
$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
File: wrn188aMV2cnI5uSqTs2KX0bFlM.mft (raw, json)
Hash identifier: eF3Bwcmt9hpQW4l/QYRJNT+6Xhp7IFlStM+3xSelGTY=
Subject key identifier: 8E:21:8F:DD:91:22:48:B7:99:9C:19:1D:D1:B2:45:A5:F2:2B:D8:89
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial: 1435
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
Manifest number: 12FF
Signing time: Tue 28 Jul 2026 17:11:38 +0000
Manifest this update: Tue 28 Jul 2026 17:11:38 +0000
Manifest next update: Tue 04 Aug 2026 17:11:38 +0000
Files and hashes: 1: wrn188aMV2cnI5uSqTs2KX0bFlM.crl (hash: JTEAw6i/DrU3X9zjLhzNJ5tqsftNvu3Tv06vD1q00vc=)
2: 61E919B60C8D11EFA97EC809C4F9AE02.roa (hash: tQ1ikNfK7Vim/bFi4z6bziWpHz3U2eKnhOynUohqpxs=)
3: 087D2D80C4A711EB917EC55EC4F9AE02.roa (hash: Wolm9UeE+EhBtIqciTvCXVtEF6ClLkDl72F+NCa8HHw=)
4: B5B4AB0839DA11EF9ECCF886C4F9AE02.roa (hash: gZaliWCK4gHCj9WB2iuBl7f29djODeWrvm+6ZvujdYw=)
5: B630F86086F011F19E006003A7EE528E.roa (hash: Dc+lIrluDlwFqmSNTbpJGR9JAggoonA7Vsue96ulmVI=)
6: 660C8B72D03511EC9D87A00DC4F9AE02.roa (hash: 6kGj9g0KDucDziTKJ62tVbg64ONIl+PSzCMAJZcH2Jk=)
7: 93C20720C45311EBB305C97FC4F9AE02.roa (hash: S/Y91IEgM5aflGLEzlGeBT/tgZ/jD+6O5TlrqC9CKpk=)
8: 38C33A60AF8811E98C7EFC2AC4F9AE02.roa (hash: DLbTmFrFlPIxUN2XfAIKvCWHMwbAAUIzYG+0bkl/CNs=)
9: 7CB2221C91E111F09C322980C4F9AE02.roa (hash: gGX0+IJAB9Y8HK43VnoArGvarnNirkBuquyKdR9qJ+Y=)
10: 19043EA2870011F194514C90ABEE528E.roa (hash: VjShsmL5ZFYYnJBaa2qosrG0SLnE722xo8oJ6HX7Gms=)
11: C699F452FDF711E8B5A6725EC4F9AE02.roa (hash: 5RqWe8o0dfGTqf8ewpJNsz0dv3ajfZ+2bJ7T0SLCDaY=)
12: 8296B130A0DC11EF8963C80AC4F9AE02.roa (hash: +YU2qazxQ5TlleHAi7tNHRoI1tVjlMO45d2u0SKm7Io=)
13: 2A162D644EE411EFB8076138C4F9AE02.roa (hash: Kf6gjh7KZfEG45HdQkbULk0aLTXniUioUOtHyQcIdO8=)
14: E6B3F23C041E11EA8A736F7EC4F9AE02.roa (hash: ApRSn/Ex+zsbcgkYpd+d+Dx8MKNptT/BXsBbr4u4SDI=)
15: 55480A70209D11F1B432799B3C3D8C67.roa (hash: p/0sKwLecgwhWWQFyF+NuwLFfixagfP7boBmEaaDWSs=)
16: 54A1818C209D11F1B432799B3C3D8C67.roa (hash: WbaoUU/OFh1ZuBX98fNj7fnxbByF4ecU5gO8QmGQCpU=)
17: 459087B0C4A411EB90A2C754C4F9AE02.roa (hash: ADS5mb3F4iv3Eo7vcoS33pSlbqwUjh8MTWpt6QP2F8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:11:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5173 (0x1435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Validity
Not Before: Jul 28 17:11:38 2026 GMT
Not After : Aug 4 17:11:38 2026 GMT
Subject: CN=6a68e2ca-ab0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:4e:2b:a1:d5:20:05:f3:cf:eb:e4:50:c1:
22:56:fa:35:18:71:e5:88:22:2a:ca:4f:ac:20:5e:
99:21:1e:96:53:9d:a6:e4:73:da:4b:22:1e:4c:ce:
fe:31:9a:76:fb:60:5b:fb:91:f9:b6:50:f9:ec:16:
c8:10:27:ad:dd:85:10:12:6c:43:9d:0e:a6:0c:b3:
1d:0a:75:d4:2a:20:12:d9:5e:5d:03:c8:63:1f:cb:
e1:13:fc:82:83:43:b6:71:0c:80:46:0f:cd:52:38:
0c:6c:38:2b:5e:cf:36:ba:b0:67:27:1f:0e:f7:3f:
7d:90:12:77:4a:05:3e:ee:d2:e4:ed:75:7b:cd:17:
f1:05:19:b7:12:f4:f4:d7:32:8f:e3:ee:f6:66:b6:
46:17:70:0d:13:90:7c:4b:2e:d6:48:e9:56:88:89:
9e:18:84:df:86:64:0f:07:50:46:cc:0e:03:01:d3:
db:54:8b:d0:92:4b:77:07:f4:20:07:1b:86:61:6f:
74:67:1b:68:b2:75:f1:04:0a:9c:b3:e5:77:b1:8f:
54:2d:53:96:a4:04:47:2a:9d:f2:99:a2:3b:1a:79:
9a:0d:b5:b8:79:69:6a:80:09:04:4e:06:90:a2:ba:
b1:18:85:7a:df:8d:8e:d4:ee:05:8b:f0:a4:b5:20:
6c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:21:8F:DD:91:22:48:B7:99:9C:19:1D:D1:B2:45:A5:F2:2B:D8:89
X509v3 Authority Key Identifier:
keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:6c:f1:8c:16:bd:76:df:9e:44:80:62:4b:fb:80:36:54:8c:
32:a3:90:ed:a8:32:07:09:d4:1f:a8:d3:be:26:f6:8f:bf:59:
28:d3:60:e4:54:ba:59:25:f8:53:78:a1:68:09:d9:d9:e7:ca:
d9:2b:73:d7:77:46:7f:58:08:c5:2d:a4:8f:fe:c4:e1:a6:83:
e1:1d:9b:53:56:1e:c9:93:83:f6:9e:45:91:ad:93:99:8f:af:
40:c0:08:74:96:76:53:cc:c7:98:2a:f9:02:5a:92:cc:00:a6:
6f:c9:ec:ac:f6:0e:a1:82:a7:b3:39:e3:d5:5c:f7:c9:33:a4:
a8:5f:98:28:45:03:05:de:d7:2b:03:7e:e5:e7:67:c5:9d:b2:
5c:45:40:41:ca:77:51:b7:7a:40:db:b9:e9:09:26:d5:b8:3a:
d8:37:2c:a8:e5:d3:9b:6f:bf:af:8a:85:14:35:24:d9:78:a0:
10:15:42:8b:d5:32:d5:f9:4f:ce:18:ce:3a:1d:d0:d9:4d:31:
5d:10:8b:2d:24:f2:b5:4b:4b:3f:5e:e1:af:b3:2e:31:7e:47:
17:c4:5d:04:82:81:60:28:d4:a2:51:b9:2f:a2:00:21:3a:01:
99:3f:b9:f4:51:6a:d2:3d:8f:9e:54:5d:2e:23:8c:ce:13:b3:
2d:dd:44:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:56 2026 by rpki-client