
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
File: Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json)
Hash identifier: /huP1cOpejZMS3Zdv0f/jdieUSBsutprRL0ubUAwyHQ=
Subject key identifier: 90:82:DF:28:93:77:7B:E8:8C:D0:AA:2A:B9:DF:D9:55:AF:B9:69:96
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Certificate issuer: /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial: 0787
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
Manifest number: 076D
Signing time: Wed 22 Jul 2026 22:16:25 +0000
Manifest this update: Wed 22 Jul 2026 22:16:25 +0000
Manifest next update: Wed 29 Jul 2026 22:16:25 +0000
Files and hashes: 1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: Hh3XUsrJcfeCMD2zEyxCqVZXZEQnOspqs0LN5+xoMww=)
2: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: oNMygU+05mZdGnTqLCXPja1WWRqVF46B9vJ4+SJsuVc=)
3: C5058712A3B911EC9709462AC4F9AE02.roa (hash: yx2p2PBTAERpIOrfxFJs3MPy6vQtoVGeRsQusdNiOVg=)
4: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: U228KfC2lw3SZ0Fufn6GHyMp3tAKp2GFwZiqfbkH2F0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1927 (0x787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Validity
Not Before: Jul 22 22:16:25 2026 GMT
Not After : Jul 29 22:16:25 2026 GMT
Subject: CN=6a614139-2387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:29:bc:01:02:0a:be:e3:a4:a2:10:ab:ef:
d1:a0:e3:43:b2:06:ef:03:bc:3e:0b:f9:33:b7:9d:
ed:b5:b1:4b:9c:48:b4:00:28:49:e5:60:dc:6a:ab:
20:c9:a9:5c:b7:38:46:72:ed:f6:ec:2b:e2:67:31:
dd:92:12:74:67:56:87:25:74:85:48:30:55:e8:7a:
dc:b2:57:fe:96:4d:7e:d1:b1:8e:0e:3c:ca:85:e3:
54:08:dd:c9:33:fd:1c:38:eb:76:ec:4d:17:3a:31:
83:c7:6a:66:75:6b:08:33:51:d7:e3:9d:e3:8c:e3:
bd:0b:92:a8:7f:cc:f6:b8:ee:af:cc:5f:69:1b:96:
a2:dd:dc:ac:25:7c:62:2b:a9:66:cf:b9:a6:b5:41:
79:a5:d3:ad:54:b5:dd:41:c3:c3:85:64:8a:73:91:
62:b0:d3:52:a1:ea:f8:06:0c:91:c4:b4:7d:fb:ea:
73:21:e9:95:39:4c:c6:da:99:6b:c9:d3:69:e0:15:
0c:8a:45:1a:57:22:e9:db:c8:8b:6e:c6:f6:ce:7d:
82:7a:40:a4:75:b0:d2:9c:c4:b9:82:94:d4:b4:41:
cd:ce:d7:f5:8b:16:e4:9e:55:6a:54:da:e4:a9:22:
cd:82:b0:8a:2a:67:c0:6e:a3:16:7a:1c:3e:0b:94:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:82:DF:28:93:77:7B:E8:8C:D0:AA:2A:B9:DF:D9:55:AF:B9:69:96
X509v3 Authority Key Identifier:
keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:07:f5:89:72:ae:ac:ff:8e:97:2c:c1:0e:10:ba:7f:40:6c:
fd:df:3e:c2:78:47:b0:e1:32:dd:22:d8:25:c4:75:7b:f3:ea:
f1:d7:4f:75:50:df:e7:ff:62:b6:79:3b:e5:64:d7:43:cb:89:
d1:72:fe:74:1a:b1:e1:dd:8d:df:a1:47:97:38:32:55:48:3b:
92:5c:0e:2f:f7:9e:44:e2:81:2e:63:e6:c3:7f:e1:13:95:ca:
df:91:63:75:00:0b:66:70:74:a8:9d:aa:67:6d:7f:70:74:55:
57:67:ea:a2:96:2c:c3:68:14:1d:85:84:47:43:43:b9:a6:37:
d9:cd:43:11:38:1c:b6:0a:83:90:1c:21:bd:29:7a:22:dd:27:
d5:b9:aa:49:23:d8:e1:98:45:79:cf:9b:c8:cb:63:de:88:c8:
68:5a:fa:8f:c7:c1:f5:83:3f:68:6d:0d:d5:31:c9:2e:5c:c3:
4d:f5:66:5c:02:26:43:26:da:d8:91:05:0e:59:a5:79:3b:0a:
15:26:f5:0a:8d:95:34:cb:77:73:a3:f5:00:de:6d:3b:44:21:
d8:ac:be:ac:69:a8:8b:b7:e5:50:01:07:75:e1:76:fc:1d:0b:
e2:2e:7c:54:00:50:99:90:7a:8b:a1:6b:3a:33:aa:43:1c:86:
06:2a:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:23:46 2026 by rpki-client