
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
File: WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft (raw, json)
Hash identifier: BM9b4Jvt6DJdDsgsS5OK+REDyZfWryUji3gl8qooZ9c=
Subject key identifier: FA:87:D1:AA:17:09:91:F9:60:EC:61:58:8A:AD:72:40:09:AD:E3:FE
Authority key identifier: 58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24
Certificate issuer: /CN=A91A1366/serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
Manifest number: 33
Signing time: Mon 27 Jul 2026 11:01:26 +0000
Manifest this update: Mon 27 Jul 2026 11:01:25 +0000
Manifest next update: Mon 03 Aug 2026 11:01:25 +0000
Files and hashes: 1: WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl (hash: Ed/2ciBywSCINL3GtDHhXzLKF/cEh4UrtnifG46Tu18=)
2: 9DE21B78534111F196833CCBCD833773.roa (hash: 5D8pGtcI0i0PyQLkaDycsxgJHQA/3dZqJfK5aATBRWs=)
3: 857B25F03EDF11F1939FAF8DB6833773.roa (hash: jvx3jLr9s6QjVJZgrGVKD9kTWgR2nMK23/H41dS7lCY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl
rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1366, serialNumber=5815E5EBE8AF7E701307022A58FA8F0DE6385624
Validity
Not Before: Jul 27 11:01:25 2026 GMT
Not After : Aug 3 11:01:25 2026 GMT
Subject: CN=6a673a86-17b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:8f:2f:d7:88:56:50:e8:bf:32:66:94:58:
ef:7e:51:8e:3f:1a:cf:06:62:be:00:26:ed:8c:82:
43:dc:c8:f5:e0:6b:4b:f7:89:32:b5:87:31:22:f7:
b7:1f:ef:fd:40:95:c7:51:4e:66:91:10:20:d6:e1:
93:7b:d3:8b:f8:f0:2c:7c:a9:50:14:54:68:bf:0f:
4b:78:36:a5:2c:91:19:c8:6c:00:86:04:d4:3e:d9:
90:19:f1:f5:5d:53:7e:7e:b1:52:c6:25:96:1e:dd:
b9:79:e1:ab:9a:dc:d9:04:1b:03:19:f5:df:a8:cd:
79:32:6f:ba:18:07:c7:1d:86:ff:92:2f:21:e6:ea:
d5:ba:48:8c:62:0f:12:5d:fd:85:72:9d:aa:cd:77:
00:68:ab:fe:67:c2:22:d9:01:c9:49:c2:e6:63:ff:
93:f4:c3:2a:c5:fb:d8:d5:77:22:e0:0d:fc:c0:d0:
28:35:11:3d:bc:42:b1:ad:d1:32:e8:b2:f1:76:a6:
3d:60:04:7d:5f:89:ba:f4:1c:f0:1d:cf:b6:06:e0:
71:be:ca:46:cd:62:c7:56:00:34:ef:17:2d:9c:5a:
18:00:f2:ad:ec:d8:22:1d:a5:b0:b1:1b:7c:e9:fc:
a2:88:bc:88:7a:22:7a:dc:25:3c:58:8f:93:07:fd:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:87:D1:AA:17:09:91:F9:60:EC:61:58:8A:AD:72:40:09:AD:E3:FE
X509v3 Authority Key Identifier:
keyid:58:15:E5:EB:E8:AF:7E:70:13:07:02:2A:58:FA:8F:0D:E6:38:56:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBXl6-ivfnATBwIqWPqPDeY4ViQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1366/76D663783EDC11F1893BD254B5833773/WBXl6-ivfnATBwIqWPqPDeY4ViQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:f7:40:ce:69:b6:af:bb:d6:f2:56:52:3a:aa:9e:1c:bc:b9:
32:5c:fd:f3:44:3e:58:c9:0a:e7:6d:54:9e:c1:55:b8:85:c3:
ac:b3:dd:18:4c:e2:4b:3d:8f:6f:85:88:c0:f2:33:8d:99:5c:
05:1b:66:93:66:5d:04:bc:f9:6e:5b:93:f2:14:7b:6e:07:2e:
ef:9c:ca:96:ac:e1:17:d3:9c:d0:71:ca:f6:4c:59:e2:99:4f:
b8:37:18:d5:f4:2b:f8:8f:ed:6d:eb:dd:54:e7:0b:d9:82:f5:
21:ce:3c:47:dd:4f:f2:ee:6d:73:59:cb:2f:59:a9:95:a1:7d:
7c:a2:9c:e1:4d:07:f8:ec:66:c7:42:8d:6f:76:ff:2f:9d:cc:
8f:54:dc:cc:9b:ca:37:f3:ce:82:73:50:9e:fe:6a:b3:7a:3f:
32:8d:9c:e0:66:0a:48:d0:92:10:39:dc:6d:2e:91:02:d4:a6:
70:74:47:b9:a1:12:89:bc:f8:17:30:de:11:33:67:b9:8d:e4:
78:ab:40:be:9a:7b:e0:25:d3:c9:59:67:ab:54:54:e5:81:75:
38:fd:04:db:89:00:2e:6b:6d:19:70:ba:e9:b9:b4:ac:ab:8a:
a1:1c:0e:ba:da:dc:10:6c:aa:fb:9f:c9:42:e4:9b:77:0d:5f:
53:65:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:18:04 2026 by rpki-client