
$ rpki-client -vvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
File: wTdkoKY6d2fzpHXXqBro3xiv4I0.mft (raw, json)
Hash identifier: THQAaYbFPpsufhhx46uvs7qztONWMlU2b5fAEHl8W/E=
Subject key identifier: 16:25:FE:DD:B8:7F:8C:FC:DC:9C:51:F7:60:B5:81:7A:12:C0:CC:A8
Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
Certificate issuer: /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Certificate serial: 02A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
Manifest number: 029C
Signing time: Mon 27 Jul 2026 03:04:50 +0000
Manifest this update: Mon 27 Jul 2026 03:04:49 +0000
Manifest next update: Mon 03 Aug 2026 03:04:49 +0000
Files and hashes: 1: wTdkoKY6d2fzpHXXqBro3xiv4I0.crl (hash: MhVc696sKtVoy6n548q+N7GPeyGoJVwQjdi6jwhdKpU=)
2: 8A7D7EA2426B11F0B0160739C4F9AE02.roa (hash: y6sr7tbJEN2rlUZBa3aIr3fhInWoQ8HE4shLL1FfQsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl
rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919941E, serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Validity
Not Before: Jul 27 03:04:49 2026 GMT
Not After : Aug 3 03:04:49 2026 GMT
Subject: CN=6a66cad1-fc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ad:c5:72:fd:25:54:3e:02:ae:15:27:14:1e:
84:13:d3:a6:fe:08:58:ed:96:d3:04:a3:41:d8:26:
1c:5f:ea:5b:72:30:30:58:65:7b:68:df:02:5e:20:
b2:37:39:e8:1c:1b:b5:af:65:9a:9e:a5:63:db:2b:
8e:7b:c2:fb:d6:d1:8c:ca:dc:07:87:1d:e3:e3:69:
ef:90:e8:c0:7b:5f:98:f0:3c:8d:61:3a:f8:81:ce:
dc:3e:1a:c4:7e:e7:ce:ed:6b:dd:a8:7b:16:04:e2:
66:48:c7:0a:09:45:29:ab:bb:98:af:ab:57:d8:37:
f0:aa:34:35:90:42:ee:e6:43:23:66:b7:cc:78:06:
8a:39:70:54:c8:4e:11:e4:28:62:e2:42:bf:b1:d6:
9a:a3:bf:ee:63:4e:23:cd:bd:f1:7c:21:90:2d:0c:
70:84:f9:2c:ef:8c:20:05:db:ad:dd:c1:17:64:b3:
5a:ec:1a:bb:55:af:c9:87:e0:ba:a0:0e:ce:86:c9:
00:ff:f3:7a:b1:ab:c8:13:49:2d:16:92:ce:27:8e:
77:7a:e4:f5:96:9b:53:de:81:26:70:00:8d:e2:a9:
db:29:5e:ae:b9:91:7f:16:12:9d:58:2f:d4:7e:6e:
4e:a2:8d:e6:a0:19:82:4e:ea:80:60:7c:36:d6:5a:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:25:FE:DD:B8:7F:8C:FC:DC:9C:51:F7:60:B5:81:7A:12:C0:CC:A8
X509v3 Authority Key Identifier:
keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:4a:31:e0:19:8f:c2:7d:41:ff:38:12:22:d8:c5:4c:e8:26:
7b:b8:08:5d:21:75:2b:79:47:26:61:84:ed:19:51:86:33:d4:
97:dd:13:d9:33:f0:3e:3b:69:57:5a:e9:4b:28:45:c8:ce:e3:
6b:af:7d:a2:f7:77:17:88:c4:62:c4:db:bf:2f:16:2b:1f:0d:
73:80:0b:93:ec:cb:e9:b0:61:18:ae:2c:6f:f9:39:a2:41:34:
e1:1b:71:cd:01:04:d6:71:e5:dc:24:7b:50:ec:90:10:af:89:
f6:20:99:a3:1b:cb:94:b5:f8:29:7e:44:20:78:21:df:1a:c0:
b5:d3:c0:91:45:43:e8:61:3b:68:33:f2:3b:90:13:40:b8:32:
81:4c:03:3f:a5:7e:4a:51:1f:64:88:50:82:2b:5b:7c:8b:de:
0a:73:99:62:5c:9b:dc:a1:47:ce:a6:bc:75:49:1d:ac:8a:bd:
8d:a2:eb:6b:58:31:79:44:07:5c:db:54:e7:0b:94:67:34:94:
6f:31:ae:8f:96:fd:6b:31:c9:8e:ae:c5:be:77:53:e1:59:67:
b6:a7:0c:27:10:e2:7c:dd:f5:40:94:98:5a:5e:24:80:a3:1f:
45:b7:2c:37:cf:91:e5:98:72:73:65:33:45:59:a4:5f:2d:32:
2b:61:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:06 2026 by rpki-client