
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
File: wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json)
Hash identifier: aMYV6ddqqLZKpQUmboPKL1k0r/MfBVg0EdzwD/t1jhM=
Subject key identifier: 9E:AE:67:31:84:CC:EC:CA:D2:A1:B5:97:13:3B:C6:17:AF:9A:93:22
Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45
Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045
Certificate serial: 04EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
Manifest number: 1D20
Signing time: Wed 22 Jul 2026 16:36:25 +0000
Manifest this update: Wed 22 Jul 2026 16:36:24 +0000
Manifest next update: Wed 29 Jul 2026 16:36:24 +0000
Files and hashes: 1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: 5g4g/OVVBkO3SacNVAlDfZauMkWKM++pKhzyiJ2GYP8=)
2: 4A7F092A776811EFB6FA747DC4F9AE02.roa (hash: ZInSuFW4tgrnB5Y18U6CKYq95Y5K5ny1irJTF0HvAX4=)
3: F9D345C0DE8811F0B0147CB83D6F56BC.roa (hash: PZaD99czBStU254DRK+Fap7tqhET3faD3ruJSJv6Axc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl
rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:36:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1262 (0x4ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045
Validity
Not Before: Jul 22 16:36:24 2026 GMT
Not After : Jul 29 16:36:24 2026 GMT
Subject: CN=6a60f189-610e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:97:b5:6a:9e:41:61:78:c7:f4:18:f3:77:
fb:a1:78:89:b7:6f:77:d7:69:f3:6e:c0:52:c0:c0:
7e:79:cd:61:10:f3:bc:de:c0:47:3e:60:7e:8a:48:
25:07:9c:8e:9e:c0:5f:1f:d9:c5:17:23:16:12:ca:
7f:c5:90:bb:cc:cc:63:64:16:e1:1f:ab:48:c9:8c:
d6:13:fa:af:3f:bb:d0:2d:f6:72:cc:9e:87:4a:3c:
0e:76:16:d6:bd:d3:40:d9:65:39:c6:c5:26:aa:bb:
8b:09:1f:f6:ff:78:0e:01:ff:25:9b:d3:1b:6c:fe:
c1:b4:c8:66:0f:fc:9d:5c:b7:0a:6d:d5:a7:70:a7:
9e:5d:17:ee:d6:57:c8:9e:76:e8:7e:78:6d:9c:70:
a0:63:6d:e1:1d:0d:30:d3:bd:74:09:01:51:60:c8:
1d:f4:2f:59:92:8c:f2:60:c1:65:b8:6d:ab:41:d0:
8a:85:a4:a4:b3:7f:06:6c:a2:bc:0c:1b:c0:cd:3e:
74:d4:43:22:57:8c:61:f8:58:ad:98:5f:a2:1b:20:
0b:61:54:25:aa:8c:ee:96:70:36:b3:bc:05:c5:74:
1c:59:b2:6e:9c:ca:63:30:32:4f:22:c5:f0:39:2e:
b0:02:30:97:66:63:d1:8b:2d:6d:8a:cc:3b:f0:c6:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AE:67:31:84:CC:EC:CA:D2:A1:B5:97:13:3B:C6:17:AF:9A:93:22
X509v3 Authority Key Identifier:
keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:60:bc:0b:ee:8d:32:fd:d2:3a:2d:b2:ab:b4:89:b0:e4:9d:
cf:70:b9:31:5a:65:b8:1b:b2:a8:2f:ec:aa:28:54:13:5d:84:
0d:3c:3b:e4:ff:36:9f:8f:fa:35:c7:57:ba:4a:48:35:80:5a:
f7:01:a2:f5:c0:2d:e8:cd:20:59:da:31:9e:84:45:ab:91:aa:
f7:1e:9b:f0:9d:1f:67:56:aa:83:ca:32:00:0e:d0:cc:1e:f5:
e7:1f:84:90:86:ae:35:26:71:e0:19:73:aa:ce:23:32:a4:ff:
a7:da:03:a2:d6:8b:3b:52:9a:ca:dc:83:a8:73:43:fe:3d:98:
a7:32:a4:0a:35:79:1e:fe:95:e3:e7:ff:57:14:bd:f9:51:0e:
7a:7a:35:e1:21:91:2f:f5:2e:31:8b:2f:aa:98:21:36:1a:c1:
5c:02:97:8e:0f:9e:ef:fb:d4:4a:42:f5:07:bf:07:45:d5:64:
ae:b5:c9:24:81:5c:61:76:85:01:af:12:b4:f1:45:c7:61:90:
b4:c6:43:c0:d8:97:94:82:ae:25:9b:a6:87:c8:26:05:30:c7:
c6:8f:fd:79:ac:81:af:c6:e2:4d:93:da:fc:1e:52:3b:ac:ed:
7b:58:69:92:07:cb:ff:d1:4e:ad:d0:95:d6:90:1e:64:36:d5:
5b:70:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:52:16 2026 by rpki-client