
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json)
Hash identifier: TY6V5csdDbGeOIojv4Vk1P2f4w8f5tc1BtecQ9IAvhA=
Subject key identifier: 06:FA:3C:A0:8F:30:49:36:D9:5B:E6:39:53:1D:AA:5A:63:D1:AE:05
Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Certificate serial: 0D3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
Manifest number: 0CEE
Signing time: Tue 28 Jul 2026 18:33:29 +0000
Manifest this update: Tue 28 Jul 2026 18:33:28 +0000
Manifest next update: Tue 04 Aug 2026 18:33:28 +0000
Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: JbQqWvAueMbycv+2SKlqds2wp2SwTCMMr/ezIC3iNys=)
2: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: AHwHR5P2unOzFbZF5/kMyWr9jBEmZP7l5z9TXIMdKwk=)
3: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: AHjXiMIEVnSzV4RLfQ08q+VyTYzKnjva9QjgZk6PmpU=)
4: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: 3FuLmxDCD+MP2E5xN50Lj/x322ZG9I8Yf6S6pBk1v9I=)
5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: 9QLph5XKLgZKwZp92nb4WN3QSXDopmzK9+Xmf9Dp/gQ=)
6: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: ljKSat9M5iVgEMjN0irLGI7aCNi5tcJLeC8QiDxfwJM=)
7: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: EvFkN9ZYuEFDBnjNtq9mVeqEYzT9yDvOX5AijaVncLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3388 (0xd3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91
Validity
Not Before: Jul 28 18:33:28 2026 GMT
Not After : Aug 4 18:33:28 2026 GMT
Subject: CN=6a68f5f8-a8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:48:06:47:07:11:0a:ce:94:1d:c4:20:11:
c8:80:50:d7:fb:3a:de:27:cd:de:c9:0a:c7:61:ba:
48:69:ea:31:00:6a:a1:3f:47:07:5d:44:5d:e9:ee:
2f:b3:97:96:58:b6:e4:05:7d:84:bc:65:4b:32:19:
0a:76:6e:f7:cf:85:e3:60:0e:9b:c0:c0:32:54:23:
e2:0d:a4:29:55:cf:ab:24:08:72:32:2d:23:66:00:
ff:3f:a0:55:26:84:f5:8c:2e:af:22:e4:71:d8:a8:
c7:4b:11:cc:e7:be:2a:4e:58:0c:63:0c:7e:dc:61:
91:45:b0:73:30:64:47:f8:d6:84:bc:98:06:6f:c2:
a0:e4:65:6a:97:4b:fa:24:6c:4c:e8:2b:30:7e:36:
49:08:5b:e8:c8:49:7f:b4:58:02:db:a1:8b:0e:29:
a5:1d:f3:4a:e3:5e:e6:26:61:bf:27:ce:31:c6:21:
44:46:1c:78:fc:e6:4f:2c:71:f3:10:70:04:15:29:
2f:e2:11:44:56:83:90:0e:9f:7a:75:74:8d:45:99:
67:4c:14:d6:26:27:0b:c6:61:87:7c:a3:c4:c7:e1:
fb:f2:a8:43:ba:f8:da:e2:ee:9f:75:6f:d3:c0:8f:
f3:71:a1:f9:b5:9b:bc:50:22:63:af:cc:dd:5c:7d:
76:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FA:3C:A0:8F:30:49:36:D9:5B:E6:39:53:1D:AA:5A:63:D1:AE:05
X509v3 Authority Key Identifier:
keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:9e:32:02:ed:85:7b:23:cb:05:13:85:c4:d6:38:89:c9:76:
b8:f5:e6:13:83:64:39:5f:1f:e9:bc:c6:8a:b9:9d:85:c1:d0:
e3:6f:78:2d:af:d4:97:d8:85:c5:4a:46:36:25:1b:ed:f6:44:
8a:5f:f9:9b:ea:dd:f8:de:6b:b9:6b:97:ef:82:66:b8:23:24:
86:2c:ff:f1:ed:82:73:a3:d6:26:74:bb:a1:d7:21:26:e0:c2:
fd:bc:37:79:4c:0d:21:8f:56:83:f5:7b:04:59:7d:1f:a7:b3:
72:83:80:1b:b0:e3:9d:aa:99:2a:1a:12:42:bd:30:67:82:26:
52:04:a6:1a:2f:2e:15:73:91:53:91:0d:f5:5e:ed:48:80:89:
eb:b6:4c:00:70:c5:03:c1:98:7e:ae:14:fe:21:a3:62:d6:8e:
cd:b0:e1:80:c3:94:d1:5f:9f:b7:df:b7:79:ab:18:92:56:95:
49:ef:c3:6e:12:aa:c3:94:a1:3b:58:0f:d4:d9:1d:03:2a:c2:
2f:56:4b:d0:e6:26:48:97:43:2c:95:80:a8:7b:0f:5e:d4:78:
73:9c:c1:4c:f5:e1:a0:1d:ca:3a:8b:f4:56:39:50:44:00:db:
c6:f6:c9:d2:20:78:cc:01:67:e1:a3:58:9f:06:9c:c9:3b:26:
3c:02:95:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:39 2026 by rpki-client