
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json)
Hash identifier: qZaoKIb/GD8fWmyO76Tzwr5zDdH29ONAmYIs6VcUMC8=
Subject key identifier: ED:B8:58:84:87:C8:18:9C:E1:6C:65:C2:AD:67:9A:14:EC:4A:A6:80
Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Certificate serial: 0650
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
Manifest number: 0647
Signing time: Wed 22 Jul 2026 23:26:26 +0000
Manifest this update: Wed 22 Jul 2026 23:26:26 +0000
Manifest next update: Wed 29 Jul 2026 23:26:26 +0000
Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: BIUZpLXralg+UxPLqVPHtWhB77eJE7dy4R1fBzLZpzs=)
2: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (hash: hM4BPVux9YYhFTFUn31M+wA3pgU5Mg1/NkcXZA6rsfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1616 (0x650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Validity
Not Before: Jul 22 23:26:26 2026 GMT
Not After : Jul 29 23:26:26 2026 GMT
Subject: CN=6a6151a2-4780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:02:a8:ae:f6:ab:df:b8:3a:75:08:e3:e7:
57:b6:ec:a8:6b:70:0f:89:4f:18:8a:80:7c:c8:10:
0a:27:20:3b:43:b0:5b:09:36:8c:d8:67:ee:d9:27:
60:ef:eb:a0:85:14:b6:05:77:89:9d:de:d6:c9:7c:
45:63:94:88:9b:e0:84:05:5a:b1:68:64:7a:45:fc:
56:fa:1e:54:ab:13:b8:c6:73:fd:b4:c2:ad:e3:07:
c0:7e:9a:d9:66:72:36:54:d7:8b:d5:f7:fe:14:9c:
78:57:c9:94:9d:d3:70:7b:38:be:89:67:72:95:a6:
28:16:bd:97:be:ed:e8:fe:4c:a0:19:2b:49:eb:29:
f7:78:b9:66:66:69:de:bc:ae:f0:91:9f:08:30:be:
18:3f:64:af:99:85:3d:b3:8f:91:ac:37:01:5c:34:
e9:ad:b1:7c:00:3e:bb:72:6f:6a:44:eb:29:8d:22:
68:37:ca:3d:b7:64:c4:f8:a8:82:33:77:3a:91:70:
8d:50:2c:98:68:3b:09:1d:73:12:5d:a8:67:c5:8c:
84:a7:ce:ff:e8:b7:c9:a0:32:14:ee:e9:6b:86:4b:
26:5e:a7:b4:23:21:51:12:2a:73:09:17:7b:81:6a:
7d:22:1c:84:6c:4b:6f:d4:1e:9b:5a:43:b6:42:29:
5a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B8:58:84:87:C8:18:9C:E1:6C:65:C2:AD:67:9A:14:EC:4A:A6:80
X509v3 Authority Key Identifier:
keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:ce:b0:0d:e2:a4:30:ae:3b:60:c6:b0:57:c1:a3:db:9a:f0:
2b:76:71:62:86:f5:cd:e4:a1:d7:fa:64:fa:38:d7:38:8f:bf:
57:d5:f0:5f:b7:43:30:48:16:43:02:a2:d5:6e:e5:46:96:e2:
60:74:65:53:57:7f:ca:52:5c:79:4b:1e:37:01:8f:4d:39:39:
23:01:ed:73:63:a1:2d:c1:9f:de:8d:f8:88:fa:7b:e8:71:b7:
8b:96:c2:17:c7:86:f1:e9:e8:28:36:da:45:7b:df:c6:fa:c0:
07:e1:59:60:d3:79:67:41:12:1e:73:a4:c7:6c:54:6f:4d:92:
3f:61:f7:e5:74:46:3c:88:f2:f2:c5:87:0a:de:11:52:14:ad:
2f:6a:3f:a2:fd:84:71:fa:ac:35:50:f7:d3:02:b6:2b:9d:dc:
71:e1:ca:be:6d:da:77:21:b2:ba:15:4e:3d:a8:1f:ad:bd:d7:
f5:84:14:57:9e:60:45:90:10:d0:a5:3e:aa:b5:1f:cc:8e:47:
ce:59:dd:68:2b:f9:bd:e9:8c:88:a4:7a:f0:d2:42:a7:8d:69:
79:e2:43:47:a2:6c:47:1f:0d:6d:77:84:47:7b:9a:16:a7:d4:
10:f3:0b:6b:30:a8:8c:cc:7c:d1:db:aa:94:70:89:ac:25:c6:
a0:b5:51:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:15 2026 by rpki-client