
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
File: weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json)
Hash identifier: lHqlhbSGqOb1R25afti8tDxdK3KEXcIzNb9yZb9UXTQ=
Subject key identifier: 3C:6E:F5:20:CE:93:81:B7:77:CB:C3:73:29:37:22:FA:A2:89:73:7B
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial: 29B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
Manifest number: 297B
Signing time: Mon 06 Apr 2026 15:31:44 +0000
Manifest this update: Mon 06 Apr 2026 15:31:44 +0000
Manifest next update: Mon 13 Apr 2026 15:31:44 +0000
Files and hashes: 1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: oE3x25t1GfCv6vVWDtZI/wyx6DPh15qovlv56K4ooZg=)
2: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 5xVxyBLTVv6TTJwr4d6CRZOAj/oOkKXh9D4XacOHsAU=)
3: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: C5FmIwbgprkig61fqNmKWaJWuBinr8tfV+3G1uObZOs=)
4: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: er4abjooP2pzYLbFn4zXYhItU6fj/FaQ5TH/f8stFqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 15:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10679 (0x29b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Validity
Not Before: Apr 6 15:31:44 2026 GMT
Not After : Apr 13 15:31:44 2026 GMT
Subject: CN=69d3d1e0-2f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:88:5c:6c:81:e1:38:b8:94:1b:3e:c1:0e:
7f:5f:79:1c:6e:73:1f:27:dc:3e:b9:14:9e:7a:0a:
b9:f7:40:d8:57:6a:1e:05:7f:69:21:3d:b7:18:91:
d9:7e:94:65:3c:5f:b6:2c:82:e3:ac:66:b0:d6:08:
ae:d0:97:ba:46:f7:96:83:20:a1:9f:ea:67:a0:ca:
74:ed:ee:43:ce:15:d3:fa:d7:fd:ef:3d:c2:ac:13:
ce:77:5e:fd:9e:3a:19:13:a5:77:c8:c2:e0:b1:36:
db:60:05:5f:b5:55:55:0b:3c:ab:ba:04:f6:46:32:
70:8e:ee:08:f8:79:61:36:15:2c:b3:70:05:5b:02:
a3:32:af:ba:25:18:88:4d:a1:7c:60:b6:ab:73:87:
e7:42:82:64:6b:35:70:cc:d9:5d:d8:8a:28:cd:93:
19:9f:b7:e0:fe:94:a7:74:44:91:e8:1d:ef:fc:e5:
e9:ad:25:11:64:dd:31:e8:3b:d8:ee:f8:75:79:01:
62:30:17:59:05:21:d3:80:d3:d5:6a:ae:df:72:ef:
66:fb:f0:23:5e:cb:60:2b:6a:a3:86:c7:2c:3a:e8:
f1:72:f8:d6:6e:94:9b:c6:df:ea:bb:02:c3:d0:c3:
cb:a7:ca:75:a2:2d:04:0e:9a:c5:2d:d5:66:a2:c3:
63:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6E:F5:20:CE:93:81:B7:77:CB:C3:73:29:37:22:FA:A2:89:73:7B
X509v3 Authority Key Identifier:
keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:c9:c7:e1:0f:58:28:75:0e:be:a5:3e:2c:1c:26:9b:16:57:
08:c4:76:b5:15:f8:e5:a2:b2:ee:04:72:e2:da:60:29:0a:16:
c7:65:b0:e3:5d:7f:2b:42:2c:e1:2e:37:74:93:d4:c6:d1:46:
af:39:84:9e:c5:05:5c:5e:ac:c4:87:ce:0b:f1:f7:86:60:ef:
ad:45:ee:eb:0a:a0:fd:fa:1d:2b:ae:83:7b:5e:b3:82:dd:29:
69:cd:d1:04:f5:90:16:2c:aa:7b:45:14:87:df:dd:0f:22:c0:
21:76:d0:9d:ac:f8:6b:bc:b5:a6:62:04:3f:b3:0e:73:27:35:
da:7f:00:29:e5:8a:4b:ad:58:04:ed:cb:fe:73:0b:0d:4a:03:
c7:95:73:d6:11:57:bc:a4:a2:97:b0:98:6f:1b:f0:5a:0b:f2:
56:96:49:bd:ee:18:40:16:c9:88:22:98:f7:be:fc:d2:bd:96:
03:73:e4:a7:7e:8b:85:bd:87:bc:ba:65:9b:3a:25:12:df:48:
f9:a0:93:cf:c0:8c:7a:9d:77:c4:25:da:46:d9:25:1e:b7:68:
25:e5:26:91:8c:a8:86:77:4b:05:34:39:1a:89:60:6b:48:90:
a3:d8:62:a0:f3:20:fe:9f:fe:6f:08:83:21:a7:ab:10:d9:24:
2d:03:85:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI3MDcxMTAvBgNVBAUTKEMxRTIyNzY1MUFEQTNCRkJDMTg3NzFBRUM4QjYwMDI2
NzIzQjYwQUQwHhcNMjYwNDA2MTUzMTQ0WhcNMjYwNDEzMTUzMTQ0WjAYMRYwFAYD
VQQDEw02OWQzZDFlMC0yZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwVKIXGyB4Ti4lBs+wQ5/X3kcbnMfJ9w+uRSeegq590DYV2oeBX9pIT23GJHZ
fpRlPF+2LILjrGaw1giu0Je6RveWgyChn+pnoMp07e5DzhXT+tf97z3CrBPOd179
njoZE6V3yMLgsTbbYAVftVVVCzyrugT2RjJwju4I+HlhNhUss3AFWwKjMq+6JRiI
TaF8YLarc4fnQoJkazVwzNld2IoozZMZn7fg/pSndESR6B3v/OXprSURZN0x6DvY
7vh1eQFiMBdZBSHTgNPVaq7fcu9m+/AjXstgK2qjhscsOujxcvjWbpSbxt/quwLD
0MPLp8p1oi0EDprFLdVmosNjmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxu9SDO
k4G3d8vDcyk3IvqiiXN7MB8GA1UdIwQYMBaAFMHiJ2Ua2jv7wYdxrsi2ACZyO2Ct
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwNy9CNEFDRTE2NDcw
QjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9fdkJoM0d1eUxZQUpuSTdZ
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dlSW5aUnJhT192QmgzR3V5TFlBSm5JN1lLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjcwNy9CNEFDRTE2NDcwQjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9f
dkJoM0d1eUxZQUpuSTdZSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFMnH4Q9YKHUOvqU+LBwmmxZXCMR2tRX45aKy7gRy4tpgKQoWx2Ww411/K0Is
4S43dJPUxtFGrzmEnsUFXF6sxIfOC/H3hmDvrUXu6wqg/fodK66De16zgt0pac3R
BPWQFiyqe0UUh9/dDyLAIXbQnaz4a7y1pmIEP7MOcyc12n8AKeWKS61YBO3L/nML
DUoDx5Vz1hFXvKSil7CYbxvwWgvyVpZJve4YQBbJiCKY97780r2WA3Pkp36Lhb2H
vLplmzolEt9I+aCTz8CMep13xCXaRtklHrdoJeUmkYyohndLBTQ5Golga0iQo9hi
oPMg/p/+bwiDIaerENkkLQOFQQ==
-----END CERTIFICATE-----
Generated at Tue Apr 7 12:07:46 2026 by rpki-client