
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
File: WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json)
Hash identifier: oNn80OGnZlYcUUGj+X4l9Y1G/R5fw/l4JHxmdc94G2c=
Subject key identifier: 54:94:89:57:97:D8:52:75:D7:E2:E3:74:5C:86:33:DB:4A:CB:3E:97
Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Certificate serial: 03AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
Manifest number: 0396
Signing time: Sat 13 Jun 2026 00:46:21 +0000
Manifest this update: Sat 13 Jun 2026 00:46:21 +0000
Manifest next update: Sat 20 Jun 2026 00:46:21 +0000
Files and hashes: 1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: A5KKP2T5iWgmYLiVnARVGX1dDtSHEKZmXiZEFqzKf7Q=)
2: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: pAZV68jGjWuKWqhQJP5ckwM2V0tQYdqN4ZXDEqElElc=)
3: 8409527078B011EE8D737723C4F9AE02.roa (hash: S/EE8dzEnvlxDFYWVTl3pTW1+xiF5BVX2thc9vnDMAU=)
4: E15780AA32E111EFB163924BC4F9AE02.roa (hash: YJWEr2nrAdnP2NutE9Ms8r6Gtbwk3PCYEKG8MqYno4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939 (0x3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E
Validity
Not Before: Jun 13 00:46:21 2026 GMT
Not After : Jun 20 00:46:21 2026 GMT
Subject: CN=6a2ca85d-b605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:27:e3:46:d0:f4:47:fb:98:e1:6a:ba:7e:
bc:11:cb:c8:d4:ad:e4:92:27:17:b4:28:75:fb:50:
c3:f9:61:d9:46:7d:95:39:0f:a5:03:bc:b7:98:03:
9c:ca:4f:cc:15:86:dc:a3:08:ce:2a:ee:3f:82:24:
0a:ef:26:14:e8:93:c3:7b:48:f2:2d:bd:05:2e:b7:
e3:6c:13:36:1d:54:df:f2:73:dd:f7:71:62:86:f8:
1e:b3:d9:25:8f:73:73:b7:39:96:75:0c:21:62:2e:
a6:d1:da:c7:8b:60:34:69:7b:2a:12:72:b2:66:ed:
a0:fd:52:8f:ec:ba:e5:a2:e1:7f:ec:9f:6f:97:78:
6b:31:00:4e:bf:a9:8c:ea:e3:0e:e1:61:f0:8b:ef:
9d:58:b2:3f:4d:ba:7b:b4:5c:5f:77:db:d8:3f:b6:
ba:eb:72:84:a8:10:39:1a:de:2e:ed:82:e6:1f:f4:
e2:87:81:12:96:2e:ee:8c:76:87:78:39:84:7f:12:
0b:23:24:b1:22:9c:45:9a:72:3d:39:02:31:af:a8:
80:60:06:f7:d8:74:d9:5f:19:bd:3c:66:8b:ce:8e:
10:65:99:62:50:56:7e:54:df:b9:2d:09:10:80:26:
c8:de:53:c5:6f:06:b7:db:53:a4:7d:23:bf:46:5c:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:94:89:57:97:D8:52:75:D7:E2:E3:74:5C:86:33:DB:4A:CB:3E:97
X509v3 Authority Key Identifier:
keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:4a:1b:9f:95:b2:b3:6b:6b:90:04:e4:90:ae:b6:37:56:8e:
3c:49:3f:9d:64:f5:97:37:69:49:f7:25:f4:b5:e1:f1:50:f3:
4c:0c:a6:0f:00:f3:98:64:21:67:b9:6c:0f:17:0c:c6:70:dd:
fa:69:37:d4:bb:33:17:4d:61:b7:8f:7e:a1:35:d7:5f:52:51:
75:31:8f:86:49:b3:95:b7:86:f8:18:79:e6:ce:12:a9:70:52:
6d:de:81:b5:03:76:95:af:f1:63:e7:9b:2a:cb:10:d3:ea:3e:
37:d7:02:91:e8:78:d6:e5:9f:01:e1:9c:00:09:35:ae:9d:8b:
7d:75:c0:91:02:d8:24:8a:b7:c1:ab:d8:d8:ba:48:56:27:78:
c2:fe:a6:3e:55:b8:1a:b4:87:91:e6:b7:f1:d3:d4:1d:78:93:
e6:d9:6e:68:61:56:6a:56:27:1e:5c:16:e2:d4:23:58:c6:67:
b9:77:0b:63:3a:ea:71:c1:fa:51:ac:6c:ea:3c:ef:93:f2:33:
05:a8:47:21:c8:09:f4:6f:b9:07:9f:6a:63:d1:de:cc:20:be:
22:eb:79:39:45:92:b7:e1:17:1b:97:e3:85:89:19:c8:88:17:
8c:b9:de:2a:19:4b:4d:5c:64:3c:97:90:ce:47:bb:45:56:64:
46:ab:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:49:05 2026 by rpki-client