
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json)
Hash identifier: ro/HswKOBV+5KYYONGXiWPie7PhdHyunKFjxsnj/x04=
Subject key identifier: 95:21:B5:61:D8:99:B2:32:D3:75:6C:7C:5C:3C:68:69:A0:AB:97:58
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial: 0675
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
Manifest number: 066D
Signing time: Wed 22 Jul 2026 23:17:58 +0000
Manifest this update: Wed 22 Jul 2026 23:17:57 +0000
Manifest next update: Wed 29 Jul 2026 23:17:57 +0000
Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: qX8DPFkVgYF7j0ISdQ1T8BJYvMxBI5+7UH0tFmj9muA=)
2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: Tt66YBhWZceD9xi7CJ59HIwrlysDS4oNkVI5X7bqodQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:17:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1653 (0x675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Validity
Not Before: Jul 22 23:17:57 2026 GMT
Not After : Jul 29 23:17:57 2026 GMT
Subject: CN=6a614fa6-80d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b8:00:58:bb:db:ab:6d:f9:f1:6f:0e:05:dc:
52:b7:94:c4:9f:72:ff:dd:6f:64:48:b8:ed:61:b5:
ad:76:d8:34:d0:a3:96:b6:43:ae:39:33:37:0e:9e:
3a:81:ae:94:38:06:b4:0a:2d:e1:01:9d:13:0c:56:
cd:2e:3e:db:52:d4:d9:93:8c:73:ae:e6:41:84:80:
79:22:69:8c:56:e2:53:25:e0:72:8c:ba:4f:0d:de:
de:db:f0:5c:1a:68:d7:55:48:3f:62:96:fb:a4:47:
36:07:a4:d1:bf:8f:1c:87:89:04:cc:c5:9b:db:e8:
59:95:0b:13:63:fc:2a:c7:34:86:74:eb:bd:bd:bc:
91:ad:68:55:f5:6a:2f:2c:97:a0:d8:48:a8:fc:28:
fb:ef:26:0d:93:43:ca:51:1b:4d:bc:12:f4:01:99:
70:3e:a3:e2:80:9a:61:5c:d2:f8:72:59:a4:3d:64:
82:97:2a:97:71:4f:4e:90:01:21:c3:01:2b:2d:a7:
98:6f:d8:bb:18:3f:21:50:5f:f4:eb:67:28:e4:13:
3b:23:09:8c:2f:dd:50:8a:e3:ee:28:db:e3:09:05:
af:1c:d1:cc:fe:d0:32:4c:c0:1a:d2:c3:a1:9b:35:
a6:cf:85:05:fe:3a:e8:90:10:31:25:1b:de:95:8c:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:21:B5:61:D8:99:B2:32:D3:75:6C:7C:5C:3C:68:69:A0:AB:97:58
X509v3 Authority Key Identifier:
keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:83:50:02:80:c4:1b:2f:37:06:57:75:e2:51:a6:fb:37:30:
a9:ed:be:dd:f7:6d:3f:bc:d0:ab:93:44:b4:cb:ce:ac:2a:21:
34:29:ac:18:35:ba:89:84:d6:d8:ac:98:a0:40:39:b8:4e:b0:
ad:5b:51:de:83:cc:c0:12:a0:9b:a1:31:12:fc:73:a3:69:a9:
85:09:1a:46:c4:69:96:78:de:d3:af:cd:d5:54:6a:76:5c:98:
fb:74:ae:6f:bc:56:80:b0:16:53:0e:73:a4:50:22:bb:66:8f:
ae:d7:52:62:33:8e:67:a2:cf:53:9c:62:c4:6b:70:71:eb:92:
0b:13:52:08:78:f5:81:08:99:dc:fb:1d:2f:8b:c6:3b:69:f2:
5c:ab:1e:ee:5a:a2:14:a7:b2:f7:4f:85:b5:32:c8:54:23:22:
2f:f6:ee:9f:1b:29:b0:40:e3:74:1a:8b:69:7f:87:ae:7f:a0:
9d:f1:cd:fa:54:52:be:96:f2:76:a3:87:26:f8:03:db:90:6c:
dd:2e:44:28:b1:4e:a5:ee:5f:0f:ce:3e:a0:9d:7f:5c:a5:14:
53:3e:1a:9c:6f:eb:28:dc:14:ea:6d:a8:09:49:89:ec:32:b5:
fa:bd:68:c8:10:1e:67:63:4e:27:75:48:2f:c4:61:5d:3c:b0:
65:34:33:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:08 2026 by rpki-client