
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft
File: WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft (raw, json)
Hash identifier: kmGw5poDT4/ormSpNJqFfAW4xMdgQ3JCe4mftoon3Xs=
Subject key identifier: 65:03:A2:E2:91:AC:00:E6:D0:CD:9A:DE:B9:9A:F3:94:23:EF:8E:8B
Authority key identifier: 5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D
Certificate issuer: /CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D
Certificate serial: 038C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft
Manifest number: 0387
Signing time: Sun 05 Apr 2026 00:34:40 +0000
Manifest this update: Sun 05 Apr 2026 00:34:40 +0000
Manifest next update: Sun 12 Apr 2026 00:34:40 +0000
Files and hashes: 1: WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl (hash: rfkEfjoPMySbDD7Sh+0gL+kcKMZD5VoWWIx6RS2Jlb4=)
2: BD65DA5EE24111ECB7132461C4F9AE02.roa (hash: u7CkVjsHOQVNTO01q5uCcJc2/9SL+9roqM3Bhawo60Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl
rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 908 (0x38c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181B90, serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D
Validity
Not Before: Apr 5 00:34:40 2026 GMT
Not After : Apr 12 00:34:40 2026 GMT
Subject: CN=69d1ae20-83c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:25:af:e8:0a:12:5f:e4:38:6f:b5:fc:2a:42:
92:9a:11:25:e4:f0:2b:e1:73:43:ec:54:e8:9c:9c:
74:21:7e:3f:8d:61:97:c5:05:48:9c:22:8c:9e:78:
6e:c5:54:13:bb:75:c7:eb:52:a1:c3:77:36:86:ee:
9a:79:5f:9d:ae:32:ad:4f:92:86:86:2a:38:e3:c7:
5b:1e:49:e8:83:57:e9:01:a9:f3:a2:cc:1d:8f:cc:
83:fe:81:e3:dd:ef:82:2b:b9:41:93:1f:39:93:ef:
51:f9:36:5c:06:6d:08:04:f6:55:cf:60:71:ac:e7:
e4:f4:92:5a:69:47:46:c0:36:3f:7a:f7:69:40:41:
bd:f4:a2:0e:33:83:16:a1:83:f2:d0:05:7d:4b:52:
ce:d1:6b:55:04:ef:07:7a:8c:0d:eb:c2:07:62:21:
13:b9:c3:49:67:ca:b1:39:43:75:37:71:e5:3b:66:
8a:24:01:0f:b5:77:00:9c:37:58:b7:fb:07:41:59:
2c:b7:90:6a:d9:74:7c:49:45:b1:bb:3b:d6:b4:50:
6b:68:78:21:aa:ae:71:98:93:33:41:8a:5a:01:c1:
c4:0e:f0:11:47:1f:55:1c:d3:ec:c7:b1:c8:c6:10:
56:cf:9b:e2:60:4f:1f:a6:1a:80:e8:a9:af:eb:ae:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:03:A2:E2:91:AC:00:E6:D0:CD:9A:DE:B9:9A:F3:94:23:EF:8E:8B
X509v3 Authority Key Identifier:
keyid:5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:8b:28:e2:73:0a:41:4d:a0:95:44:2d:b8:33:d8:16:83:d3:
7f:ea:87:49:70:18:b7:fc:08:f5:02:3a:86:75:38:43:a7:3b:
bf:51:be:6b:ff:6f:32:b2:98:2f:c9:34:dd:c8:9f:47:eb:5f:
d3:e3:99:82:5e:3d:ee:d2:a2:99:94:36:d6:3a:de:3e:14:b0:
e9:79:c2:60:11:2f:eb:58:83:45:ab:f3:13:61:2b:c5:bf:bf:
be:39:ac:11:92:32:fe:68:06:9a:ba:c4:c0:14:51:3a:9b:e3:
5b:b1:21:52:84:f5:5f:6a:77:29:6c:e2:82:e9:f2:db:c8:d3:
24:6b:ef:59:c7:f2:57:59:ed:9f:96:64:ff:ad:d5:65:ef:28:
07:48:26:ab:6a:0b:6a:4e:3e:ff:12:66:fc:de:4f:fa:05:72:
53:cb:7b:4b:f8:64:0a:c6:13:55:80:21:17:39:8d:8c:1b:b4:
58:8a:74:42:42:b2:5d:f7:2d:06:67:1e:71:ba:e9:a8:bb:74:
94:50:6d:67:6a:1d:bb:60:31:22:db:52:30:70:a9:c4:39:72:
a0:e2:56:dd:0b:1b:93:9a:49:fb:e3:86:7d:f6:e7:8e:51:60:
a5:2f:68:e2:b9:eb:eb:b9:c4:e7:1f:17:f2:43:ae:fb:bd:62:
45:84:ee:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:07:18 2026 by rpki-client