
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json)
Hash identifier: o/6Frz2AE0GUIp9HRzGmLBgPaP6YUKb3ezvEuS9aWlo=
Subject key identifier: 96:C0:68:37:00:E5:58:AF:6C:BC:38:7D:5D:A3:40:29:4E:D1:59:6E
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial: 02D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
Manifest number: 02BC
Signing time: Wed 23 Sep 2026 01:19:14 +0000
Manifest this update: Wed 23 Sep 2026 01:19:13 +0000
Manifest next update: Wed 30 Sep 2026 01:19:13 +0000
Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: Hka/ykJvor9Lb9715RTl9bRIKlzSSdgvEXwA2sA50zg=)
2: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: lA0GUtoywdP3W0s4fPvZbdcVPY5+3iGjlHV5SalUa/g=)
3: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: 0AcNJYbPABCo7geahEBKTRdq6wGpuolAL2JTEM7M9Jk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721 (0x2d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Validity
Not Before: Sep 23 01:19:13 2026 GMT
Not After : Sep 30 01:19:13 2026 GMT
Subject: CN=6ab32911-b72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c6:2e:f5:ce:ac:ad:eb:69:ab:c2:68:c4:33:
a1:9d:51:72:1e:c7:f9:38:eb:e7:ae:08:9e:83:26:
45:f9:ef:60:a8:2a:93:98:c8:3d:6e:1d:fe:b6:4b:
b4:21:86:5b:d9:2d:c8:fb:62:85:41:34:f4:0c:04:
0c:43:25:b6:8d:1a:f6:81:23:0a:89:23:9b:63:21:
a6:4a:76:0f:48:38:31:1e:0f:32:10:e8:6e:36:0e:
51:99:64:ed:57:fc:29:33:d2:50:8a:7c:1a:fb:3a:
76:1e:44:48:92:4a:28:e4:0c:2d:e9:ea:82:25:ac:
8b:fe:2f:31:73:bb:18:bf:37:88:33:42:86:5b:6c:
6b:13:ed:db:32:ea:cd:fa:ae:32:00:e7:ad:2d:85:
60:ed:45:e9:d5:02:89:71:69:24:17:9a:7d:75:f5:
bc:ae:9d:6a:5b:39:d4:2d:41:65:23:ca:a4:4d:87:
b5:6c:ff:c2:7b:14:a8:0e:85:4f:f8:d3:88:d6:91:
c8:ac:5b:c0:53:a6:52:ff:88:f7:3d:87:9a:28:f8:
00:66:0c:1f:73:c6:a7:be:e3:ac:b7:72:ce:93:c8:
7b:2a:a1:99:05:d4:cc:5e:72:9f:bf:a6:d3:5b:0a:
f2:c0:6a:0f:61:b6:81:8f:62:9a:53:81:7f:01:cf:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C0:68:37:00:E5:58:AF:6C:BC:38:7D:5D:A3:40:29:4E:D1:59:6E
X509v3 Authority Key Identifier:
keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:5f:02:20:43:f6:a5:4f:4b:2c:b6:37:cb:d5:5d:5a:f2:79:
28:59:df:90:2f:73:54:85:f2:23:82:51:1b:e9:de:fb:e1:33:
d7:a8:9c:e6:b6:c8:26:74:64:9a:13:58:1f:6b:a8:c0:84:10:
89:93:26:8e:24:3e:ce:95:3c:a3:7a:97:62:e2:6b:0f:15:7e:
1f:21:21:47:d0:db:c6:c8:0e:25:04:2e:74:a5:32:ca:4e:10:
3c:f2:e6:1b:87:9a:0b:d5:57:c9:2b:64:50:f9:5d:3e:d3:86:
2e:17:ab:f1:47:fe:08:41:a1:ef:4d:a0:33:8c:75:3d:ee:a8:
55:a8:b2:29:b9:b4:9a:34:a8:9b:ce:88:d1:cf:7d:fa:7e:80:
5d:d1:64:82:73:43:75:cf:66:73:13:fb:e8:bd:14:b6:f0:c0:
8e:14:14:d4:92:23:5d:17:41:86:b7:dc:9d:dc:fd:bc:8a:1d:
0d:36:30:59:c3:4e:40:04:cd:9d:6d:70:57:2f:f9:f1:6d:80:
6f:4b:2e:8e:2f:8e:fa:02:73:c4:17:82:50:2a:a3:cf:10:77:
64:09:24:14:af:c9:41:cf:a5:0d:03:17:f0:df:27:d0:a7:dc:
6b:4e:b9:0f:b3:d3:5a:86:ef:c9:78:ba:9e:a4:91:b0:01:c5:
58:73:8f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:16:54 2026 by rpki-client