
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
File: WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json)
Hash identifier: 3DlnmxRUg5YMpteIazGS8RmUU7IgW/UKK7pwx5WOltk=
Subject key identifier: 2B:19:9A:E6:10:1C:E7:8D:57:6D:CA:4D:9C:EE:A3:92:1E:C5:71:FD
Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Certificate serial: 038E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
Manifest number: 0379
Signing time: Fri 17 Apr 2026 00:44:50 +0000
Manifest this update: Fri 17 Apr 2026 00:44:49 +0000
Manifest next update: Fri 24 Apr 2026 00:44:49 +0000
Files and hashes: 1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: 22xFGznhtaK5n0kQln8cjYi2odru0+1iXoi0GU8Y8ZM=)
2: 8409527078B011EE8D737723C4F9AE02.roa (hash: S/EE8dzEnvlxDFYWVTl3pTW1+xiF5BVX2thc9vnDMAU=)
3: E15780AA32E111EFB163924BC4F9AE02.roa (hash: YJWEr2nrAdnP2NutE9Ms8r6Gtbwk3PCYEKG8MqYno4Y=)
4: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: pAZV68jGjWuKWqhQJP5ckwM2V0tQYdqN4ZXDEqElElc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Validity
Not Before: Apr 17 00:44:49 2026 GMT
Not After : Apr 24 00:44:49 2026 GMT
Subject: CN=69e18282-c3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:15:54:4c:60:69:07:05:36:a0:6d:de:08:
96:f2:29:4f:0d:54:ef:af:88:87:3c:83:e0:c4:d1:
83:92:5f:5a:25:82:be:ea:d5:b3:5e:ba:a1:96:a7:
a6:0a:4e:97:e6:fa:f8:08:fb:71:7e:bb:3d:1b:8a:
45:e7:13:4a:89:8a:5d:59:9e:78:41:d8:16:00:9c:
20:44:ed:f6:e7:08:20:e5:38:8f:66:4c:17:9b:1c:
c6:52:ce:92:44:b4:10:dc:fc:03:c5:b8:c2:71:05:
86:1b:67:2a:d3:8c:e6:49:45:db:06:00:c0:ca:94:
aa:b4:26:b3:22:26:fb:91:df:3c:7e:2e:6e:e1:c6:
b8:34:38:92:a9:ba:05:cb:0f:1f:69:db:d8:5f:24:
fd:df:5e:91:8d:89:64:d7:ad:ae:03:5b:9f:f1:9c:
e2:7c:ae:b8:da:8d:4d:00:08:d3:8a:76:57:ab:31:
54:53:36:19:82:88:3e:26:b1:e2:ea:2e:12:47:60:
ba:e1:4f:aa:10:30:e9:8b:26:e4:cf:46:92:bd:62:
c9:36:c6:e2:d3:2b:6c:c0:5b:69:9a:27:d6:0d:bf:
f5:b8:6d:dd:b0:22:13:fb:aa:74:38:b6:2d:2b:23:
b0:38:84:12:30:45:4a:a7:81:05:64:8e:9c:4f:a1:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:19:9A:E6:10:1C:E7:8D:57:6D:CA:4D:9C:EE:A3:92:1E:C5:71:FD
X509v3 Authority Key Identifier:
keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:54:56:c3:8d:62:21:2d:a8:29:82:34:df:bf:4f:4d:1e:96:
28:94:ed:7d:00:cd:00:c0:7d:fd:5b:8c:8b:c1:eb:6b:41:73:
00:22:a5:bb:0a:f1:cc:ef:85:d1:17:34:4f:9e:7d:9f:31:d9:
05:d8:4d:1c:eb:e8:68:85:31:8f:ac:38:56:c4:dd:46:5c:4d:
c2:46:de:3a:16:6a:8e:86:63:c4:94:0f:e9:50:19:e2:8d:ea:
79:96:8f:27:49:91:68:6c:27:66:e6:ed:ba:0b:d6:01:8e:a8:
af:32:b8:61:ca:e9:26:c5:75:98:63:3e:53:35:6b:da:88:ee:
36:38:4b:1e:c5:1f:d1:35:bd:a2:60:ca:d5:5e:34:36:71:2e:
bc:ce:c5:3d:da:47:62:03:81:c4:7a:bf:59:50:40:a0:66:ce:
96:46:b2:8d:98:e2:17:57:2a:d0:4f:8b:1b:51:05:ed:94:53:
8d:bc:6e:fc:73:14:06:43:db:fc:6c:73:53:ab:7e:57:04:93:
78:84:fe:1a:4b:c8:6f:26:c1:99:27:7b:16:03:d8:80:b9:fd:
e2:15:c6:8c:49:79:40:62:f7:66:e1:b3:35:e6:1c:bf:17:45:
f2:6e:4c:69:b1:f8:2e:a3:b0:8b:40:2d:a1:cc:3b:fc:f6:12:
30:35:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:23 2026 by rpki-client