
$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
File: wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft (raw, json)
Hash identifier: kkfYRd0uRN82JQlQLe7hFeh/cWVc2fQ+W0/fTIrVdoU=
Subject key identifier: 60:78:21:18:C5:C6:99:02:4E:7A:5A:31:A0:4B:5E:D0:36:5D:FD:64
Authority key identifier: C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
Certificate issuer: /CN=A91731AD/serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
Manifest number: D6
Signing time: Mon 27 Jul 2026 08:53:14 +0000
Manifest this update: Mon 27 Jul 2026 08:53:14 +0000
Manifest next update: Mon 03 Aug 2026 08:53:14 +0000
Files and hashes: 1: wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl (hash: 2VMaZBbGrs91JEINZM7wM4QKy8pkzsKsEHR2JYs1INs=)
2: 31D77D7ED99811F0B81C7A7265D3641D.roa (hash: Jip17pxqKZC2BhkcnsPqn4RhbWqhszPQxTWPgOJM/Hc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl
rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91731AD, serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69
Validity
Not Before: Jul 27 08:53:14 2026 GMT
Not After : Aug 3 08:53:14 2026 GMT
Subject: CN=6a671c7a-e5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:40:4c:bc:42:d3:33:98:91:c4:4f:55:47:
a0:a3:52:4d:be:b4:ac:d4:10:9d:46:7b:59:78:72:
55:f8:63:bb:f1:fe:5b:07:a8:9d:b0:f2:aa:32:15:
a0:5c:9a:aa:c0:53:54:8b:46:06:55:26:5a:a1:45:
0a:44:93:25:55:50:b5:fc:34:96:34:9e:0a:a7:a1:
3a:eb:59:8e:67:df:ca:a9:1f:64:06:3d:bb:59:ce:
5c:43:ec:26:39:c6:4e:fa:5b:49:78:49:60:a7:8a:
e4:c5:f5:c6:67:fa:f7:45:25:ed:50:9c:c6:81:11:
54:0d:c8:33:31:b0:dc:a1:40:e5:d7:db:1b:e9:7f:
44:bf:a3:ad:7a:e3:c3:ff:32:7a:37:f2:30:69:25:
1c:35:3b:9d:1c:3b:9f:68:94:9a:9f:b5:49:46:6b:
ca:a3:ac:e2:7b:d2:69:9d:a1:7c:5c:28:14:8b:b6:
b0:89:03:66:61:d9:12:48:65:35:53:42:61:ec:03:
28:47:35:c5:35:ff:b0:89:3e:10:db:b3:ab:d7:18:
46:67:77:f6:96:cd:52:bc:f4:e0:10:55:c1:1c:e4:
71:77:e1:ba:f5:76:3f:6d:bd:a2:fe:e9:f1:ae:a4:
75:23:53:92:c8:9a:91:75:24:b6:09:29:15:dd:54:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:78:21:18:C5:C6:99:02:4E:7A:5A:31:A0:4B:5E:D0:36:5D:FD:64
X509v3 Authority Key Identifier:
keyid:C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:72:8b:f2:b4:d7:ed:d5:a7:f9:b2:08:83:d3:40:fd:ef:a1:
ea:52:7d:fd:17:fe:b6:ba:db:cf:9d:4f:30:ce:3f:fb:b7:09:
f7:97:83:8b:2e:46:80:2d:03:47:85:ab:14:8f:3b:b4:1d:7b:
a6:af:c8:e8:4c:73:bb:cc:84:f6:c9:22:39:f1:48:21:cf:94:
98:c5:a3:29:11:d7:cf:13:65:f0:28:c8:df:ce:8a:61:88:3f:
8b:dd:fd:e5:5c:98:99:a6:d1:6d:ee:0c:d8:e7:75:73:60:f7:
0e:c3:bc:8c:66:21:33:77:26:8c:d6:a4:65:5a:4e:1f:24:16:
8f:69:70:38:80:ad:10:ec:92:41:f1:f5:23:29:04:a8:00:6c:
5d:6f:12:e4:f1:9b:c3:37:1b:86:4d:61:5c:97:6b:0b:e8:57:
4d:91:fe:59:b7:7b:4e:6a:ee:39:d7:98:9c:18:b7:e3:1b:ea:
78:6e:27:24:8e:a2:53:4d:a2:ed:38:26:19:12:df:c8:8d:66:
0d:46:52:fa:4a:b9:f5:3f:01:18:bd:a5:c7:a4:e8:47:6f:df:
b2:de:7e:d7:04:e0:e6:d5:cf:25:8b:3a:8b:33:15:50:5a:df:
f5:ea:89:a1:f1:fd:8a:ea:50:dd:02:3d:2c:90:bd:a6:d7:0f:
87:62:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:15 2026 by rpki-client