
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
File: WWtkT4ORAfVZi9Egyt6VSFGgzko.mft (raw, json)
Hash identifier: A3EhbyeNwz0PvxOkKOPOfOAssgD0HNIdqwq2kY5kG9E=
Subject key identifier: 9C:0F:EC:2B:14:19:AA:C2:D9:66:29:82:19:7B:C4:6A:20:9A:FE:E0
Authority key identifier: 59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A
Certificate issuer: /CN=A91AC1CF/serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
Manifest number: 45
Signing time: Thu 23 Jul 2026 10:26:10 +0000
Manifest this update: Thu 23 Jul 2026 10:26:10 +0000
Manifest next update: Thu 30 Jul 2026 10:26:10 +0000
Files and hashes: 1: WWtkT4ORAfVZi9Egyt6VSFGgzko.crl (hash: aD1+plz/s0WD8hXbZHheSLWtDMaRTHlo01fx9JAKGbA=)
2: 840FB8CC1DAE11F1AA3EBAC03D3D8C67.roa (hash: r5BB+japYC6seEdkVZLK22Dexuxs6mCJDX2FzRf3yv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl
rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC1CF, serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
Validity
Not Before: Jul 23 10:26:10 2026 GMT
Not After : Jul 30 10:26:10 2026 GMT
Subject: CN=6a61ec42-8040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:cf:17:a0:f9:23:74:72:21:d0:e2:65:f2:
27:8f:99:fa:b4:88:5d:99:08:63:8c:4d:8f:2e:c5:
e0:2f:d5:cb:19:1c:72:af:26:f7:43:91:94:9b:c8:
0c:85:5a:6a:69:01:b0:04:15:37:c8:21:fc:e7:00:
c8:16:86:d1:72:86:6e:34:8b:84:4b:b3:92:d0:65:
b3:56:df:30:6d:5f:2b:97:92:1a:9a:ca:85:c0:8c:
41:99:78:90:f0:a9:8c:ce:65:66:ef:75:bd:14:7c:
17:58:cc:db:7c:21:16:79:71:d9:d5:08:cb:45:fd:
c8:1d:8b:ff:60:e8:42:5f:6d:83:e4:fe:1f:fd:82:
4d:b7:e0:7f:06:72:71:7e:e6:fd:1b:7c:5d:e7:18:
19:e3:aa:77:f5:0a:ba:64:5a:ae:ae:54:45:6f:31:
44:af:d8:7b:2e:3b:b9:af:20:bc:e7:b6:0f:f5:5f:
28:92:77:fb:cf:72:e1:2d:46:32:a1:bc:e5:e0:88:
9c:b5:65:5b:26:6a:33:f8:f5:d5:fa:9c:ea:41:55:
a9:5e:e2:dc:70:41:68:05:e4:e6:d7:ff:47:fa:30:
a6:70:a2:da:2e:b7:cf:fa:1f:15:e5:17:45:a7:49:
e5:d6:b5:d5:66:b5:04:39:38:de:28:db:1f:df:d5:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0F:EC:2B:14:19:AA:C2:D9:66:29:82:19:7B:C4:6A:20:9A:FE:E0
X509v3 Authority Key Identifier:
keyid:59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:70:5e:cc:bf:b3:02:4e:86:73:2a:91:66:f8:cc:05:50:50:
16:5c:41:22:db:0a:1f:13:14:24:76:69:1c:c7:01:d9:a3:11:
be:4a:62:52:42:61:ff:c3:9c:b7:96:15:96:8a:6b:27:af:8f:
9f:f5:68:ec:18:4a:0b:2b:30:82:15:c8:76:f8:84:b4:ca:76:
bb:4b:11:5d:dd:da:ae:54:9d:2c:f5:86:d6:4f:d9:e7:a1:f7:
80:21:ad:1e:cb:a8:ff:a1:60:48:0f:b8:c1:ce:4c:e1:0b:71:
e6:12:81:98:4f:15:ae:72:99:4a:5d:20:14:d8:80:ad:3e:b7:
7f:7c:27:2b:8d:e4:f4:cf:77:32:ef:20:ba:fe:e0:c4:6b:de:
65:78:a8:b8:3e:cc:87:60:76:36:64:ca:3e:d7:84:2d:68:25:
ef:b8:69:f7:b9:9b:43:b9:e0:98:37:0a:71:16:52:8b:96:94:
b3:9f:10:ba:d2:52:a2:78:c5:32:ab:60:a6:20:33:19:c7:4d:
56:8b:a9:a2:9b:5d:5a:af:35:77:a0:a7:1f:19:62:98:27:cd:
83:b1:57:9e:c2:a0:07:b0:b7:66:cd:ec:07:62:56:a0:b2:bb:
fb:a1:cd:c6:93:a4:52:5d:2f:42:81:08:31:31:d7:fb:e5:20:
80:a7:6f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:22 2026 by rpki-client