:1e:52:04:59:e9:ce:ba:76:08:ca:d6:c7:66:2e:e9:77:87:
0a:3e:47:61:5e:f9:96:db:5c:ca:76:13:99:98:5e:1e:97:ba:
8b:22:9d:39:42:4d:69:6b:e9:be:d4:48:12:25:db:48:62:b8:
6a:47:01:18:fe:0d:42:90:49:86:16:2a:9a:c5:ac:cc:a8:dc:
46:09:31:b1:d9:bd:a2:74:c4:38:43:61:39:72:cb:c2:ed:47:
cd:84:61:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:35:13 2026 by rpki-client