
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft
File: WBMy9dPriCpcJS_f2YC2Cho3jkE.mft (raw, json)
Hash identifier: HhPF3sudBygBN0Uw229P9sWddDMtllsges0PV2dyJyg=
Subject key identifier: EC:39:EF:31:56:3A:83:34:45:8D:AE:2A:25:A9:97:47:80:48:47:93
Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Certificate serial: 02D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft
Manifest number: 02BF
Signing time: Mon 21 Sep 2026 01:32:19 +0000
Manifest this update: Mon 21 Sep 2026 01:32:19 +0000
Manifest next update: Mon 28 Sep 2026 01:32:19 +0000
Files and hashes: 1: WBMy9dPriCpcJS_f2YC2Cho3jkE.crl (hash: DmDf/OdkVaU4It30VGTw82mfG4mOECiNO1SIyItOGsE=)
2: A3D8BD72E04511EF8BD5FA0EC4F9AE02.roa (hash: pqdYInv/nDZDiEacJiXZnEMVlHi8rCr80wjDS/GVWDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl
rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D65B, serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Validity
Not Before: Sep 21 01:32:19 2026 GMT
Not After : Sep 28 01:32:19 2026 GMT
Subject: CN=6ab08923-fef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:d5:ea:92:d8:85:4f:ef:c7:17:81:13:ff:
83:e1:60:a3:41:79:dc:b7:57:a7:0d:36:84:8b:ad:
d5:79:9f:0d:77:ba:22:ca:3d:7f:3c:2a:17:68:2f:
2f:f8:96:ca:ab:3a:39:f7:77:76:e6:ec:01:2f:9f:
93:27:0e:81:c1:b6:ee:36:67:17:69:7b:3e:10:bf:
9e:95:a6:0a:02:5c:cd:3f:d5:47:e8:1b:74:e6:56:
0d:12:4a:4e:af:09:70:60:62:4c:da:ec:57:93:ac:
16:9e:65:bb:7f:e9:47:cf:5a:7c:ee:95:2a:9f:c8:
a6:ef:f3:79:7c:39:94:a5:43:e5:ae:8f:7a:7a:26:
bf:22:f6:a8:94:91:02:f5:01:0d:37:15:09:70:c0:
eb:8c:37:9f:2d:b4:13:65:97:97:1e:a3:01:9e:48:
55:5f:da:ed:4e:c6:e5:59:fc:37:fc:4b:26:72:c6:
5f:08:88:9c:2f:48:f7:f6:27:a2:ee:ef:d9:d5:bf:
e0:7e:c9:d7:e2:ab:08:20:f1:6f:0d:e2:eb:60:7c:
14:70:16:39:4b:70:d5:15:4f:4c:8a:b6:71:b8:f7:
f4:e5:69:6c:04:c2:63:46:6e:6f:ab:7a:b3:fc:a8:
a2:1e:23:86:61:0a:a3:26:c9:e0:2b:21:ed:b1:17:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:39:EF:31:56:3A:83:34:45:8D:AE:2A:25:A9:97:47:80:48:47:93
X509v3 Authority Key Identifier:
keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ee:41:f6:5e:4b:2b:6d:3e:e4:7b:9c:65:d1:be:65:86:f7:
46:cf:74:de:01:b4:57:89:7a:fe:1a:7b:b8:9b:3c:2c:17:83:
10:21:cd:c2:bf:fc:bb:c0:79:1a:d7:5c:f7:14:d7:c7:f4:c1:
33:55:61:0b:f0:5c:f6:7f:e6:a7:17:97:2e:9d:01:00:45:0f:
0d:01:9b:50:21:e5:b7:54:6b:0e:04:74:12:e7:c6:e7:65:b4:
32:9d:a3:a9:57:ad:7d:ff:74:b6:19:be:a7:c8:7c:2d:c8:9d:
26:8a:9f:24:0f:17:46:d2:c3:e1:ea:1d:06:76:59:57:a7:23:
ca:bf:36:23:55:d0:17:4b:e4:7d:92:d3:61:f9:9e:9f:dd:81:
08:ce:9f:11:c0:dd:d5:4b:a2:af:4d:fb:aa:76:23:fa:b5:58:
6d:b0:49:31:e9:b4:b1:10:c3:bb:96:78:a3:85:45:ba:50:e6:
aa:5b:fc:87:62:80:5e:8c:52:e7:bc:f9:5c:52:c0:ce:2d:ee:
ff:42:62:b5:ec:95:e7:f3:47:2a:28:84:07:e6:c5:5f:e0:c6:
e5:0f:ea:5b:18:f5:05:c6:64:c8:4f:68:7b:2f:e3:1a:49:cd:
96:46:ea:01:06:0f:c3:e6:e8:5b:db:39:8d:e9:f9:4c:4d:1e:
d6:80:df:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:03:16 2026 by rpki-client