
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json)
Hash identifier: nwjgEIzOoNlZmW7LgCyq9/grkSVBQpEh6i7yUmqbA2Q=
Subject key identifier: 02:FD:DF:CE:43:D2:51:5B:4D:C8:0A:94:59:77:7D:30:FF:1D:F9:29
Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Certificate serial: 0653
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
Manifest number: 064A
Signing time: Tue 28 Jul 2026 23:18:40 +0000
Manifest this update: Tue 28 Jul 2026 23:18:40 +0000
Manifest next update: Tue 04 Aug 2026 23:18:40 +0000
Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: anW2u9PrM2T6tcoEu7sDZ6RKH4KFyLVRzgdewdsoOoE=)
2: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (hash: hM4BPVux9YYhFTFUn31M+wA3pgU5Mg1/NkcXZA6rsfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1619 (0x653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337
Validity
Not Before: Jul 28 23:18:40 2026 GMT
Not After : Aug 4 23:18:40 2026 GMT
Subject: CN=6a6938d0-ca72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:0d:22:07:e2:07:e6:4b:f5:97:81:f5:47:
79:08:26:c3:76:5f:7c:51:dc:ea:e8:00:75:a4:a0:
3b:fe:48:5b:fb:70:64:c8:9b:51:60:2b:d3:c1:e7:
9b:05:e0:54:1e:96:8d:43:18:6d:5a:09:cb:25:ce:
c8:6d:09:bf:ab:58:66:8c:bc:8e:1d:18:16:27:03:
d6:58:fe:8c:cf:83:9e:91:ff:c0:89:a0:35:5a:2c:
7b:ca:de:93:de:81:0f:30:01:65:fe:c2:6f:48:c8:
f3:18:43:25:58:3b:87:45:e5:aa:22:7b:90:a9:01:
fd:60:80:d8:b4:23:f9:b5:88:98:13:a4:4b:96:d8:
c7:86:26:c2:83:ed:7e:d5:6c:0f:cf:9c:ae:77:13:
ad:5f:aa:a0:2c:0a:56:20:17:1b:85:16:aa:2a:9d:
8e:be:e3:2c:7a:b3:b7:69:f7:29:f9:64:5b:c7:84:
ff:84:cf:18:d0:06:f0:65:84:2e:1e:15:af:15:42:
a4:a1:d7:d0:23:b0:11:bf:c3:d6:00:26:5d:f1:ff:
8c:27:38:fa:02:4d:a9:35:a5:44:02:4a:0d:54:9c:
4a:8d:ee:bf:7b:91:ba:c8:d3:b8:39:57:c0:e0:0d:
67:35:a2:a3:79:81:be:b9:07:08:87:dd:f0:3d:a8:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FD:DF:CE:43:D2:51:5B:4D:C8:0A:94:59:77:7D:30:FF:1D:F9:29
X509v3 Authority Key Identifier:
keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:49:ed:c2:35:59:55:80:ec:3f:3a:77:5c:d5:f5:a2:66:0d:
31:89:78:f5:fb:fe:83:a4:47:3e:64:2a:3a:6f:7b:5f:12:32:
88:70:59:d7:29:e7:e4:a8:89:82:56:85:15:d7:af:75:bf:1d:
e6:be:95:09:9a:85:31:73:32:7a:43:51:d0:7a:74:7b:b0:8e:
1b:0a:79:63:26:47:0b:5a:b1:2d:36:69:27:40:5a:2f:a1:db:
f4:d8:d0:e2:d4:91:f7:16:a8:ee:04:28:87:c4:40:e0:20:2e:
05:b8:e4:70:e1:51:94:b3:0f:42:a5:53:c6:3e:80:60:7f:0c:
25:48:6e:7a:5b:01:e3:4d:b5:0d:ce:f5:d3:40:89:66:65:9e:
55:7c:02:8a:e1:0f:de:7a:49:7d:61:a4:48:61:97:e6:e7:15:
4e:57:66:3b:c7:8a:10:72:00:4a:36:2e:a9:c2:09:5d:19:7d:
f3:fe:5b:8a:00:29:00:39:42:01:16:99:35:8a:c3:3d:dd:7b:
84:95:1a:f5:28:db:19:37:aa:5c:cb:d5:6b:5f:e1:b0:c8:6d:
6a:35:10:7a:10:6f:16:89:ae:c6:24:ef:ab:0d:91:2b:bf:8a:
e6:ba:63:da:49:5b:03:4d:3c:7b:47:0b:cb:9b:ed:40:e5:5f:
ac:3a:a7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:07:24 2026 by rpki-client