
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
File: WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json)
Hash identifier: tzzC2X6FarWjcCcnKDOEaXc8jlUDVaZMoCMxpaaVQpQ=
Subject key identifier: 67:21:42:1E:8D:CF:9D:5D:AC:A6:90:C7:61:8C:4C:24:0E:C2:D5:68
Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF
Certificate issuer: /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF
Certificate serial: 0570
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
Manifest number: 056A
Signing time: Tue 12 May 2026 23:26:35 +0000
Manifest this update: Tue 12 May 2026 23:26:34 +0000
Manifest next update: Tue 19 May 2026 23:26:34 +0000
Files and hashes: 1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: kdRSigojsnFtVYQUTWe4EFN/RPJg3fMMBzRB+gkuUHY=)
2: 846935702CD911ECA528B744C4F9AE02.roa (hash: Rx8c2/nFV7enk7jXl4vzWbU4QjFW1Gfdl0mQ9/3oQuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl
rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392 (0x570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160DF1, serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF
Validity
Not Before: May 12 23:26:34 2026 GMT
Not After : May 19 23:26:34 2026 GMT
Subject: CN=6a03b72b-50d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:0b:eb:73:f1:69:f3:56:5b:c6:78:97:ad:
24:7d:8c:16:db:53:9a:06:59:c5:d2:4b:c6:1b:e9:
b5:37:13:8c:3c:6b:46:49:fb:69:28:4a:0b:86:d9:
45:16:52:bc:5c:e1:62:c1:2a:70:28:3e:1f:9a:0b:
81:c7:84:c7:77:99:e3:17:e5:89:d6:bb:6a:e7:45:
b2:be:2f:eb:e9:f7:cf:e2:ea:b8:fc:6e:55:5f:52:
ab:58:e4:5e:3f:cf:73:85:df:30:b0:de:90:ad:eb:
95:fe:94:17:07:3c:a8:07:a6:31:de:af:54:fc:8c:
5f:6b:5c:75:30:db:ec:8f:8f:11:c1:d3:66:c7:af:
83:b3:d4:8a:c9:7d:30:67:f4:35:d1:46:2b:4d:c5:
ce:fe:c1:a1:88:56:eb:00:bf:32:e8:33:72:00:3a:
e6:7a:9d:31:14:6d:33:b2:c5:fc:ef:d3:2b:f2:df:
a3:37:87:7a:fe:9b:f8:07:b5:eb:9f:1e:57:f3:76:
32:96:4d:9d:3a:53:52:cd:7a:16:44:24:8b:f2:cc:
2f:51:3c:29:14:14:62:e5:10:d0:5e:96:6c:72:2f:
fe:37:bf:4e:e7:84:4f:84:82:af:85:df:18:6d:61:
b2:b5:3e:9b:42:b8:51:2d:d6:a2:f2:3a:da:19:af:
62:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:21:42:1E:8D:CF:9D:5D:AC:A6:90:C7:61:8C:4C:24:0E:C2:D5:68
X509v3 Authority Key Identifier:
keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:22:1b:88:a0:19:17:32:cb:1e:c8:8c:11:dd:94:a1:23:32:
66:f0:7f:84:b6:de:27:bb:e6:1d:61:df:a7:0c:af:e1:4a:ea:
90:61:7b:8d:4d:83:92:53:20:1e:be:0e:9d:67:9b:18:75:dc:
39:40:a6:1d:33:c5:04:c4:62:7f:6e:fa:ee:2b:a0:b7:71:3c:
89:5c:12:70:7f:86:71:b0:b5:21:4f:6a:30:9d:b4:47:eb:fc:
78:dc:ed:32:e3:5d:92:37:6c:2e:11:6f:3c:3c:fb:0f:8e:1c:
5a:b1:1d:94:e7:ce:16:b0:24:e4:97:5a:5c:2a:6e:38:24:eb:
dc:98:50:b8:2d:4f:4e:60:b2:20:56:a5:79:16:d3:70:8f:90:
99:ef:5a:48:4c:6b:2e:94:0a:79:6f:c4:16:1c:05:c3:fa:94:
21:88:78:3a:d6:af:db:35:f6:3b:99:90:c8:d1:51:91:b2:b0:
a6:e2:81:b0:89:01:c0:25:bb:8e:2d:3d:bc:14:76:0c:b6:e1:
10:2a:dc:7a:1f:24:1c:cb:f3:61:db:ed:97:c9:a8:b4:08:26:
6f:f7:ee:fc:e7:d1:6c:a9:55:03:ed:f3:bd:5a:dc:b5:e9:dd:
e4:4d:da:33:a3:08:f0:ad:37:1a:27:58:ae:bb:bc:21:e5:91:
61:f0:43:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:39:32 2026 by rpki-client