
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.mft
File: wZkkVVtxmo3OX4gfEKzcCjWyBSw.mft (raw, json)
Hash identifier: bwfpH9eqHct0x/oRQgpmloQ9ya2B0BAq4WjztiVUlkw=
Subject key identifier: 2B:4C:BC:BA:49:9A:A9:49:A0:9E:69:F1:27:38:70:64:FF:89:DB:6E
Authority key identifier: C1:99:24:55:5B:71:9A:8D:CE:5F:88:1F:10:AC:DC:0A:35:B2:05:2C
Certificate issuer: /CN=A91F146E/serialNumber=C19924555B719A8DCE5F881F10ACDC0A35B2052C
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZkkVVtxmo3OX4gfEKzcCjWyBSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.mft
Manifest number: 1A
Signing time: Thu 23 Jul 2026 11:03:56 +0000
Manifest this update: Thu 23 Jul 2026 11:03:56 +0000
Manifest next update: Thu 30 Jul 2026 11:03:56 +0000
Files and hashes: 1: wZkkVVtxmo3OX4gfEKzcCjWyBSw.crl (hash: NyeLGp5tfCPc2pN2rvNqcPuRtTW5KyoOM/biOzrPvxc=)
2: 973AF3EC63C411F1B54905C17D47A888.roa (hash: 8HfNf9fSdlgZ+8O3B5tGK8aEM/aA/Z7fXET6ooG+NGM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.crl
rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZkkVVtxmo3OX4gfEKzcCjWyBSw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F146E, serialNumber=C19924555B719A8DCE5F881F10ACDC0A35B2052C
Validity
Not Before: Jul 23 11:03:56 2026 GMT
Not After : Jul 30 11:03:56 2026 GMT
Subject: CN=6a61f51c-9c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:62:e6:22:aa:ac:38:52:c8:c0:cf:86:fa:
17:ef:aa:4b:1b:19:8f:00:ec:aa:c7:ab:d7:5e:ca:
66:02:03:7d:d6:df:e7:10:e7:35:19:e1:a2:62:6a:
a1:5d:21:29:c8:bf:b8:76:f6:58:1e:99:38:57:f5:
35:58:b5:92:f2:b1:ba:52:09:54:26:e6:5f:40:63:
3b:45:a6:d0:45:71:71:c0:91:d4:6c:6e:b3:e0:3e:
9c:b5:f4:6f:4c:93:5d:9c:c2:4b:74:26:7e:03:74:
f0:6d:d5:d7:62:6c:30:c8:55:d5:5e:4d:91:e2:f0:
8e:fd:a3:c4:3e:f2:95:c8:ea:bc:79:35:d1:69:79:
45:55:f9:25:95:4e:17:0a:84:e9:59:2e:60:8f:43:
7d:31:68:39:65:9d:c5:7c:55:4d:2f:2e:4f:2c:64:
a5:3f:30:d7:e2:ba:e3:2d:7f:04:8c:87:61:66:a8:
8c:81:b1:71:ee:17:c9:ae:92:9f:c9:ce:58:a7:eb:
73:90:ae:a6:ed:a9:5c:32:b8:e4:49:8b:24:91:34:
6c:55:0f:95:9a:78:32:05:49:29:41:67:66:54:2f:
d1:03:67:d7:48:e5:f0:9c:48:64:b3:dc:1c:8c:a6:
61:5c:81:09:c9:bc:d2:98:9d:c9:95:19:7a:e6:80:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4C:BC:BA:49:9A:A9:49:A0:9E:69:F1:27:38:70:64:FF:89:DB:6E
X509v3 Authority Key Identifier:
keyid:C1:99:24:55:5B:71:9A:8D:CE:5F:88:1F:10:AC:DC:0A:35:B2:05:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZkkVVtxmo3OX4gfEKzcCjWyBSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F146E/734824EC63BE11F198E330027C47A888/wZkkVVtxmo3OX4gfEKzcCjWyBSw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:44:d4:36:d1:90:a8:83:ae:09:42:07:1f:c1:21:1e:45:8f:
d8:eb:f9:57:cb:e5:65:33:bb:44:60:12:71:d8:af:cb:dd:e5:
14:3c:a6:72:06:34:e4:a7:9e:72:39:a6:fa:e7:5a:42:cc:18:
48:13:9e:54:5f:e6:e5:07:29:22:4e:63:42:bf:8c:7b:4e:8a:
9f:b3:3f:ea:19:35:86:73:b4:4f:38:40:88:6c:ea:9e:31:65:
1c:12:14:6a:9b:d1:48:d6:c2:de:3f:c7:bc:4d:f8:3e:91:2d:
db:af:dd:03:b3:06:a0:97:86:30:ca:13:22:66:6f:6d:ee:66:
19:69:80:63:6e:16:01:67:ed:6c:b4:36:09:ad:10:5b:47:31:
3a:61:44:2f:9b:b4:06:cb:5e:d0:2a:7a:1f:43:8f:d1:17:b1:
fd:90:d4:35:a9:88:ff:eb:aa:d1:80:1d:2d:f3:73:1b:e7:39:
20:3d:83:5b:14:75:e9:7b:1d:08:25:47:c1:37:6f:54:92:2d:
a3:9f:b1:8d:4d:bc:51:73:e9:c9:03:7f:8c:42:1a:6a:f0:1a:
a0:7e:94:ad:15:e2:d2:bf:d0:55:f6:a8:74:52:4a:93:4b:e9:
f8:16:e8:8d:f9:2a:1b:6a:3a:4e:fa:2c:6f:f3:1d:c5:8b:8e:
b8:53:a1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:55:43 2026 by rpki-client