
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json)
Hash identifier: qmdcNfvCIHxsloyH9wnoX2VanX5fuSYXr+aTgFVEfLM=
Subject key identifier: 12:86:3B:81:E7:94:F2:74:1C:36:58:B1:C7:36:B3:01:39:7C:42:E6
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial: 02B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
Manifest number: 029C
Signing time: Thu 23 Jul 2026 02:50:55 +0000
Manifest this update: Thu 23 Jul 2026 02:50:55 +0000
Manifest next update: Thu 30 Jul 2026 02:50:55 +0000
Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: cfa8nlbBvs8sliqgys6/NLwgTm4IK+nK/FhSYlKO5Vg=)
2: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: 0AcNJYbPABCo7geahEBKTRdq6wGpuolAL2JTEM7M9Jk=)
3: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: lA0GUtoywdP3W0s4fPvZbdcVPY5+3iGjlHV5SalUa/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689 (0x2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Validity
Not Before: Jul 23 02:50:55 2026 GMT
Not After : Jul 30 02:50:55 2026 GMT
Subject: CN=6a61818f-ad51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:21:32:45:ab:e3:02:92:a5:3c:b3:b4:7b:
03:33:e7:c0:8e:1d:49:bf:cb:1c:88:f1:c7:65:91:
78:9f:31:31:57:14:0b:3b:21:62:26:21:57:82:ea:
81:a9:df:37:26:7b:43:2e:af:80:f9:ab:2e:62:ed:
55:0f:32:f9:62:57:ba:62:49:58:76:1d:27:63:16:
f4:55:fe:a4:a4:ab:8f:d7:db:02:aa:60:69:93:c2:
a6:29:99:5d:b1:c5:d3:56:60:35:78:e7:12:70:96:
e8:78:e7:70:6e:a4:05:fa:a5:c8:40:90:78:42:fa:
7d:81:c9:bb:60:57:f6:32:e7:6a:0f:e4:37:42:49:
b5:e4:30:33:85:18:e2:ff:1a:1c:b0:5f:54:95:fb:
ec:51:58:1f:2b:3e:c2:70:fd:b1:f9:45:bf:63:f9:
7d:68:2d:cf:16:22:eb:4c:70:59:e5:9e:f8:77:69:
b9:13:ba:76:d4:90:8d:f4:de:96:29:71:eb:09:98:
81:83:7b:bb:9a:93:5a:f2:cd:20:38:c6:b5:fc:b2:
fa:65:c7:5c:36:09:04:7d:23:56:ed:90:a8:73:ff:
8a:1b:02:bf:ab:7c:45:3a:f5:d1:96:71:be:97:fc:
28:a8:41:07:4b:52:41:c3:aa:5f:94:e5:a3:ae:09:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:86:3B:81:E7:94:F2:74:1C:36:58:B1:C7:36:B3:01:39:7C:42:E6
X509v3 Authority Key Identifier:
keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:c6:d1:c5:e4:27:37:16:62:ca:a5:31:cc:ab:6f:44:72:61:
62:bb:71:7d:07:63:93:59:1d:a2:95:0e:b8:f6:b2:9d:fa:1d:
f7:aa:51:7d:72:97:9c:e4:07:46:8f:ef:0a:c1:37:b3:5e:9a:
c2:db:09:0a:a2:54:76:e1:74:95:2f:72:66:0e:4c:a5:ee:a1:
7e:7e:05:3f:50:56:9e:34:48:cb:f8:91:8b:1a:b6:6c:a4:32:
f9:19:d0:3b:5e:7e:fb:35:39:af:b9:5b:c7:4a:88:6e:65:cc:
65:57:cc:96:8f:98:31:31:bb:c4:7c:6b:fa:c1:4b:4b:71:c2:
f4:b4:a3:bf:0f:6e:8f:71:d3:aa:90:00:87:da:47:78:91:c9:
6d:a5:9e:83:c5:66:ef:b9:6b:9e:43:61:af:07:b8:00:31:ff:
0a:79:d4:e0:ed:3b:88:17:58:ab:97:51:0b:bb:3f:37:b8:7b:
4c:cb:47:3f:e7:2c:50:53:64:79:c5:d6:dd:ce:31:be:d7:d9:
1a:f8:f2:1b:8a:24:d2:ee:a1:6f:66:b6:17:ed:b0:dc:b0:f1:
09:ba:29:c3:1e:26:48:53:bf:7c:e3:7f:d2:11:0f:6c:33:9d:
7e:f1:7e:b8:44:62:d2:b2:84:df:63:9e:bf:20:c2:91:fc:a1:
fe:a6:f1:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1
NzZBMTI4M0UwHhcNMjYwNzIzMDI1MDU1WhcNMjYwNzMwMDI1MDU1WjAYMRYwFAYD
VQQDEw02YTYxODE4Zi1hZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuVQhMkWr4wKSpTyztHsDM+fAjh1Jv8sciPHHZZF4nzExVxQLOyFiJiFXguqB
qd83JntDLq+A+asuYu1VDzL5Yle6YklYdh0nYxb0Vf6kpKuP19sCqmBpk8KmKZld
scXTVmA1eOcScJboeOdwbqQF+qXIQJB4Qvp9gcm7YFf2MudqD+Q3Qkm15DAzhRji
/xocsF9UlfvsUVgfKz7CcP2x+UW/Y/l9aC3PFiLrTHBZ5Z74d2m5E7p21JCN9N6W
KXHrCZiBg3u7mpNa8s0gOMa1/LL6ZcdcNgkEfSNW7ZCoc/+KGwK/q3xFOvXRlnG+
l/woqEEHS1JBw6pflOWjrgl0xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKGO4Hn
lPJ0HDZYscc2swE5fELmMB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2
NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL
RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEMzMC8wRjFGN0NFODk2NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlE
ZEliVlZEVVliY3hYYWhLRDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcMbRxeQnNxZiyqUxzKtvRHJhYrtxfQdjk1kdopUOuPaynfod96pRfXKXnOQH
Ro/vCsE3s16awtsJCqJUduF0lS9yZg5Mpe6hfn4FP1BWnjRIy/iRixq2bKQy+RnQ
O15++zU5r7lbx0qIbmXMZVfMlo+YMTG7xHxr+sFLS3HC9LSjvw9uj3HTqpAAh9pH
eJHJbaWeg8Vm77lrnkNhrwe4ADH/CnnU4O07iBdYq5dRC7s/N7h7TMtHP+csUFNk
ecXW3c4xvtfZGvjyG4ok0u6hb2a2F+2w3LDxCbopwx4mSFO/fON/0hEPbDOdfvF+
uERi0rKE32OevyDCkfyh/qbxGA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:43 2026 by rpki-client