
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json)
Hash identifier: i+1LXJ7E2oE6lz2epN76PklmTIx0OFoZw5y2Hx2lelA=
Subject key identifier: D2:3C:B1:A6:CD:D0:38:87:35:8E:F3:93:0D:E3:F5:3B:18:6E:A1:EE
Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Certificate serial: 063C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
Manifest number: 0633
Signing time: Fri 12 Jun 2026 22:48:50 +0000
Manifest this update: Fri 12 Jun 2026 22:48:50 +0000
Manifest next update: Fri 19 Jun 2026 22:48:50 +0000
Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: KR8YzJtJ5U16e5CodPsxwjzPwvdgnAZdrFSpiKeVfsA=)
2: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (hash: hM4BPVux9YYhFTFUn31M+wA3pgU5Mg1/NkcXZA6rsfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1596 (0x63c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Validity
Not Before: Jun 12 22:48:50 2026 GMT
Not After : Jun 19 22:48:50 2026 GMT
Subject: CN=6a2c8cd2-fdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:c8:ac:80:75:80:30:f4:91:21:e7:7e:04:
f5:e9:96:bf:98:8f:1d:bb:07:b6:bb:e0:ef:50:a3:
cb:9a:af:0e:ab:67:da:7f:03:c3:8b:2b:d6:b1:a4:
19:9e:13:82:59:22:15:37:c9:90:ce:b7:f3:a5:26:
ca:50:be:3c:e9:e0:89:76:1a:8e:2c:5d:52:f1:51:
7b:75:53:a0:c8:90:f0:93:aa:2d:1e:57:7f:d2:97:
db:bc:73:bd:d7:38:37:78:a6:bb:aa:2a:d0:2d:45:
a9:9a:51:dc:d5:82:f3:eb:d0:9f:55:c9:8e:bc:5b:
54:80:05:de:c7:d0:e8:44:7e:df:db:24:81:8c:b4:
6d:5f:a3:52:68:a0:2a:90:0f:95:22:85:a2:95:bb:
21:dc:1a:cd:44:0d:a8:a5:20:97:21:47:e0:0a:54:
8e:8f:3b:e3:56:57:02:96:b9:3b:f9:dd:9f:a1:76:
aa:17:7e:0a:05:6a:cd:57:bb:f6:a3:3a:00:a6:fc:
f0:fb:b1:fa:29:6c:5d:8a:59:25:37:59:ad:67:e9:
ba:c9:d3:86:80:fe:fd:2f:00:60:f7:75:b1:5e:37:
4b:29:01:e1:be:8b:45:70:e2:cc:d9:47:a3:ce:d6:
2b:75:fc:3f:eb:51:14:9a:e1:cc:39:5f:8c:74:fa:
4d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3C:B1:A6:CD:D0:38:87:35:8E:F3:93:0D:E3:F5:3B:18:6E:A1:EE
X509v3 Authority Key Identifier:
keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0d:fe:51:42:36:ea:a2:51:88:dc:5a:63:13:14:30:87:9e:
5c:19:ec:77:96:c9:06:54:98:df:10:33:f4:cd:50:43:38:35:
7d:14:a7:ff:f7:ca:d7:80:11:58:6c:08:c7:15:38:ad:0a:dc:
ec:70:a7:41:82:93:d6:78:6b:0d:97:e8:6b:c3:91:ca:8f:1e:
58:f7:1d:51:23:f6:5c:6a:f9:76:5c:14:45:84:21:3f:83:52:
44:11:f5:47:49:07:47:b3:a2:df:fc:38:6c:73:f7:9c:f9:73:
26:03:4e:11:f7:b5:d0:c8:b1:e0:c8:0b:8e:f0:61:c1:8e:66:
c9:93:69:38:9a:50:ae:b6:1f:03:f3:b4:01:fc:3c:d1:3f:37:
00:bb:1f:92:20:61:94:c4:0f:b3:8a:8d:81:2f:06:44:e2:f4:
29:d4:66:07:00:7c:94:ba:75:9f:22:e6:9b:11:8c:29:0e:84:
f1:52:a9:a3:ab:5d:03:73:e5:c5:ea:b1:0d:ed:a8:21:68:b4:
82:e6:c5:39:9b:e2:a4:de:70:49:90:c6:6d:ee:8c:fb:ea:4c:
3f:14:42:34:75:0d:9f:b8:f1:32:99:b7:aa:6c:37:5e:94:7f:
0d:3e:9e:31:e2:0d:2d:73:3b:5a:a2:73:4e:b2:35:9f:69:5b:
89:27:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:59:32 2026 by rpki-client