
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft
File: _whTCVKXG6BlIktSH1ZWO20hJO0.mft (raw, json)
Hash identifier: v7GwbOF942UqKkT1l1FArLSTLZSqMV+XrCK2EGR9AkU=
Subject key identifier: 33:E6:63:6B:8A:0A:47:9C:10:A9:51:68:A8:A5:C3:59:2C:56:CE:07
Authority key identifier: FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED
Certificate issuer: /CN=A917E475/serialNumber=FF08530952971BA065224B521F56563B6D2124ED
Certificate serial: 0DCB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft
Manifest number: 0DC2
Signing time: Wed 22 Jul 2026 18:06:46 +0000
Manifest this update: Wed 22 Jul 2026 18:06:45 +0000
Manifest next update: Wed 29 Jul 2026 18:06:45 +0000
Files and hashes: 1: _whTCVKXG6BlIktSH1ZWO20hJO0.crl (hash: OBKI6tCA9UxJsFAfcw0Qi6pUIH+Zrc3wi2Safhg3n2w=)
2: 3A8AC908E41C11E9AD4A8D16C4F9AE02.roa (hash: n4Sr8XQlMSqL6gzDWm/TDckqQSOFH1CNlIw47oAhdDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.crl
rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3531 (0xdcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E475, serialNumber=FF08530952971BA065224B521F56563B6D2124ED
Validity
Not Before: Jul 22 18:06:45 2026 GMT
Not After : Jul 29 18:06:45 2026 GMT
Subject: CN=6a6106b5-f994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6e:48:bf:24:30:2a:19:fe:04:d2:c5:37:a9:
65:6a:a9:59:6b:b6:ec:7a:e8:75:b0:bd:e4:30:f1:
5d:b0:9c:ee:c1:89:ae:4f:0c:b1:eb:d6:d5:2f:74:
3c:96:e5:7a:34:ef:7c:53:f1:c6:0e:0e:37:09:1a:
56:5e:2e:75:26:2b:be:28:0d:d6:86:07:78:db:ec:
fd:9d:c3:5e:0b:ca:c7:51:31:5a:44:58:6b:69:93:
9c:0a:e4:12:9c:23:22:d4:5d:33:e3:31:e7:dc:02:
d2:9d:ee:b0:0f:f7:60:a5:dc:45:0c:59:21:81:47:
07:7d:2f:be:d4:c6:c1:b3:08:ab:5c:fa:1f:ee:73:
42:33:1e:5b:cb:a5:2f:ab:4b:c1:8f:02:ca:50:14:
cd:6a:76:23:cc:d1:5f:69:32:13:58:82:52:9e:ac:
e5:eb:55:df:ae:df:7b:e8:02:d6:cd:95:c0:d8:b8:
d2:90:a7:25:9e:2b:75:99:97:6a:1f:3f:3e:bb:7d:
80:30:34:35:73:1b:fa:bf:e9:4e:a3:93:0a:b6:f4:
8b:23:fd:f9:1a:2d:4d:a6:39:86:a4:a8:44:c3:45:
6e:df:0d:9e:e4:40:26:6f:99:2f:99:b8:0a:65:56:
ef:d3:8e:db:44:62:f7:a1:b2:35:f5:ea:0c:b4:4f:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:63:6B:8A:0A:47:9C:10:A9:51:68:A8:A5:C3:59:2C:56:CE:07
X509v3 Authority Key Identifier:
keyid:FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:60:b6:2f:4b:7a:1c:4c:44:b2:ad:f0:2c:cf:41:5a:70:ad:
77:73:5b:01:fe:e5:c7:6a:30:51:f3:3e:e0:3b:25:69:45:46:
80:fb:75:63:54:65:ea:07:f1:37:ac:2b:f1:72:1f:d1:c0:c6:
5e:0a:22:46:0d:8e:ce:9e:db:de:ae:2a:a1:84:1f:1a:9c:fd:
27:dd:b2:bc:be:c1:b3:a5:47:97:a8:47:0b:7d:35:a4:6a:a7:
73:a7:38:e8:d1:fc:27:4b:30:2a:b7:fa:9b:8c:28:24:91:7a:
12:b6:ae:22:92:20:f0:c1:1d:42:ee:88:07:ab:72:cc:92:08:
bc:41:14:b8:6f:ae:da:57:0b:1e:97:4f:dc:c5:92:1a:30:7b:
4c:65:78:0c:d8:b0:7d:6f:d4:ed:d9:e9:60:54:79:c6:5c:48:
d9:07:83:4a:bd:23:fa:22:8c:9c:ca:e0:ce:0a:fe:d1:24:d4:
74:e9:f4:13:2d:de:27:7b:95:35:85:eb:4f:3b:d3:84:b8:11:
eb:74:a5:9c:02:ee:26:fa:f2:4e:73:f4:8c:b9:ed:f5:06:cb:
e1:3e:14:98:af:9b:19:20:f4:c4:39:a8:b0:1e:35:60:4b:a0:
55:3b:7f:6c:21:cb:57:aa:96:73:44:b8:2f:54:5f:12:10:7a:
5b:fc:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:40 2026 by rpki-client