
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
File: WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json)
Hash identifier: Zuc3NCrhuMH1KSohAOAqt561DVhYortR5vEMwqu4c2k=
Subject key identifier: A4:38:7E:7E:4E:B0:FA:EC:44:AF:6B:5A:17:79:9C:18:02:11:4F:46
Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Certificate serial: 03EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
Manifest number: 03D3
Signing time: Wed 07 Oct 2026 00:39:35 +0000
Manifest this update: Wed 07 Oct 2026 00:39:35 +0000
Manifest next update: Wed 14 Oct 2026 00:39:35 +0000
Files and hashes: 1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: FFg1bwB1r6iqxHRWukGQD3r0FB04BRucmovLJFAyUEk=)
2: 8409527078B011EE8D737723C4F9AE02.roa (hash: LVprJ5d8tMhR1z5h1C8mZdP/Z7v1X0R55VbhyFfScwk=)
3: E15780AA32E111EFB163924BC4F9AE02.roa (hash: bzNQiyAKc14b2YsJ0ACA9zxJopod+tvzEv/bYGNnKyM=)
4: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: mKFpBz7LnTMIno4TR7tCdYsZBoH90M0+D1suFZ+WgoU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1003 (0x3eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Validity
Not Before: Oct 7 00:39:35 2026 GMT
Not After : Oct 14 00:39:35 2026 GMT
Subject: CN=6ac594c7-762c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:11:f9:28:87:9d:2f:4e:42:bf:44:b9:4a:
89:00:42:b6:a4:3b:f2:f7:70:45:66:a6:18:ab:20:
13:ea:0f:f6:3e:1d:4a:51:5c:57:91:82:e3:cf:ff:
8d:e6:07:e2:86:f0:19:d0:f3:0f:59:24:75:14:a6:
74:86:ac:7b:f4:f6:de:43:76:8c:9b:1c:a0:92:fe:
5f:ba:85:55:d3:5e:fd:ac:56:5f:a0:58:e6:02:3a:
42:ea:d2:a1:fe:5c:8b:9c:9a:eb:cd:12:f8:3c:3c:
f1:15:ca:01:3a:1d:be:40:6f:9b:90:d6:f8:7e:57:
c9:7b:f2:f6:ef:66:22:ea:50:ab:53:02:72:a5:42:
32:20:03:65:a5:ae:5c:7b:79:fb:01:35:3f:43:15:
a8:d3:73:d8:82:41:bb:26:fb:88:81:0c:a2:34:f8:
f9:3f:37:ab:1e:b1:30:c9:ba:1a:73:95:78:ff:7d:
e4:ab:22:0e:da:0c:63:b9:2b:e8:74:b3:51:3b:ef:
6b:b5:61:27:b1:93:57:ce:65:12:f6:3b:bc:a6:f0:
d2:fd:9b:7c:a5:4c:e6:75:36:a3:1d:22:d1:1a:1d:
13:fe:be:d4:af:79:9e:ff:cb:02:84:35:e8:d7:3c:
ac:7b:4d:e2:36:f0:d9:25:3b:73:6a:c0:c3:f9:db:
e9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:38:7E:7E:4E:B0:FA:EC:44:AF:6B:5A:17:79:9C:18:02:11:4F:46
X509v3 Authority Key Identifier:
keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:74:0d:f0:55:e8:c0:2a:fa:60:6f:ba:b4:ad:7b:d5:9a:7b:
97:c0:a9:b7:16:1c:c0:fb:b8:20:51:7b:50:f6:e9:8f:ca:0e:
7e:36:38:f5:3b:e2:91:7e:fd:15:34:01:bc:a1:d3:df:a5:9c:
13:77:ac:b7:d9:f9:89:48:ec:72:b2:82:9d:6e:be:8c:10:af:
36:3b:ae:3f:d8:5d:b5:77:41:35:eb:25:1f:df:cb:ed:e1:6d:
47:e3:92:75:15:18:2e:ed:04:f0:41:b1:67:eb:6f:10:43:4e:
76:4e:06:2c:71:7f:39:35:a4:f1:5d:9c:cc:5f:c4:5b:42:c5:
e7:4b:03:14:62:00:5a:e7:67:5f:6c:34:fa:dc:b3:76:68:6f:
49:3e:dc:62:14:74:5d:91:09:1b:ae:79:04:1b:f5:60:2e:00:
f5:dd:21:44:b0:ba:bb:05:a0:8d:97:5c:08:03:3f:dc:b3:a3:
99:26:49:22:74:85:48:69:51:11:f7:7f:76:f0:f9:d5:5e:4b:
65:ec:87:6c:64:12:1f:3a:8d:06:18:68:d4:71:83:0d:34:aa:
70:73:14:71:e5:7a:35:a1:42:fb:9f:af:bd:3b:80:6a:74:52:
77:26:fe:da:9b:80:2e:e1:00:87:bf:ad:2a:1a:dd:4e:8f:6a:
68:40:d4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:41:44 2026 by rpki-client