
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
File: wDouaJYDIEoCs4vve5CDsQJ2JpE.mft (raw, json)
Hash identifier: C+Q7JPxUnLd2YMmg4JXryzb0YJkEfFxxtZUWm5RbAB0=
Subject key identifier: D2:9F:13:C4:48:D8:96:F1:C4:25:3F:47:2C:C4:C8:1B:59:75:88:A8
Authority key identifier: C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91
Certificate issuer: /CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691
Certificate serial: 0682
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
Manifest number: 067B
Signing time: Sat 04 Apr 2026 22:18:05 +0000
Manifest this update: Sat 04 Apr 2026 22:18:04 +0000
Manifest next update: Sat 11 Apr 2026 22:18:04 +0000
Files and hashes: 1: wDouaJYDIEoCs4vve5CDsQJ2JpE.crl (hash: DqA2u6nL9U18A8vrlguXia9lGXdvs9wnnSMnn3jlgts=)
2: F8A90D48B7EA11EB91C5D25EC4F9AE02.roa (hash: LXgbs7yf9MHcvHQmCBnHTchcuYtaIQ40NiICo6uoaZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl
rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1666 (0x682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C7B8, serialNumber=C03A2E689603204A02B38BEF7B9083B102762691
Validity
Not Before: Apr 4 22:18:04 2026 GMT
Not After : Apr 11 22:18:04 2026 GMT
Subject: CN=69d18e1d-c16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:7b:05:c8:62:10:1e:91:4d:dc:5f:35:63:
79:b2:74:c5:79:66:ad:3e:aa:b4:a4:8a:94:6d:03:
d1:40:0a:6a:b1:95:af:6e:0d:a1:77:31:9e:1b:32:
34:90:37:98:54:bf:db:6f:05:1e:5f:78:40:10:22:
34:d8:1a:eb:ad:2b:4b:82:29:ce:fb:59:a0:76:4e:
57:68:ea:45:97:44:95:2a:43:fc:12:1f:45:34:4d:
f8:2a:cd:14:31:53:ef:45:3a:88:d3:aa:15:cf:56:
ea:0b:cf:bd:a5:ad:a6:09:21:88:9b:9e:d7:a8:b5:
ca:e9:b2:61:af:c1:f8:18:e3:aa:08:72:9e:49:35:
5b:73:54:06:a0:bb:de:8f:e7:b2:56:d0:08:0d:c5:
66:20:be:a4:41:10:9e:58:eb:c1:9b:d0:bb:2c:ed:
e2:e7:e7:70:92:7a:95:67:f0:67:0e:32:90:42:89:
b3:e3:47:4f:e5:07:46:b3:00:3e:52:24:66:6f:90:
8a:70:81:a4:5f:7f:1b:1a:e1:45:3b:3c:90:17:58:
71:9c:1b:08:2a:9c:79:08:fd:82:1e:ba:ae:be:11:
7c:de:ff:55:96:84:06:87:1f:f7:8a:73:a4:1b:0a:
b0:c5:59:bd:7c:97:56:6b:ed:bf:98:3d:d2:9f:62:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9F:13:C4:48:D8:96:F1:C4:25:3F:47:2C:C4:C8:1B:59:75:88:A8
X509v3 Authority Key Identifier:
keyid:C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:36:c8:da:eb:b1:74:40:cc:04:d2:bd:35:27:33:28:b8:3b:
15:8b:6b:d9:32:fc:43:b2:aa:32:dc:94:46:bd:81:e7:33:62:
d8:89:a3:9f:25:22:91:ff:e9:62:fc:6f:43:da:7c:4b:8a:83:
98:02:a8:02:90:86:b6:4f:58:77:a5:9c:af:c3:3f:81:65:59:
d8:71:7d:cf:15:44:dc:9f:51:98:72:98:80:00:7c:cf:bf:33:
00:24:aa:4a:9f:ef:e2:56:af:88:71:d9:a6:f9:8b:4e:16:a6:
14:ce:21:0b:21:d5:4e:07:64:3c:4e:fa:d6:5c:3b:a0:cf:3b:
68:c6:13:3f:86:66:54:fd:b5:7b:93:23:f7:18:e2:ec:7e:fd:
85:42:95:7d:7c:b2:a6:2c:85:e6:c7:23:48:73:74:21:2a:60:
96:b7:57:6a:65:64:d6:09:f9:55:3c:1c:3f:1c:e3:14:91:e4:
21:44:f0:f7:c8:60:18:c3:ae:c2:0f:ac:56:ff:f9:e8:1b:4e:
26:c5:1b:3b:49:9e:d2:23:9d:68:8a:14:3d:24:f8:7c:8a:aa:
02:66:63:24:94:8b:eb:ad:90:dd:c8:69:6d:2b:de:76:f6:eb:
1d:ca:1e:b3:06:e0:ed:92:8d:4f:53:3c:78:20:4f:ac:c2:25:
90:a8:13:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM3QjgxMTAvBgNVBAUTKEMwM0EyRTY4OTYwMzIwNEEwMkIzOEJFRjdCOTA4M0Ix
MDI3NjI2OTEwHhcNMjYwNDA0MjIxODA0WhcNMjYwNDExMjIxODA0WjAYMRYwFAYD
VQQDEw02OWQxOGUxZC1jMTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkm57BchiEB6RTdxfNWN5snTFeWatPqq0pIqUbQPRQApqsZWvbg2hdzGeGzI0
kDeYVL/bbwUeX3hAECI02BrrrStLginO+1mgdk5XaOpFl0SVKkP8Eh9FNE34Ks0U
MVPvRTqI06oVz1bqC8+9pa2mCSGIm57XqLXK6bJhr8H4GOOqCHKeSTVbc1QGoLve
j+eyVtAIDcVmIL6kQRCeWOvBm9C7LO3i5+dwknqVZ/BnDjKQQomz40dP5QdGswA+
UiRmb5CKcIGkX38bGuFFOzyQF1hxnBsIKpx5CP2CHrquvhF83v9VloQGhx/3inOk
GwqwxVm9fJdWa+2/mD3Sn2IB/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKfE8RI
2JbxxCU/RyzEyBtZdYioMB8GA1UdIwQYMBaAFMA6LmiWAyBKArOL73uQg7ECdiaR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdCOC9DODdEQTBBNEI3
RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElFb0NzNHZ2ZTVDRHNRSjJK
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dEb3VhSllESUVvQ3M0dnZlNUNEc1FKMkpwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzdCOC9DODdEQTBBNEI3RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElF
b0NzNHZ2ZTVDRHNRSjJKcEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkTbI2uuxdEDMBNK9NSczKLg7FYtr2TL8Q7KqMtyURr2B5zNi2ImjnyUikf/p
YvxvQ9p8S4qDmAKoApCGtk9Yd6Wcr8M/gWVZ2HF9zxVE3J9RmHKYgAB8z78zACSq
Sp/v4laviHHZpvmLThamFM4hCyHVTgdkPE761lw7oM87aMYTP4ZmVP21e5Mj9xji
7H79hUKVfXyypiyF5scjSHN0ISpglrdXamVk1gn5VTwcPxzjFJHkIUTw98hgGMOu
wg+sVv/56BtOJsUbO0me0iOdaIoUPST4fIqqAmZjJJSL662Q3chpbSvedvbrHcoe
swbg7ZKNT1M8eCBPrMIlkKgTug==
-----END CERTIFICATE-----
Generated at Sun Apr 5 23:50:37 2026 by rpki-client