
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
File: Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json)
Hash identifier: bNQ0Tn6X7xIGkQMuSoOSeOPRAkSNyDhWCDosw6OjHZA=
Subject key identifier: DC:97:92:83:3D:37:A3:F2:68:7C:E5:EC:E7:90:77:A2:62:95:91:79
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Certificate issuer: /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial: 075E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
Manifest number: 0747
Signing time: Tue 12 May 2026 21:49:45 +0000
Manifest this update: Tue 12 May 2026 21:49:44 +0000
Manifest next update: Tue 19 May 2026 21:49:44 +0000
Files and hashes: 1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: eDd87snayxZ676RpbwG76yf4khdfQeH3cTDzo/Ca8Us=)
2: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: cxuC5mt/lZwqNGffF4CA11kwoRK1UHDLlLVN+mB5XQU=)
3: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: 7rQsxODOe8S8wCpj2cJIytKVy/MVPp6W4O54/79yfuw=)
4: C5058712A3B911EC9709462AC4F9AE02.roa (hash: TbGbT+LPow5rz8JGgfsHT1Q0vL5d/bm4eFUkOIio6DA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886 (0x75e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Validity
Not Before: May 12 21:49:44 2026 GMT
Not After : May 19 21:49:44 2026 GMT
Subject: CN=6a03a079-3d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:79:3a:76:90:a9:57:39:cb:37:8c:5b:66:
85:1c:b6:39:ec:08:79:ff:bc:37:c5:52:48:4f:d4:
e9:65:1d:29:fb:d8:08:33:a6:e5:d8:39:aa:61:0e:
d6:b9:a4:c8:1f:0a:b6:95:32:26:e2:73:55:a8:f2:
32:e2:c3:2f:c1:b3:5a:7a:5e:67:70:c7:87:a3:07:
c9:86:ca:19:ce:d3:4d:f7:66:2c:37:2b:61:57:25:
7e:4a:ef:1f:bb:55:76:5f:27:0b:83:45:5d:83:bc:
57:69:39:64:0d:0a:d1:81:60:61:dc:af:d3:0e:2b:
82:9a:f0:43:03:52:1b:b6:ba:9c:37:26:ca:f5:fa:
4d:60:c0:1b:e1:81:e9:eb:5a:d6:ff:08:f0:e4:fb:
07:4d:a0:29:27:ba:20:a6:97:5e:2f:20:f7:24:02:
4d:50:b9:c7:15:6c:cb:fc:80:94:f1:e6:d6:ad:f5:
2a:83:f1:89:61:a8:4f:d6:d6:d5:0f:f6:66:06:30:
2a:01:48:60:b8:bf:d4:b9:9d:bb:05:56:a6:e7:71:
ee:03:75:17:50:6a:4d:b4:46:9c:ee:2e:df:69:94:
2a:c8:a8:53:77:4d:ce:f4:ca:94:80:21:32:86:ce:
40:95:d1:f8:ba:70:3a:6b:b8:49:7b:d6:4b:e4:35:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:97:92:83:3D:37:A3:F2:68:7C:E5:EC:E7:90:77:A2:62:95:91:79
X509v3 Authority Key Identifier:
keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:3e:b4:89:d3:09:a7:3c:75:57:12:89:b9:bf:c8:0b:c7:ae:
6f:32:f7:7a:cd:84:6f:6d:56:69:ae:2f:b4:87:fb:82:c3:2c:
90:22:ab:fa:15:ec:43:c0:1e:d6:07:f6:27:6c:ca:27:2a:eb:
11:9c:30:90:98:78:6e:55:ee:f1:71:a7:58:ea:8e:8a:3e:7c:
e3:c9:b4:6b:cc:87:0d:a6:a8:e0:54:66:98:dc:12:12:22:98:
9a:6f:c6:3c:5d:05:09:a2:27:44:c7:e5:78:c1:52:5b:6d:df:
34:08:c6:59:6d:97:18:4f:c7:a9:9b:4d:b2:89:12:e6:8c:96:
d6:54:df:e1:08:86:91:06:e5:03:c0:b7:b8:fc:64:47:9a:a5:
a8:3b:10:f0:21:d7:96:d4:dd:38:c5:f1:f9:e4:44:39:c0:d7:
65:f6:8d:74:39:a3:48:b3:e7:04:5d:53:0f:53:4a:d6:8e:4d:
69:f9:5d:47:ee:df:3e:f7:74:cf:0d:12:6c:1d:52:29:6a:a2:
ff:85:ac:6d:b3:a3:99:0d:be:b8:4a:c8:bc:d9:e0:29:0e:e2:
dc:9e:b0:b2:8e:9e:d8:9a:df:19:b3:c2:cf:25:13:a2:2c:19:
8a:e7:80:a1:a1:36:39:59:ce:5d:db:68:e7:a3:e1:24:22:cf:
90:2d:6a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:17:23 2026 by rpki-client