
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
File: wxT-rYcguxji2eIkk4K433VEbYs.mft (raw, json)
Hash identifier: KSE0RNSp+9jad2zPiBpiznj77I6BedwmU7BF7Ibz+no=
Subject key identifier: 1B:B9:A0:14:74:0C:53:88:11:27:F7:35:D9:15:57:5E:A5:4B:2F:77
Authority key identifier: C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B
Certificate issuer: /CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
Certificate serial: 0635
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
Manifest number: 062A
Signing time: Wed 22 Jul 2026 23:30:36 +0000
Manifest this update: Wed 22 Jul 2026 23:30:36 +0000
Manifest next update: Wed 29 Jul 2026 23:30:36 +0000
Files and hashes: 1: wxT-rYcguxji2eIkk4K433VEbYs.crl (hash: IV2hFCadpAUE2Itfa8xx3EK9zyEJrXnavw7hRU9197I=)
2: 5058C6EEA53C11F096F1C284C4F9AE02.roa (hash: 3JM2acvcDIocyJks0EoakV6p4uSNGRyTdD0cztbL25s=)
3: 30D58974A53C11F0A057C775C4F9AE02.roa (hash: Yla+AjYYhaBJGPhIpeI0a0ImOXfa/xKKshsCr7MtLNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl
rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1589 (0x635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFCD3, serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
Validity
Not Before: Jul 22 23:30:36 2026 GMT
Not After : Jul 29 23:30:36 2026 GMT
Subject: CN=6a61529c-2da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3c:45:4c:dc:b7:1d:a5:5e:69:23:47:2d:3e:
b3:2a:89:4d:b2:b8:6e:ae:04:c2:9f:b8:df:73:97:
68:6a:5f:62:d8:8d:e5:22:6d:6f:83:33:c4:c4:ee:
d8:b0:ee:73:48:f8:77:16:5b:6e:aa:5e:7d:05:84:
aa:e1:be:02:63:b9:0d:a4:92:18:2b:f8:2b:9f:13:
13:8e:29:29:d4:b2:87:b7:a4:12:84:ba:c6:98:76:
a3:37:49:a1:16:ba:1a:9a:36:74:69:69:92:d3:4b:
90:17:c5:98:09:ca:e4:20:be:ba:69:7d:a5:bf:08:
79:0b:8f:49:58:66:2b:d5:be:47:6b:d8:b6:c5:ac:
5e:7a:fc:48:8b:31:24:39:c6:df:5f:bd:2f:94:94:
ff:dc:bf:1a:f2:92:a1:32:a2:ea:dc:d6:0a:78:8a:
be:cb:d8:91:5f:5c:f4:7e:45:af:4f:bb:b7:9e:84:
d9:e7:e6:ae:9d:63:c0:62:fd:06:35:1d:38:ef:56:
49:e0:7d:3f:50:ea:0a:5e:fd:9f:ae:fc:15:67:a2:
0b:be:b9:f4:11:77:f0:f1:80:32:62:9b:cf:49:ca:
3c:2a:07:52:bf:bf:e7:4a:a6:3f:d6:47:f4:cf:98:
6a:a8:49:bc:89:ed:fe:c2:43:2e:dc:d8:a8:be:4d:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B9:A0:14:74:0C:53:88:11:27:F7:35:D9:15:57:5E:A5:4B:2F:77
X509v3 Authority Key Identifier:
keyid:C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:19:2f:56:48:11:56:9a:a9:15:dd:ef:ac:00:e7:2f:7b:88:
6c:28:98:af:9b:5e:87:80:06:8a:72:2a:86:68:ab:98:59:aa:
f1:c5:26:e4:56:2c:99:87:4f:62:7e:95:53:47:00:cc:6c:07:
c7:c0:a4:52:83:d4:23:37:39:05:60:73:2e:60:14:8b:ca:76:
17:07:e7:ec:f9:2c:4e:5a:9b:ae:9b:48:a8:65:f7:21:40:d0:
cc:64:52:ae:03:0b:a6:32:08:d0:98:01:29:09:b4:de:5e:cc:
d3:99:22:5c:ac:27:59:37:11:fe:3a:41:b0:c7:0f:a3:56:fe:
d7:5c:0d:d9:01:2d:89:51:5d:e3:60:c0:39:25:e2:17:84:32:
de:68:b7:55:89:d1:63:6c:9d:7d:4e:1a:47:a9:47:42:11:1a:
b3:21:ce:76:0a:fa:82:91:4e:ca:8c:13:7c:22:20:9c:ae:4f:
0e:5a:48:15:e5:69:0b:cd:40:8d:48:6a:e5:69:94:c4:85:f8:
cb:fe:33:5d:4f:36:f2:32:f8:eb:f8:e6:e0:41:e9:7a:73:de:
a6:1e:8b:e6:63:01:3f:58:14:26:8a:62:15:19:a1:6e:b0:f5:
7b:8c:ac:35:af:e7:4e:5a:3c:0e:e3:1d:b0:c3:67:3f:1d:0b:
c7:f6:7a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:37 2026 by rpki-client