
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json)
Hash identifier: tu+bSv7m7eyvJIp2KNZw3taO2rlOl0QVVHd/sd6ukcI=
Subject key identifier: 83:E7:C1:57:C8:5B:A2:20:33:5F:25:70:49:4A:A5:B6:15:67:C5:D3
Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Certificate serial: 02A8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
Manifest number: 02A3
Signing time: Wed 22 Jul 2026 16:55:12 +0000
Manifest this update: Wed 22 Jul 2026 16:55:12 +0000
Manifest next update: Wed 29 Jul 2026 16:55:12 +0000
Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: jbe68Ll2lHCIXmne9kLYBIhzmaWzI1jo72UCSVdQOzk=)
2: 04594232DEA011EE91181415C4F9AE02.roa (hash: c8YRBXzB3c5ZciuZ47whRGlvNacQEORBuyS+ujABTZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Validity
Not Before: Jul 22 16:55:12 2026 GMT
Not After : Jul 29 16:55:12 2026 GMT
Subject: CN=6a60f5f0-2451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:c6:7f:69:dc:c0:2d:4d:33:9d:b9:e0:bb:
d6:ec:89:be:13:b3:eb:ba:78:d8:f0:80:3b:1f:ab:
7e:06:25:df:5e:16:51:d1:9c:2c:19:2e:46:0f:d2:
f9:69:92:18:2a:40:e4:3a:b8:16:e5:47:a0:7d:e2:
68:2d:64:e3:bb:03:12:37:87:77:95:4a:7c:53:93:
31:e3:d2:09:f9:b8:4e:e5:35:77:7e:c3:57:9f:9f:
26:c7:fc:76:de:0b:3d:75:44:c7:17:07:1a:ea:56:
ea:83:d2:52:4f:8e:f2:4e:06:10:4a:25:bd:1b:6d:
46:94:39:f0:dd:5c:65:c4:ee:38:f8:6e:75:bd:5b:
b0:d4:6f:4a:2d:2f:ac:5a:aa:fd:f9:4d:d1:22:67:
9e:44:35:5d:d7:ed:1f:f2:df:d6:24:fc:ec:dc:bc:
02:c5:eb:61:3d:c9:1b:71:4d:92:3a:28:71:e2:32:
cf:e4:06:15:79:d2:8e:ad:b3:7b:05:ce:12:36:4c:
5c:cd:5a:74:85:dc:4c:17:08:5d:a0:7c:a0:0c:33:
a2:ce:76:10:de:ff:c1:f2:63:59:a9:55:4a:71:9d:
58:35:8a:df:c3:e9:cf:80:f2:0c:13:61:17:6c:f5:
0c:98:8e:55:0e:17:06:ba:dd:e5:20:e0:a3:cb:ce:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E7:C1:57:C8:5B:A2:20:33:5F:25:70:49:4A:A5:B6:15:67:C5:D3
X509v3 Authority Key Identifier:
keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:cb:aa:4f:d6:7a:db:51:e2:21:b0:85:34:94:bb:05:7d:97:
b6:4b:79:89:a6:53:b9:f5:5b:e3:ef:0e:1e:43:9e:f9:24:cf:
ea:af:d2:df:c8:88:5f:d3:7e:e6:77:c2:96:ba:0e:27:7e:5b:
87:39:2b:bc:f6:b8:c9:2d:51:4c:dd:dd:75:5f:88:b7:ff:1e:
77:3e:11:fa:3c:07:97:80:a4:e6:5e:91:fe:b3:13:b8:9b:79:
e4:2f:6f:94:ae:3f:51:08:96:96:11:6d:f5:fc:92:a1:12:7f:
c4:17:f0:64:d3:8a:08:25:fa:91:a4:79:41:47:7e:1a:96:0b:
15:bc:60:f2:33:e6:b1:3d:5f:c6:d5:d5:70:cc:35:99:26:45:
03:0d:d7:45:73:f7:02:44:76:09:7f:66:50:96:6b:ff:37:33:
d3:0a:2c:f6:b9:17:57:01:e2:58:80:ec:f9:a3:a9:12:da:a8:
63:56:b9:eb:dc:3c:2d:ab:41:f4:4a:d9:e6:c7:12:d6:40:c6:
a9:69:ad:0c:73:3e:30:ef:ae:a4:eb:34:74:6b:df:f6:ac:d3:
64:0c:ca:6d:60:9b:ee:35:ed:f1:56:da:57:88:14:bb:13:a5:
27:97:ef:99:02:a5:59:1e:c3:ee:5b:c5:9f:ed:2d:50:86:06:
d7:82:ca:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:59:07 2026 by rpki-client