
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json)
Hash identifier: tIm59hepA7Qxcvs+CKWNkJl0Fxliv1uBBs74KlVkmB8=
Subject key identifier: 20:06:A7:45:9E:8A:BB:92:28:99:92:DB:BF:6D:1B:50:61:4B:5F:62
Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Certificate serial: 03A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
Manifest number: 039B
Signing time: Mon 27 Jul 2026 01:49:05 +0000
Manifest this update: Mon 27 Jul 2026 01:49:04 +0000
Manifest next update: Mon 03 Aug 2026 01:49:04 +0000
Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: MD/C6xEa1fyvVHF4VDq1xsau44mSTAcRUvL6GUHHG68=)
2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: VMg0FbYsGm4Am7FsMSKTByp4rI7yTLLmWElUqa+g/C4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930 (0x3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Validity
Not Before: Jul 27 01:49:04 2026 GMT
Not After : Aug 3 01:49:04 2026 GMT
Subject: CN=6a66b910-2ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c8:d5:42:8d:21:ce:d9:64:a6:8d:88:86:17:
48:2d:0f:25:a4:2d:0f:13:6b:b4:69:85:bc:2a:2b:
a0:5b:08:1f:3d:60:f7:ab:dc:50:3f:92:b6:c4:80:
ba:a5:49:26:4f:f3:d1:2b:55:9e:66:3c:0a:96:ae:
0c:8a:02:d8:0b:d9:39:3a:47:02:f8:ba:05:ca:70:
25:cd:b3:57:d1:6f:8a:21:6e:d1:a2:d5:a8:61:96:
24:78:68:7f:f2:89:9c:a3:ba:23:b4:04:dd:b8:c9:
71:4f:b7:8d:8c:c8:22:28:e9:ec:b7:9e:b5:b6:43:
da:31:f9:6a:1b:c7:28:ee:72:dc:40:9d:48:66:0a:
82:d3:dd:f0:4c:24:b4:f1:2d:de:b6:cb:f3:bf:96:
be:b6:bc:5e:63:3a:47:aa:30:92:2b:3e:1a:7b:c7:
da:c1:0b:ed:44:e0:2f:36:c3:b8:f5:ee:b5:b8:0f:
0d:e9:1c:13:2b:0e:1c:0a:4b:9c:f7:7f:63:61:38:
07:2d:3d:5e:33:41:2b:62:92:35:dd:92:06:03:d4:
1f:8f:5b:39:fa:87:15:02:c0:b6:7d:56:a9:68:be:
2d:18:16:06:9a:61:30:61:ba:d1:a8:79:dc:d7:42:
fa:88:38:e0:0f:fe:9a:1e:b7:a2:6d:2c:20:6c:d4:
01:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:06:A7:45:9E:8A:BB:92:28:99:92:DB:BF:6D:1B:50:61:4B:5F:62
X509v3 Authority Key Identifier:
keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:2c:37:0e:da:da:68:8b:b2:e5:bd:74:f2:b5:9b:c7:64:de:
26:8d:01:67:c5:a8:8f:3b:a6:d6:5d:9b:a7:cd:56:dd:5d:87:
95:e8:6b:4e:ae:71:34:a1:77:f7:25:7f:06:ba:43:52:62:93:
ea:07:3d:e6:52:b9:65:0d:b7:1a:e2:99:74:1d:41:c3:24:36:
3b:78:c9:b8:5b:50:99:d3:f2:7a:2d:2e:19:e1:1d:83:d9:d3:
0f:76:c5:d6:a5:74:8b:14:1c:df:39:e4:1c:93:d2:fc:24:4c:
27:3d:82:fd:ca:df:f6:ea:26:21:25:50:ca:e3:0e:a7:ae:43:
4c:29:c9:eb:8e:0f:b5:74:b5:f7:c7:65:37:fc:6c:a9:79:af:
4d:ac:22:e7:5c:10:d2:38:a0:a3:24:df:19:bc:65:61:b1:ea:
3d:e7:24:af:b5:bb:dc:ab:e4:79:13:ec:9e:9b:c4:f2:bf:6f:
f1:cd:0b:22:79:a0:a5:68:01:9b:26:95:4f:33:ff:b6:59:36:
68:58:c0:13:e5:7a:f8:d4:0e:f1:25:66:3f:47:b4:b6:df:7a:
39:cb:be:66:5c:54:a3:f9:cc:45:92:e6:ec:e1:aa:39:00:83:
54:b5:03:a3:23:2b:b2:bd:11:b5:73:75:ad:20:e0:34:4f:83:
d0:68:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:22:34 2026 by rpki-client