
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
File: wekLXRHZAbDQSjQmCADU4p8cYqw.mft (raw, json)
Hash identifier: tuD3p6O1W2rtzY8j7c3dzudUCoEHIfMvnH7koS5YjwM=
Subject key identifier: 68:0C:ED:74:EB:8B:CC:D7:EB:CA:68:A2:9B:05:3B:A9:5C:C4:18:DB
Authority key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC
Certificate issuer: /CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC
Certificate serial: 086D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
Manifest number: 0865
Signing time: Wed 22 Jul 2026 21:20:26 +0000
Manifest this update: Wed 22 Jul 2026 21:20:25 +0000
Manifest next update: Wed 29 Jul 2026 21:20:25 +0000
Files and hashes: 1: wekLXRHZAbDQSjQmCADU4p8cYqw.crl (hash: QjCR1yXikB1Xe+L7IA1kkkGEEj+f2yfPMx1zM6I9pEc=)
2: 5B213DB20F8D11EBACF1BE19C4F9AE02.roa (hash: jAsAyovDfpAP6+ReKS4TwI/gfYOgL43K+OPo0tOIxRQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl
rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157 (0x86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB3A5, serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC
Validity
Not Before: Jul 22 21:20:25 2026 GMT
Not After : Jul 29 21:20:25 2026 GMT
Subject: CN=6a61341a-13e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:98:0d:95:9d:b7:83:2c:8b:d9:66:2c:08:
56:8b:3c:32:9c:50:21:83:0b:8b:bc:19:6f:50:e4:
10:ca:f7:58:c0:c4:64:f4:84:ec:01:4b:db:46:a3:
5c:f8:ce:01:1f:09:7f:2a:22:a3:81:8f:eb:27:7d:
57:fa:04:e9:0c:dd:8e:8b:4e:57:83:66:2f:e3:e5:
b3:ac:0a:42:ba:a1:96:b9:87:cd:ae:71:d0:8b:35:
52:ab:0d:69:6c:82:5f:db:a1:11:63:86:52:94:35:
a7:44:d2:f2:ad:bf:8e:5f:c9:bc:0f:b3:ab:52:85:
8c:2b:6b:46:18:b2:7e:c7:69:b9:0f:76:f6:e9:72:
54:25:c3:4f:66:42:4f:f3:ed:a7:ae:df:64:11:af:
1b:4f:af:1d:bb:25:95:12:f2:59:d5:2d:6e:ab:7b:
89:c7:ac:6d:a9:f4:e2:a6:1a:b4:dc:96:b3:d8:86:
c7:4a:c1:ed:2e:2e:79:57:40:27:9c:27:7b:f3:35:
db:6e:64:13:84:d8:4b:fe:83:79:ef:c9:8f:18:e9:
ed:43:9b:25:8b:57:97:e5:6b:8d:32:34:7a:98:8c:
ac:35:70:04:25:12:ca:65:45:41:6d:7c:4f:4c:9f:
8c:7e:87:7b:1c:c2:21:2e:88:5f:7d:e8:76:d7:cd:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0C:ED:74:EB:8B:CC:D7:EB:CA:68:A2:9B:05:3B:A9:5C:C4:18:DB
X509v3 Authority Key Identifier:
keyid:C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:10:07:39:21:e4:06:11:93:b1:77:5a:7b:96:55:d5:b3:63:
e7:6a:91:68:ca:01:41:4e:34:c9:e9:1c:6f:55:1d:d2:e8:d1:
29:9e:80:9d:82:8c:93:77:d1:b3:be:5e:f7:9d:dc:4c:58:58:
67:55:c6:32:e1:75:de:70:b3:cb:7b:a3:23:5d:04:16:40:0c:
7d:22:fc:1f:e6:03:e5:1e:60:e2:96:40:58:96:33:d3:b2:54:
8a:be:de:79:76:f7:ba:fb:f0:b2:a7:94:9b:bb:06:6b:af:5c:
7c:e6:0d:1f:be:cc:bd:7f:67:fe:5f:02:3e:78:2a:b9:02:75:
56:b6:ac:21:5b:f5:07:d3:ba:fa:8c:67:5e:e1:e8:de:ea:a3:
2a:cc:97:f2:91:af:dc:30:6b:15:dd:b7:37:58:90:99:5f:2a:
04:0e:b5:c1:2a:74:47:98:45:9c:78:42:1f:e3:c0:7a:f5:22:
ea:a2:51:33:bc:3d:13:47:f7:25:22:ec:9e:05:61:c4:94:67:
fe:d9:b2:14:08:14:cf:cc:6e:b7:95:7e:02:d3:5a:44:90:a7:
c0:6b:a5:36:00:a0:a4:97:68:d7:86:e7:f0:76:7b:88:89:3c:
c2:24:ce:e3:6d:61:5f:47:00:04:d9:67:f7:d7:e2:84:ab:54:
bc:77:cc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:26:01 2026 by rpki-client