
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
File: WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json)
Hash identifier: u7FHJmGGccEt9Fy4x5rWF7b7tFf31JxwjD+pKtqV9B0=
Subject key identifier: B1:D1:2D:7C:92:A5:1E:DC:45:C7:2A:4D:E3:78:0F:4E:10:35:2C:88
Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Certificate serial: 03BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
Manifest number: 03AA
Signing time: Thu 23 Jul 2026 01:34:59 +0000
Manifest this update: Thu 23 Jul 2026 01:34:58 +0000
Manifest next update: Thu 30 Jul 2026 01:34:58 +0000
Files and hashes: 1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: 5tqJ/9bLxqE2m/qYxKYNj+J8jHCpiv3AsWSVtzYwZu8=)
2: E15780AA32E111EFB163924BC4F9AE02.roa (hash: YJWEr2nrAdnP2NutE9Ms8r6Gtbwk3PCYEKG8MqYno4Y=)
3: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: pAZV68jGjWuKWqhQJP5ckwM2V0tQYdqN4ZXDEqElElc=)
4: 8409527078B011EE8D737723C4F9AE02.roa (hash: S/EE8dzEnvlxDFYWVTl3pTW1+xiF5BVX2thc9vnDMAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959 (0x3bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Validity
Not Before: Jul 23 01:34:58 2026 GMT
Not After : Jul 30 01:34:58 2026 GMT
Subject: CN=6a616fc2-dd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:d4:28:b1:94:d7:fd:d7:b6:a1:fd:ad:c6:
73:6b:f0:d2:b8:15:61:21:f6:80:83:be:36:04:f5:
57:5a:9e:c9:22:f3:e7:40:be:14:34:e5:6b:1c:6e:
7f:d5:e9:c7:9d:9f:72:02:69:91:0d:23:c6:89:24:
85:bc:73:46:21:50:8c:5a:d2:dc:f3:0a:d0:85:3b:
d5:ea:a1:1f:2d:13:42:eb:4f:d2:22:e1:b4:f6:e2:
bb:c1:de:c8:59:44:9c:ad:b7:17:e4:4c:02:83:43:
73:87:df:fb:06:70:dc:b9:e1:be:12:a6:62:0b:4c:
a1:d2:93:af:8d:b9:8c:35:eb:8e:f6:21:5f:8a:34:
3d:e8:58:c5:61:7d:68:5d:29:91:97:92:58:54:2d:
3f:6b:19:b9:e1:4a:76:b0:2a:7a:60:cf:ad:4f:d7:
8d:8b:b8:00:03:08:8c:88:6e:46:35:8c:5f:27:eb:
87:86:a5:ce:d2:83:a1:2e:7c:f0:6c:ed:49:40:65:
93:f7:19:5f:b4:5f:6b:0f:f7:84:9d:eb:91:e4:88:
7f:e2:24:59:95:b3:dd:de:2f:93:1d:a5:00:01:78:
4d:68:9a:14:b1:93:fa:53:6b:a8:df:5e:e6:eb:41:
28:19:28:92:10:28:f6:23:c5:01:a6:c2:83:d7:a8:
9e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D1:2D:7C:92:A5:1E:DC:45:C7:2A:4D:E3:78:0F:4E:10:35:2C:88
X509v3 Authority Key Identifier:
keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bb:1f:e8:d1:f8:b4:ed:f4:eb:08:a2:e0:cf:2d:bf:6b:cc:
d3:39:be:19:d1:61:c3:5c:07:42:eb:50:b9:0e:85:5c:0d:17:
11:6b:42:2a:7e:2d:aa:74:a1:b0:c9:ab:3e:d9:99:90:21:82:
11:6d:68:97:ac:2f:7b:eb:69:31:a0:6e:7a:ae:ce:5a:74:ad:
72:91:84:16:eb:69:07:af:15:42:41:59:74:ee:b1:6b:ce:e9:
66:68:be:da:fd:fe:43:d7:26:e2:cd:b3:9d:6e:31:a2:49:8d:
3c:63:27:b0:03:84:10:c1:f3:68:29:83:6b:c9:47:77:f2:58:
6d:1c:29:90:84:de:83:3d:01:16:b2:8a:10:1a:82:d8:9d:e8:
77:9b:70:65:06:a9:2d:21:d0:49:01:d7:98:cc:94:9b:3f:5c:
f7:3a:c1:5d:d4:63:33:7e:be:4c:9e:01:4f:6f:c4:65:a4:35:
3a:60:aa:f4:a4:8c:02:7e:6b:4b:83:fe:7a:87:de:4c:11:79:
46:e4:4e:26:06:4f:02:d3:93:cf:d7:5a:2b:1f:92:39:09:b2:
5f:e6:cb:34:31:7a:9c:6d:de:03:b8:16:bc:c9:6c:f5:d4:64:
3b:a9:b7:1e:a8:97:d0:7c:78:42:27:b1:50:3c:cd:37:66:76:
30:ed:5f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:07 2026 by rpki-client