
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
File: wxT-rYcguxji2eIkk4K433VEbYs.mft (raw, json)
Hash identifier: FcSqHvI6JuwuBEK8jv2E7PS0ZgEH9Z/DqaEsidedNQg=
Subject key identifier: EB:FA:EA:02:39:7C:64:6B:41:64:8F:C3:9F:70:A3:6A:DF:C7:46:75
Authority key identifier: C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B
Certificate issuer: /CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
Certificate serial: 0638
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
Manifest number: 062D
Signing time: Tue 28 Jul 2026 23:22:45 +0000
Manifest this update: Tue 28 Jul 2026 23:22:45 +0000
Manifest next update: Tue 04 Aug 2026 23:22:45 +0000
Files and hashes: 1: wxT-rYcguxji2eIkk4K433VEbYs.crl (hash: Nl4LNHgUhkQB7ujxKWCdAiZElGCr7epD8Qnla3CvT80=)
2: 5058C6EEA53C11F096F1C284C4F9AE02.roa (hash: 3JM2acvcDIocyJks0EoakV6p4uSNGRyTdD0cztbL25s=)
3: 30D58974A53C11F0A057C775C4F9AE02.roa (hash: Yla+AjYYhaBJGPhIpeI0a0ImOXfa/xKKshsCr7MtLNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl
rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1592 (0x638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFCD3, serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B
Validity
Not Before: Jul 28 23:22:45 2026 GMT
Not After : Aug 4 23:22:45 2026 GMT
Subject: CN=6a6939c5-afb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:26:5b:1a:9b:25:a7:d8:b7:58:aa:b7:b7:
26:5f:8c:d1:c4:2c:c6:97:0d:ab:e8:47:2b:4a:2d:
3d:2a:09:9e:db:ed:76:72:f9:69:5f:6c:ac:49:1f:
49:89:a8:5a:c6:ab:28:38:ca:1d:62:72:c0:63:9f:
7c:42:18:ed:67:ae:96:bc:4e:90:95:d5:f1:5c:05:
d5:2a:41:b3:e1:63:58:d2:4e:18:a5:a7:8c:ba:be:
f7:e5:2a:b6:7b:fd:3a:a3:ca:47:34:78:a2:78:bb:
04:27:df:0a:c8:0f:d7:81:32:16:8d:d6:eb:c5:75:
ba:69:b7:6d:46:7f:35:7f:e3:08:45:6c:4e:de:ea:
83:6c:9f:a4:f9:c5:4f:c5:63:3d:a4:a2:d9:00:59:
49:84:af:58:f3:5b:dc:35:33:22:e4:62:32:2d:58:
c9:32:66:bf:db:06:3f:d8:58:bc:8b:5a:c4:a1:7d:
20:f8:94:fe:f8:86:48:da:62:c4:83:63:cd:47:34:
f5:6d:ee:3a:e8:d8:6a:6f:ec:c3:42:44:65:4a:ce:
61:34:7b:9a:49:2c:8d:97:40:c9:b6:87:fd:ac:a6:
0e:23:e2:04:56:68:61:19:6b:f6:bd:88:0d:28:3d:
17:18:0e:91:c1:30:0f:dc:18:3c:07:22:23:4a:9d:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FA:EA:02:39:7C:64:6B:41:64:8F:C3:9F:70:A3:6A:DF:C7:46:75
X509v3 Authority Key Identifier:
keyid:C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c7:ae:8a:03:b8:ee:1c:45:a6:33:2e:ee:18:3f:e5:4e:44:
