
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
File: WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json)
Hash identifier: I1OGSsAUEcocX7uumOUH7g0JgP3Q5Xlp3mpiqO6PO/0=
Subject key identifier: BD:F7:20:7D:55:2D:96:A1:85:10:94:05:27:46:52:A1:60:36:04:A3
Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
Certificate issuer: /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Certificate serial: 07CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
Manifest number: 2DA4
Signing time: Sat 10 Oct 2026 15:40:10 +0000
Manifest this update: Sat 10 Oct 2026 15:40:09 +0000
Manifest next update: Sat 17 Oct 2026 15:40:09 +0000
Files and hashes: 1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: D+yVVOTGoh2ZbUxfEtOx3fULfMeXD2aOW7R35G2BS0Y=)
2: C7AE32F886EE11F19E006003A7EE528E.roa (hash: Iu+bax6wDIKs0ITGdOOsApp6bvsSxsdltknY3o3Rdtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 15:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996 (0x7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7
Validity
Not Before: Oct 10 15:40:09 2026 GMT
Not After : Oct 17 15:40:09 2026 GMT
Subject: CN=6aca5c5a-4664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:9c:c1:cb:4a:b4:12:69:06:c7:3a:34:a5:
82:17:69:78:8a:54:e4:20:35:77:d3:cd:66:7b:f4:
d5:18:0b:8b:ef:81:eb:7c:01:19:bd:37:17:3b:92:
b5:d2:a6:e9:ce:26:5e:ed:1c:5c:4a:8c:03:59:1a:
92:d5:e4:fd:13:e7:a8:27:75:14:7f:66:f8:69:92:
8a:cc:6d:46:6c:61:f5:f1:a6:ee:a6:d4:c7:a0:ce:
d4:b3:bb:4c:2c:7b:cf:df:9d:17:f3:af:63:0d:87:
26:b8:64:d5:b6:83:78:a4:20:54:81:31:d8:f3:50:
cc:e0:2c:89:b5:c4:32:9f:40:4b:2d:53:4f:ae:71:
c6:7e:86:08:c5:6b:5f:f2:c8:00:f0:12:8d:13:51:
c1:dc:d3:54:12:cc:d4:ed:a2:a2:d1:0d:98:8c:1b:
6b:ac:28:55:34:ab:4a:4f:af:44:11:cd:83:09:f9:
f4:5d:e9:a0:1b:da:f4:f4:26:4e:0a:8b:1e:ea:7d:
b6:c2:8f:dc:72:db:30:75:0e:c6:a9:7b:15:cd:42:
28:8f:9e:be:d5:bb:4a:71:98:70:d4:c5:31:3c:dc:
f9:d3:9b:fb:e7:af:90:3f:f8:08:da:b8:e2:c2:84:
b6:20:36:ee:b3:b7:62:0a:fe:21:9b:a2:b8:0e:61:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F7:20:7D:55:2D:96:A1:85:10:94:05:27:46:52:A1:60:36:04:A3
X509v3 Authority Key Identifier:
keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a1:50:7e:19:f7:2d:81:51:e7:19:dd:fa:21:d3:f6:48:ac:
35:0a:7a:f1:5e:08:4a:88:e5:a1:a0:42:63:24:3a:0a:36:ce:
de:50:1c:3f:ed:b4:74:66:c3:54:52:1e:a8:14:55:ed:ab:c8:
71:8e:78:6c:bb:32:d3:da:ed:55:5c:7f:17:4f:41:fc:b4:0f:
76:d5:20:1a:8e:a3:5f:2c:1a:21:52:2e:41:0b:bc:74:43:ca:
0e:c6:67:c5:6c:90:9e:17:ef:6b:c1:c4:ec:30:2e:cd:3d:80:
06:51:1a:b3:fd:9a:b2:cf:4f:5b:6e:d6:c8:aa:56:e0:4d:3d:
8b:16:38:ec:a4:f0:35:13:1a:f1:39:ef:1a:bb:89:ca:de:9f:
2b:12:d7:99:14:b8:6f:5d:96:57:8b:47:07:17:3f:b7:a0:6a:
a6:8a:97:bb:20:6e:1a:82:92:07:b5:40:bf:73:54:7c:80:9d:
ea:e3:f7:e1:30:e2:8e:07:9a:5e:84:e9:26:d9:39:34:2c:a6:
e4:e6:b8:8f:a8:0c:b7:96:8f:77:49:82:dc:af:e3:eb:ae:fb:
ae:58:64:e5:05:cb:df:fd:4a:27:07:57:97:2f:5b:34:fb:cc:
04:99:b2:3c:08:78:a7:e2:8c:b6:48:19:fc:e6:8a:fe:53:b6:
41:f5:86:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:55:31 2026 by rpki-client