
$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json)
Hash identifier: V38QC12LgzY1COyxzJg0VoTKL1INcvDOkHZDP6szf7Y=
Subject key identifier: 0B:8D:E8:C7:FD:A4:85:F3:7E:0A:C9:A4:9F:3E:7B:AE:B3:02:B7:DA
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial: 1874
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
Manifest number: 1837
Signing time: Tue 28 Jul 2026 16:37:27 +0000
Manifest this update: Tue 28 Jul 2026 16:37:26 +0000
Manifest next update: Tue 04 Aug 2026 16:37:26 +0000
Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: FLVVrxD+UaKyFVUozWmK4ZpDedufZgm57Tu0JfLbqLM=)
2: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: n1u9iSyb9bdQc1QOK/WYlhLEbmOoYxOlffVDVXq1fW4=)
3: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: t9gfSRrRBhg5aKee6bLsa2HCvO/wXMYsjYUGDi3D7i0=)
4: 047C0BCC373211F1887E264A90833773.roa (hash: LWhnCQp9VfJYhsJdhzflBR7RBHFtlmggsyH3Tj4cj0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6260 (0x1874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Validity
Not Before: Jul 28 16:37:26 2026 GMT
Not After : Aug 4 16:37:26 2026 GMT
Subject: CN=6a68dac7-1057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:19:5d:2e:59:1d:5b:dc:49:0a:cc:f3:31:
80:8d:61:dd:77:dd:9b:c6:9a:c4:80:6a:20:69:4f:
30:da:9d:85:71:25:20:75:fc:54:aa:13:7e:c8:25:
40:30:c8:2c:4c:53:52:a5:bc:73:93:6a:5b:61:17:
c8:5a:c9:ff:6f:ce:a4:54:b8:c6:00:16:8a:d3:a2:
af:bc:cc:b1:d8:46:bd:c8:f3:59:fb:c1:23:e9:c2:
90:f1:0e:7a:0f:76:a8:45:14:48:8f:7b:27:ea:40:
eb:9d:67:31:d7:a2:3c:47:05:24:36:85:91:8a:f0:
e0:8d:a9:f3:f6:f4:05:2a:bb:29:07:3d:21:f7:f4:
a5:59:e7:28:d6:a5:e6:67:df:5d:a0:ee:87:ef:d4:
5f:fc:b9:e6:6e:f2:24:02:e3:b7:cf:27:03:70:15:
d7:f8:45:51:1e:f9:e6:de:5c:95:c3:b8:89:25:ff:
3c:68:fb:11:b0:7b:02:42:6c:b8:34:ee:d1:4a:75:
cd:d0:6a:d1:85:74:42:ab:50:6f:23:90:41:07:24:
30:96:bf:7b:91:67:12:eb:fa:db:36:0f:1b:ef:ec:
a3:6e:9f:17:c1:1d:05:a1:e6:8a:fb:b7:e3:2b:3a:
09:5c:e1:1a:ca:94:77:ca:21:15:13:8f:1d:7c:46:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8D:E8:C7:FD:A4:85:F3:7E:0A:C9:A4:9F:3E:7B:AE:B3:02:B7:DA
X509v3 Authority Key Identifier:
keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a4:6a:0f:4a:46:7c:57:6f:63:89:62:21:7e:e6:09:ec:2d:
05:2b:35:2a:8a:3d:85:59:ff:d4:d6:1d:03:37:c3:5e:b7:7e:
6f:03:3e:cf:62:44:65:64:83:bc:28:a2:49:d5:56:a7:84:16:
b1:eb:93:1b:e1:73:fa:0c:81:10:20:e5:5b:12:70:41:4c:19:
e1:3d:c6:87:36:fa:57:a5:e5:64:5f:f3:19:3f:9f:95:ef:91:
58:b5:d4:f8:dd:5c:8a:1b:f3:58:35:6f:a1:e6:ff:50:d0:4e:
28:af:e1:fd:2b:1d:a9:fa:0a:b3:1b:b8:e9:8e:db:4a:36:9e:
82:57:1b:33:65:bc:e7:51:fe:38:fe:a0:c8:89:38:9a:c3:48:
b2:aa:cc:d9:6d:2f:6f:d3:b2:c1:50:82:2a:3b:aa:ab:77:f6:
60:39:2f:a0:ca:93:51:51:e8:db:50:a5:87:7e:39:5c:e3:3d:
13:bc:79:9a:62:4f:0b:ce:29:a7:f8:cf:bf:1d:d4:65:2d:20:
b6:3a:3a:18:24:c4:fc:51:59:6c:b8:65:f7:d5:c4:1d:57:a9:
ed:9a:e0:fd:72:a2:7e:fb:b9:cd:28:5a:e3:51:da:e5:94:8c:
fb:42:0f:c6:0a:92:7f:fa:22:e3:27:ff:47:cf:09:7c:4b:14:
67:c1:54:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:16 2026 by rpki-client