
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json)
Hash identifier: QnX409BA/rMe5yc49trfPg4h5tK/cfbbxqO1LFJs4OM=
Subject key identifier: 7E:5C:B8:9D:E2:5D:D9:DA:0F:B3:EA:E4:0F:0B:01:7E:1D:F3:27:7B
Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Certificate serial: 0D39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
Manifest number: 0CEB
Signing time: Wed 22 Jul 2026 18:39:34 +0000
Manifest this update: Wed 22 Jul 2026 18:39:34 +0000
Manifest next update: Wed 29 Jul 2026 18:39:34 +0000
Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: Se9s1JS9U+mpnpikCzLqFp2qWh4Qt/gSvdVf7N2YWqs=)
2: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: 3FuLmxDCD+MP2E5xN50Lj/x322ZG9I8Yf6S6pBk1v9I=)
3: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: AHwHR5P2unOzFbZF5/kMyWr9jBEmZP7l5z9TXIMdKwk=)
4: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: 9QLph5XKLgZKwZp92nb4WN3QSXDopmzK9+Xmf9Dp/gQ=)
5: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: AHjXiMIEVnSzV4RLfQ08q+VyTYzKnjva9QjgZk6PmpU=)
6: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: EvFkN9ZYuEFDBnjNtq9mVeqEYzT9yDvOX5AijaVncLY=)
7: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: ljKSat9M5iVgEMjN0irLGI7aCNi5tcJLeC8QiDxfwJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3385 (0xd39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Validity
Not Before: Jul 22 18:39:34 2026 GMT
Not After : Jul 29 18:39:34 2026 GMT
Subject: CN=6a610e66-1e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:f6:45:24:3a:89:94:f8:8d:06:db:05:c8:
20:de:75:e5:8d:c7:4c:ef:3f:67:e1:96:1d:a0:28:
1d:c0:33:a7:75:ba:1a:55:5d:c6:fa:69:7b:24:6f:
4d:3b:00:01:3e:f4:f1:67:21:56:1e:0f:c1:0e:56:
90:fe:2c:7e:a1:2d:5a:9c:55:20:d2:1c:0a:65:e3:
a2:57:cc:73:1f:37:ba:a9:1f:a8:44:ef:26:46:51:
48:6e:d4:f7:1f:4a:ea:a5:99:87:5e:3d:54:3e:a9:
28:70:f4:6a:33:41:8c:b2:cf:f8:d3:87:cf:22:f2:
70:ee:48:e2:6a:a1:d5:83:e1:ff:c9:ec:cc:6a:f3:
94:b4:77:1f:44:3d:90:19:c9:38:ad:0d:46:a2:67:
38:ba:1f:1f:36:b9:b3:3f:09:5d:56:57:44:f7:90:
d3:86:24:e1:b1:7a:5f:6c:47:3a:cd:a5:23:c2:9f:
76:01:f2:16:a9:21:07:4a:91:7e:6d:9d:44:84:7a:
be:e3:26:27:92:d9:93:a9:f7:99:a5:0a:69:d8:a1:
e8:df:cd:ec:0c:be:b6:79:76:8a:59:6b:df:06:ed:
29:26:21:d3:a8:9e:53:34:15:66:ad:51:a3:b6:77:
04:c6:55:f5:d8:f4:f9:6c:4e:ec:ed:97:aa:63:c4:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:B8:9D:E2:5D:D9:DA:0F:B3:EA:E4:0F:0B:01:7E:1D:F3:27:7B
X509v3 Authority Key Identifier:
keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:4c:5f:ca:a7:46:96:dc:60:ca:d9:e0:74:99:8d:bb:03:14:
03:4c:e4:5d:e7:7d:01:b8:2a:4c:5d:df:4b:5c:4e:68:5b:09:
09:ab:20:65:bb:40:f3:bd:9c:f2:40:7c:5a:86:1f:f2:da:0a:
d7:ba:84:8a:6c:50:c2:a0:9b:a0:6d:de:c2:f4:f2:c5:4f:df:
02:6a:4a:fe:ff:68:26:eb:f6:0f:99:9f:6a:96:4e:91:96:75:
8a:31:1f:24:e4:be:a0:f1:fd:39:b4:5c:e2:f9:ff:c5:0e:a3:
df:ba:7b:52:d6:18:2f:35:0c:d4:2c:8e:10:50:41:91:7d:21:
c0:94:b0:b3:69:52:a7:7b:ee:e7:7f:bf:d1:3b:1b:ba:b0:94:
9e:2e:c5:fb:6a:bb:1c:09:80:d9:22:c6:9d:e8:1c:12:7c:9e:
75:9d:22:42:86:53:c3:1a:21:af:27:9f:86:2e:93:ce:29:18:
93:36:06:d6:19:94:37:ee:28:8e:83:31:3f:7d:d0:53:e6:42:
e9:d8:19:20:37:a5:16:17:0d:5e:46:33:64:28:e5:4c:d7:4d:
ce:0b:9e:8e:52:be:51:ae:42:a9:cb:db:d1:f1:ba:82:fb:e3:
13:e0:7f:01:9b:7e:cb:ed:b3:8c:f4:36:d2:b2:80:6b:4b:5c:
ca:60:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:24 2026 by rpki-client