
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
File: WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json)
Hash identifier: xhJTaEThTq21KTyeNwjwfwxwToPRxNqnrsPQf8dRHH8=
Subject key identifier: C5:8D:C3:65:32:B1:9D:BF:90:16:52:EE:66:F5:C8:A6:33:F7:74:00
Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF
Certificate issuer: /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF
Certificate serial: 05B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
Manifest number: 05B0
Signing time: Tue 22 Sep 2026 22:48:29 +0000
Manifest this update: Tue 22 Sep 2026 22:48:29 +0000
Manifest next update: Tue 29 Sep 2026 22:48:29 +0000
Files and hashes: 1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: Jd0vY189ZpUlSwlVWJyIecetmeliNyWKY3fDHbS+Ij4=)
2: 846935702CD911ECA528B744C4F9AE02.roa (hash: W3Qk/GgvroeEd//Qho+96JtyRg5l2Tn2xECANKKJt/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl
rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1463 (0x5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160DF1, serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF
Validity
Not Before: Sep 22 22:48:29 2026 GMT
Not After : Sep 29 22:48:29 2026 GMT
Subject: CN=6ab305bd-738f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:5f:c4:d3:bf:12:21:3e:df:0c:0f:89:4a:
d4:66:33:7f:61:77:f5:98:d9:87:65:e5:69:ec:fd:
0f:04:8d:a4:11:dd:6f:7b:d4:94:76:cb:e7:7a:69:
f2:ec:d1:a5:31:9b:68:bb:08:a6:77:2b:33:15:8c:
ef:5e:58:9a:8c:fd:95:c2:06:3f:38:70:90:20:16:
2c:6a:52:29:a5:93:6a:cc:a7:a8:1e:6a:1c:4c:15:
23:2d:db:4a:f7:cc:fd:5d:c1:72:b0:77:e7:20:a3:
2e:bf:39:c3:1f:4c:4c:f6:e0:14:0e:d8:2f:24:46:
82:0c:e0:5b:17:97:fc:ff:84:71:de:ba:33:32:10:
fe:7d:72:f5:0a:df:ee:94:f0:c7:ff:ce:15:68:40:
08:3e:17:3e:f4:7c:2b:95:a3:98:de:50:d4:75:8a:
a4:0d:77:aa:c5:7f:d6:21:4d:b3:70:0b:a4:69:8a:
f2:7b:ae:d0:76:15:8b:24:d7:9a:0f:ac:38:8a:c0:
ad:1b:12:f0:7b:d5:67:ac:0f:d3:51:29:9a:03:db:
87:65:8e:d4:de:2e:b0:5e:0a:3a:6b:cc:b9:2e:d1:
07:41:fb:58:45:b5:a5:47:bd:71:64:38:53:4b:e1:
2c:b7:c0:08:3b:0b:9a:f9:d5:4f:bc:2f:ff:d0:7f:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8D:C3:65:32:B1:9D:BF:90:16:52:EE:66:F5:C8:A6:33:F7:74:00
X509v3 Authority Key Identifier:
keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ac:a8:0d:01:ae:19:c5:ae:48:08:99:3d:d4:df:7f:22:84:
c5:84:d0:cb:5c:3a:ca:56:e3:5a:29:fd:45:b2:ac:61:c7:0a:
4d:2e:cb:a4:fb:07:90:73:32:a3:7e:95:e4:02:c0:3a:4b:26:
aa:b1:25:f2:a6:73:23:84:ca:cd:40:61:d8:12:54:35:a2:0a:
36:f1:8a:5b:c7:35:60:0e:2c:42:4e:82:5b:c8:10:23:61:f2:
e0:79:6d:6c:2e:48:de:2f:d7:e4:77:7c:9c:47:1c:62:0d:d8:
c0:b3:cb:a2:fa:d6:02:4b:72:89:cf:30:6a:3f:d4:c7:e5:0c:
40:cc:03:ed:01:e3:d0:3f:29:87:a2:94:0f:51:b6:97:4a:3c:
00:88:ec:d0:b7:87:eb:2e:e1:a2:b7:eb:cf:21:95:bf:62:73:
98:ea:0e:5a:2d:6f:8f:0a:43:a7:8f:a3:90:bf:cf:f3:e7:ad:
82:33:26:8e:97:ef:f9:84:a0:72:ea:7b:a8:21:7d:60:d0:f0:
4a:d2:4e:03:62:db:15:cc:81:8a:09:00:44:6a:4c:55:21:7e:
26:b4:73:50:61:34:03:10:06:36:40:dd:28:f1:f8:eb:c6:b0:
3b:7a:ae:e9:ac:2b:18:23:b1:8a:a9:52:01:17:32:f3:55:da:
a9:c4:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:54:12 2026 by rpki-client