
$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
File: WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json)
Hash identifier: /EZaVofamGpj9FgJZ4pOB/pJ1ED66H0tuyDUvBU8MKk=
Subject key identifier: E5:03:E2:FF:9B:99:B5:0F:34:82:AA:AD:4C:2D:88:47:99:8D:6C:5F
Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
Certificate issuer: /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Certificate serial: 3560
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
Manifest number: 3560
Signing time: Tue 28 Jul 2026 14:56:09 +0000
Manifest this update: Tue 28 Jul 2026 14:56:09 +0000
Manifest next update: Tue 04 Aug 2026 14:56:09 +0000
Files and hashes: 1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: JhCOSZBZhxU/sGCdZ1djEeb8T/nt5UDrAvKOabK4BY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13664 (0x3560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Validity
Not Before: Jul 28 14:56:09 2026 GMT
Not After : Aug 4 14:56:09 2026 GMT
Subject: CN=6a68c309-cba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:d2:f0:5b:8f:64:94:10:4f:b6:5d:08:4f:
5b:c6:dc:5d:ee:5f:7b:7d:cd:a6:28:64:c2:93:37:
3a:03:79:43:b7:41:bc:c3:fb:02:f5:df:ad:97:19:
35:80:1c:33:eb:e1:ee:0b:b0:43:28:ab:a5:25:2b:
c0:25:96:e3:9f:87:ef:66:da:0c:3b:e5:15:0d:b8:
7c:1e:11:2c:72:6d:aa:54:70:98:92:49:66:4a:20:
4b:10:19:b8:68:e9:f3:db:86:24:5e:c7:af:f3:81:
51:08:f4:bb:ca:09:28:45:8e:11:59:ca:d6:b4:d1:
e7:3b:8c:44:67:45:75:6f:4d:f1:77:5b:2a:97:ff:
59:87:27:e9:8c:a8:36:8e:44:b6:07:0e:eb:9c:98:
5b:2c:f9:df:da:ba:34:00:47:01:53:6b:f6:98:02:
73:7d:36:24:06:01:0d:95:5c:f4:72:38:a9:92:07:
a0:c1:e3:35:da:43:1e:1a:17:84:b6:b5:e9:54:79:
4d:c3:37:31:4d:3d:8a:00:c4:a4:27:04:ac:ab:6e:
47:21:24:00:82:8e:70:02:07:da:0b:a0:65:7b:c0:
46:d7:3e:d3:ee:7f:72:78:06:a0:c6:31:d8:68:1e:
d7:91:bd:61:b9:1c:83:af:43:84:1d:53:b9:58:6f:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:03:E2:FF:9B:99:B5:0F:34:82:AA:AD:4C:2D:88:47:99:8D:6C:5F
X509v3 Authority Key Identifier:
keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:50:48:f8:7d:59:46:de:4d:a2:27:c2:b5:5b:0b:19:ae:1a:
06:b3:b6:cb:da:0a:b7:dc:1b:e9:ed:ec:6a:00:44:e0:4c:5a:
fa:55:e7:99:0b:c6:aa:43:64:8c:90:af:3f:06:7b:c1:8b:16:
c7:94:3f:ad:ed:7d:06:17:7e:1b:e6:27:41:77:73:e4:33:6c:
9c:6b:ba:87:29:17:c1:12:54:02:55:f8:0d:87:5e:ad:84:ed:
84:51:01:14:72:cf:2e:b4:f5:aa:75:5d:20:28:a5:99:88:5d:
66:97:e0:82:10:83:43:13:08:b2:b0:86:29:8a:2f:e4:d7:17:
41:45:ca:9f:25:7c:0c:1d:ce:a1:f9:22:8b:dc:48:0c:58:00:
99:c6:92:39:f4:d6:64:86:67:1b:f5:e8:b7:e4:9b:8a:14:9f:
65:2e:c0:17:ba:de:48:90:2c:bc:ad:75:a3:a3:16:7e:08:ab:
90:ed:15:6a:06:96:88:71:2b:79:6e:11:16:9e:3c:e1:c0:2a:
5f:f8:5f:8b:a7:39:d0:fc:a5:e9:99:cd:c8:9f:19:30:07:09:
08:b1:61:da:23:ea:88:48:05:1d:29:c2:cc:cf:83:9a:c2:79:
00:c1:a1:1d:52:98:77:23:29:77:6e:ac:67:fe:5a:fe:57:f3:
20:63:ee:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA4Q0UxMTAvBgNVBAUTKDU5OUIwNUVGM0MwOTM5MjJERTk4OUJEQzczOTkzRjQ2
RDYyNTc1NDkwHhcNMjYwNzI4MTQ1NjA5WhcNMjYwODA0MTQ1NjA5WjAYMRYwFAYD
VQQDEw02YTY4YzMwOS1jYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq2nS8FuPZJQQT7ZdCE9bxtxd7l97fc2mKGTCkzc6A3lDt0G8w/sC9d+tlxk1
gBwz6+HuC7BDKKulJSvAJZbjn4fvZtoMO+UVDbh8HhEscm2qVHCYkklmSiBLEBm4
aOnz24YkXsev84FRCPS7ygkoRY4RWcrWtNHnO4xEZ0V1b03xd1sql/9ZhyfpjKg2
jkS2Bw7rnJhbLPnf2ro0AEcBU2v2mAJzfTYkBgENlVz0cjipkgegweM12kMeGheE
trXpVHlNwzcxTT2KAMSkJwSsq25HISQAgo5wAgfaC6Ble8BG1z7T7n9yeAagxjHY
aB7Xkb1huRyDr0OEHVO5WG9xBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUD4v+b
mbUPNIKqrUwtiEeZjWxfMB8GA1UdIwQYMBaAFFmbBe88CTki3pib3HOZP0bWJXVJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8xODYwREZDNjFE
OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9TTGVtSnZjYzVrX1J0WWxk
VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dac0Y3endKT1NMZW1KdmNjNWtfUnRZbGRVay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDhDRS8xODYwREZDNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9T
TGVtSnZjYzVrX1J0WWxkVWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALVBI+H1ZRt5NoifCtVsLGa4aBrO2y9oKt9wb6e3sagBE4Exa+lXnmQvGqkNk
jJCvPwZ7wYsWx5Q/re19Bhd+G+YnQXdz5DNsnGu6hykXwRJUAlX4DYderYTthFEB
FHLPLrT1qnVdICilmYhdZpfgghCDQxMIsrCGKYov5NcXQUXKnyV8DB3Oofkii9xI
DFgAmcaSOfTWZIZnG/Xot+SbihSfZS7AF7reSJAsvK11o6MWfgirkO0VagaWiHEr
eW4RFp484cAqX/hfi6c50Pyl6ZnNyJ8ZMAcJCLFh2iPqiEgFHSnCzM+DmsJ5AMGh
HVKYdyMpd26sZ/5a/lfzIGPumA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:33 2026 by rpki-client