1f:a3:a7:e7:c2:48:82:08:86:52:e6:3e:05:f5:c4:de:72:ac:
27:14:e7:b4:1a:64:76:42:ab:0d:65:fe:38:c7:90:57:57:88:
0c:ba:c2:4c:af:4c:1e:bf:2c:ad:8d:13:53:ff:ab:59:7d:cf:
b1:b3:3a:8f:35:07:20:d3:64:ad:d1:08:91:81:b2:70:ef:99:
36:d7:5c:bc:54:62:e0:39:4b:19:5b:1a:f1:b1:48:38:f9:24:
5b:32:3e:8d:8e:99:64:75:6e:68:ce:ef:28:5a:71:b6:7f:9f:
f1:28:c5:ad:44:c4:ba:60:22:a2:ba:a7:02:5d:d5:15:69:a5:
55:60:b0:6c:6e:04:f1:0e:a7:e7:c2:1a:75:85:83:9a:69:82:
bd:95:f8:a9:db:00:e4:47:aa:02:26:38:23:b2:85:fe:35:2e:
7c:fa:98:9f:ec:a2:7d:9f:80:cd:75:c6:c0:c1:11:b4:6a:b4:
a3:b7:5d:0f:68:dd:de:ab:69:17:7f:e9:7b:47:6f:a7:01:c4:
d3:89:ae:7f:f0:92:8a:cb:f7:c4:fb:a0:03:6f:d6:a0:9f:4f:
75:38:02:f6:7b:8d:2a:ca:df:4a:86:33:bf:00:bc:8b:72:16:
8c:0e:f6:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZDRDMxMTAvBgNVBAUTKEMzMTRGRUFEODcyMEJCMThFMkQ5RTIyNDkzODJCOERG
NzU0NDZEOEIwHhcNMjYwNzI4MjMyMjQ1WhcNMjYwODA0MjMyMjQ1WjAYMRYwFAYD
VQQDEw02YTY5MzljNS1hZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2EcmWxqbJafYt1iqt7cmX4zRxCzGlw2r6EcrSi09Kgme2+12cvlpX2ysSR9J
iahaxqsoOModYnLAY598QhjtZ66WvE6QldXxXAXVKkGz4WNY0k4YpaeMur735Sq2
e/06o8pHNHiieLsEJ98KyA/XgTIWjdbrxXW6abdtRn81f+MIRWxO3uqDbJ+k+cVP
xWM9pKLZAFlJhK9Y81vcNTMi5GIyLVjJMma/2wY/2Fi8i1rEoX0g+JT++IZI2mLE
g2PNRzT1be466Nhqb+zDQkRlSs5hNHuaSSyNl0DJtof9rKYOI+IEVmhhGWv2vYgN
KD0XGA6RwTAP3Bg8ByIjSp07FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOv66gI5
fGRrQWSPw59wo2rfx0Z1MB8GA1UdIwQYMBaAFMMU/q2HILsY4tniJJOCuN91RG2L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNEMy9DNDcyN0ExMEVG
ODQxMUVCOTI5QjA2NTBDNEY5QUUwMi93eFQtclljZ3V4amkyZUlrazRLNDMzVkVi
WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d4VC1yWWNndXhqaTJlSWtrNEs0MzNWRWJZcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkNEMy9DNDcyN0ExMEVGODQxMUVCOTI5QjA2NTBDNEY5QUUwMi93eFQtclljZ3V4
amkyZUlrazRLNDMzVkViWXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwseuigO47hxFpjMu7hg/5U5EH6On58JIggiGUuY+BfXE3nKsJxTntBpkdkKr
DWX+OMeQV1eIDLrCTK9MHr8srY0TU/+rWX3PsbM6jzUHINNkrdEIkYGycO+ZNtdc
vFRi4DlLGVsa8bFIOPkkWzI+jY6ZZHVuaM7vKFpxtn+f8SjFrUTEumAiorqnAl3V
FWmlVWCwbG4E8Q6n58IadYWDmmmCvZX4qdsA5EeqAiY4I7KF/jUufPqYn+yifZ+A
zXXGwMERtGq0o7ddD2jd3qtpF3/pe0dvpwHE04muf/CSisv3xPugA2/WoJ9PdTgC
9nuNKsrfSoYzvwC8i3IWjA72Zw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:58:30 2026 by rpki-client