
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
File: wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json)
Hash identifier: 5SpU9+cJ1AczDI1KQEEnLRKOtAWd5Y6YTbUkQbAzDPs=
Subject key identifier: 01:EB:00:45:CF:95:DA:29:DB:A8:8A:A4:A1:24:37:93:2A:47:E2:F4
Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
Certificate issuer: /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Certificate serial: 088C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
Manifest number: 0883
Signing time: Wed 22 Jul 2026 21:12:46 +0000
Manifest this update: Wed 22 Jul 2026 21:12:46 +0000
Manifest next update: Wed 29 Jul 2026 21:12:46 +0000
Files and hashes: 1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: C0PQOwPk4NdvK3jdQtPuQwYYyXGdQoXUDX6cKBRGt+c=)
2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: uWkp09s7yGSzXGuY3Dy3+U0rw2K9bYSVVtki+9GQvL0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D
Validity
Not Before: Jul 22 21:12:46 2026 GMT
Not After : Jul 29 21:12:46 2026 GMT
Subject: CN=6a61324e-ed1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:ba:ab:d8:59:e8:12:d7:69:31:45:9f:11:
93:fc:5c:c0:27:8d:c2:23:64:ec:f9:e1:5c:6c:e5:
a7:77:96:39:95:df:7d:03:0d:7c:e5:62:78:dd:b9:
9f:02:31:87:da:dd:3e:46:b5:ba:a1:3f:b0:f9:25:
62:38:4d:34:88:75:8a:28:83:43:44:79:7d:b1:ec:
f4:23:7d:b6:69:d4:40:7c:f1:bd:cc:c6:84:cb:e8:
16:8b:88:83:42:84:75:87:33:c6:bc:12:34:85:03:
70:e1:c7:71:11:92:e6:5c:03:f6:8e:3d:a6:fb:62:
e0:d1:2b:2d:9e:15:0e:20:8c:5d:fa:75:ba:50:8e:
75:02:f7:d1:d0:f6:82:ba:bc:03:b2:28:83:a1:c8:
6d:5a:7d:2f:41:eb:a6:ae:11:2a:61:9c:02:d8:2c:
9c:1c:48:05:e9:46:2f:8d:0f:51:63:be:1c:ae:72:
84:40:f4:08:ef:42:7e:f3:60:ed:0e:4f:1f:bd:60:
f9:9a:62:07:b9:7b:52:7a:05:5b:da:cb:f8:dc:d9:
78:3a:1a:ab:9c:ba:da:1b:c4:d5:3c:85:91:40:c5:
4f:b2:90:d3:14:a8:42:3b:ae:ed:40:72:a3:ff:84:
23:4d:3c:b1:94:75:f9:6d:7e:bb:04:81:71:09:d7:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EB:00:45:CF:95:DA:29:DB:A8:8A:A4:A1:24:37:93:2A:47:E2:F4
X509v3 Authority Key Identifier:
keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:1c:85:69:5a:e1:19:83:db:53:d9:3b:7b:97:43:49:43:ee:
85:3f:13:64:fa:2f:5b:31:52:76:b1:28:82:bf:0a:9e:cb:a5:
f5:54:5e:70:e1:ad:fc:1c:5a:a4:7c:26:ce:c7:a9:58:cb:d8:
ce:6b:63:24:9f:8b:20:ca:2e:46:a0:55:19:3d:3f:8b:5d:a8:
1e:98:d1:84:dd:5b:1f:1f:1c:76:28:23:2d:5d:b4:a2:18:c6:
72:b0:c0:a9:6f:56:83:61:1c:9c:f9:f9:56:3d:e8:3f:cc:25:
dc:7e:f9:18:ce:ce:35:1d:69:8d:12:0c:ac:e1:4c:e3:04:16:
d2:53:0b:09:25:e9:97:4f:19:4a:2b:95:7f:a7:4c:d0:02:a6:
b9:c7:06:2c:33:39:dd:89:86:87:55:ba:17:c1:77:f6:51:74:
74:c1:69:9a:0b:89:f8:08:56:d4:d5:15:a5:c2:da:ac:85:f6:
5d:1a:a4:65:7a:80:50:41:73:39:b7:ca:a0:30:5a:c1:1f:e8:
36:a7:ef:9d:fc:5e:b2:30:57:55:af:b7:e9:7a:38:2d:43:f2:
53:25:aa:c9:70:48:b5:37:d2:cf:65:32:94:6e:78:ba:36:87:
e5:a8:4f:59:95:3f:6f:48:74:6a:c5:ef:ed:d4:6b:9a:07:d3:
f0:71:6f:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYyNEYxMTAvBgNVBAUTKEMyNEQ4RUE3NkJDQTY0OTgzRjUzMkE0Q0RCQjJDQ0Yx
OUIwNjI1MEQwHhcNMjYwNzIyMjExMjQ2WhcNMjYwNzI5MjExMjQ2WjAYMRYwFAYD
VQQDEw02YTYxMzI0ZS1lZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAncy6q9hZ6BLXaTFFnxGT/FzAJ43CI2Ts+eFcbOWnd5Y5ld99Aw185WJ43bmf
AjGH2t0+RrW6oT+w+SViOE00iHWKKINDRHl9sez0I322adRAfPG9zMaEy+gWi4iD
QoR1hzPGvBI0hQNw4cdxEZLmXAP2jj2m+2Lg0SstnhUOIIxd+nW6UI51AvfR0PaC
urwDsiiDochtWn0vQeumrhEqYZwC2CycHEgF6UYvjQ9RY74crnKEQPQI70J+82Dt
Dk8fvWD5mmIHuXtSegVb2sv43Nl4OhqrnLraG8TVPIWRQMVPspDTFKhCO67tQHKj
/4QjTTyxlHX5bX67BIFxCdcGywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAHrAEXP
ldop26iKpKEkN5MqR+L0MB8GA1UdIwQYMBaAFMJNjqdrymSYP1MqTNuyzPGbBiUN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri81RjQ2NzMyQTAy
RkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pKZ19VeXBNMjdMTThac0dK
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3drMk9wMnZLWkpnX1V5cE0yN0xNOFpzR0pRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjI0Ri81RjQ2NzMyQTAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pK
Z19VeXBNMjdMTThac0dKUTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKByFaVrhGYPbU9k7e5dDSUPuhT8TZPovWzFSdrEogr8Knsul9VRecOGt/Bxa
pHwmzsepWMvYzmtjJJ+LIMouRqBVGT0/i12oHpjRhN1bHx8cdigjLV20ohjGcrDA
qW9Wg2EcnPn5Vj3oP8wl3H75GM7ONR1pjRIMrOFM4wQW0lMLCSXpl08ZSiuVf6dM
0AKmuccGLDM53YmGh1W6F8F39lF0dMFpmguJ+AhW1NUVpcLarIX2XRqkZXqAUEFz
ObfKoDBawR/oNqfvnfxesjBXVa+36Xo4LUPyUyWqyXBItTfSz2UylG54ujaH5ahP
WZU/b0h0asXv7dRrmgfT8HFv4Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:56:08 2026 by rpki-client