
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
File: _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json)
Hash identifier: QmWpFCLKSVBy3pRGRQzmKEuQJUXtIXtNNkOivHkc6f8=
Subject key identifier: 95:CC:8C:70:F6:11:9A:8C:3D:F0:9A:BD:A8:C0:1F:8B:CE:41:51:20
Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
Certificate issuer: /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Certificate serial: 0BFA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
Manifest number: 0BEC
Signing time: Sun 26 Jul 2026 19:17:52 +0000
Manifest this update: Sun 26 Jul 2026 19:17:52 +0000
Manifest next update: Sun 02 Aug 2026 19:17:52 +0000
Files and hashes: 1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: C468FATj8ZGa5qdTFwYTZlUX3HwlHXwaJG5J6L0IeGw=)
2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: DFdvRHgXchuBm4qDLuYljzDy6YW5jSvcOAQEQdXRUns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3066 (0xbfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198F53, serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Validity
Not Before: Jul 26 19:17:52 2026 GMT
Not After : Aug 2 19:17:52 2026 GMT
Subject: CN=6a665d60-7cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:de:90:81:18:bd:53:fc:95:af:2a:d2:cc:
5a:0f:f4:0d:da:14:22:5c:99:c8:97:51:06:a9:3e:
0b:58:98:4b:80:0d:ea:c8:82:aa:6b:96:df:99:8f:
a1:3f:58:8d:88:37:66:ec:60:7d:4f:a1:74:e1:49:
98:36:6e:08:fc:0b:27:7d:27:97:de:53:74:74:49:
d5:02:11:17:61:61:f1:42:07:ba:2d:78:ff:8e:3f:
1a:62:27:ac:ae:7d:26:bc:88:db:e7:4e:b3:85:f7:
2c:d4:88:68:21:2c:f3:6b:c1:24:8d:6e:70:b6:38:
68:2b:80:d5:93:02:6b:fc:d1:4c:a1:40:64:a6:2b:
c5:8e:3d:a5:9f:be:a1:d1:ae:66:0e:6e:07:f6:96:
a0:cc:68:7e:2a:91:78:05:37:ee:4a:f3:73:27:e4:
bf:10:4f:70:14:ee:36:56:f1:dc:50:a6:88:16:9d:
66:9b:98:47:f9:1c:fc:36:6e:06:fe:9a:ae:11:d9:
df:28:ce:93:d7:de:7c:7b:c7:ea:34:ec:fd:89:ee:
15:86:c3:21:26:9c:82:5f:f5:06:11:b2:3e:6e:e4:
6e:4b:e0:99:77:7d:7c:53:48:f1:35:fd:67:f0:06:
89:d6:a6:70:83:19:7e:07:7a:f1:88:f0:00:f4:74:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:8C:70:F6:11:9A:8C:3D:F0:9A:BD:A8:C0:1F:8B:CE:41:51:20
X509v3 Authority Key Identifier:
keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:65:03:74:4d:46:ed:a9:e2:c5:04:ab:b2:3a:5f:d3:0c:2b:
a1:c8:ad:05:1b:1d:f1:41:a8:1b:c7:14:d5:3a:56:1c:9e:31:
0e:42:68:ae:cd:8a:74:df:d3:5c:f0:0d:c6:73:8d:bc:61:09:
07:4f:ca:71:8f:5e:6f:53:a5:46:4c:e5:cb:c3:d2:a4:21:70:
b2:9b:b7:d8:97:eb:8a:10:2b:e8:15:03:fe:89:e6:df:c6:22:
bf:66:f6:71:4b:f3:97:eb:27:7a:22:6a:9d:ae:66:d4:0e:f3:
bf:07:77:7d:eb:63:f6:aa:ec:cc:d6:a8:4f:6d:54:e0:9a:6b:
50:0c:15:4d:4e:93:f7:44:c9:1d:d7:68:b0:00:f2:7c:76:6c:
83:46:ef:dc:a8:b2:ff:4f:7b:f5:45:c0:4d:05:ba:15:1f:4c:
41:f7:4b:9b:1c:48:47:63:35:f3:9a:3e:67:dd:86:90:00:cf:
df:4c:d4:93:a5:a9:a4:f6:3d:7f:fd:7f:d8:7b:0b:3e:a7:ad:
b8:00:9e:b9:2a:57:38:01:e1:b3:a4:02:70:09:4c:18:5f:77:
3c:85:ef:31:f9:bd:2a:93:18:eb:a5:c6:c7:5f:83:17:96:29:
db:90:9e:78:d4:c0:07:42:96:6e:21:5a:f6:46:91:66:f9:f9:
7a:dc:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:25 2026 by rpki-client