
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
File: W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft (raw, json)
Hash identifier: p4BZi5YHNAYumZfkXi9dxuoxk8tIzsb9MqVhjSPLlxw=
Subject key identifier: 73:EF:BE:B9:D4:B1:73:2C:E8:5C:2C:3B:DD:9C:D2:F3:F4:B6:02:B0
Authority key identifier: 5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
Certificate issuer: /CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
Manifest number: 0242
Signing time: Tue 03 Nov 2026 03:15:02 +0000
Manifest this update: Tue 03 Nov 2026 03:15:02 +0000
Manifest next update: Tue 10 Nov 2026 03:15:02 +0000
Files and hashes: 1: W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl (hash: 6MJm/Vyw/rqSNiToXVDlLNwhvYs5g8utOMQx4eoTIaw=)
2: 12C3947A66F611EE82864875C4F9AE02.roa (hash: AMUUmBAUXG3TqchlULyq4/LQSR5p+XXlHRR72xWw5jg=)
3: E286BAA24B5611F0A987864DC4F9AE02.roa (hash: mERSRsM56zZVM538VlKpNkeRtK+AXD86sag0pr0Q6X4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 03:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911069A, serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Validity
Not Before: Nov 3 03:15:02 2026 GMT
Not After : Nov 10 03:15:02 2026 GMT
Subject: CN=6ae951b6-0de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4d:ea:9a:38:e1:67:5d:b2:10:2b:4f:71:8b:
d1:40:a2:7e:28:a5:24:c8:dd:db:be:da:8b:00:6a:
6a:7a:55:a1:55:9b:13:1a:f3:d1:82:db:f8:75:55:
09:a1:2c:97:86:b8:fe:bb:dd:aa:e5:26:5d:f7:c5:
89:c1:47:d0:ce:6f:70:1c:da:c8:10:e2:26:44:08:
fb:e8:b5:d2:07:bd:5b:e0:eb:17:3a:5d:c5:ef:2b:
fc:a4:dc:9d:d4:28:2c:e8:af:20:1c:b4:19:c7:b5:
f1:4e:da:c5:b6:4c:e3:20:04:3c:7b:78:44:7e:a4:
22:dc:c7:6e:00:9b:42:02:03:f1:aa:80:e6:fc:a3:
8d:47:a0:a6:5e:7a:9a:b9:b7:07:ac:d0:e5:4a:67:
0a:45:f2:fe:1f:91:4b:b7:0e:38:36:86:d7:97:8e:
6f:bc:a9:7b:3d:bf:5f:85:65:2c:bf:84:ef:4c:98:
3b:41:eb:2d:8c:59:35:aa:39:d5:5c:c6:9c:78:c1:
60:59:43:a7:71:31:14:4f:e5:f6:ad:f1:ac:1d:f3:
a4:09:20:15:37:1a:e1:dc:3b:d2:cd:2c:d1:e0:00:
f1:f5:5d:34:a9:d0:24:ff:d9:f2:d6:d9:25:ac:c5:
1b:ee:f1:b9:b2:a4:fc:53:e4:19:35:2c:19:9f:3c:
c3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EF:BE:B9:D4:B1:73:2C:E8:5C:2C:3B:DD:9C:D2:F3:F4:B6:02:B0
X509v3 Authority Key Identifier:
keyid:5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:52:b8:6d:5a:bb:92:15:1b:15:bb:ee:82:d4:2c:86:d8:ca:
53:6e:60:92:cf:84:e3:bb:c5:a7:63:cd:a5:1f:2f:53:60:5a:
c4:3c:00:07:c1:33:1d:17:09:b6:70:b8:e9:51:2b:2d:56:d5:
6b:83:05:0f:5d:4b:cf:ec:22:63:c2:d9:68:ff:98:2e:48:bc:
52:e0:a1:ce:0f:cd:c3:0a:84:0a:5d:aa:13:14:97:ab:28:0e:
f6:1f:fc:53:07:50:79:b0:20:de:f4:3b:0a:60:65:7e:68:26:
ae:d1:1e:c9:d7:e5:ab:0b:0f:22:6c:cb:5c:17:76:2f:9b:47:
8b:ea:3e:fc:4a:dc:bc:ba:6b:2d:e7:29:1f:5c:ee:56:d6:04:
d3:86:2a:0c:00:65:28:71:e6:c1:6b:e5:40:bd:17:56:ca:07:
ee:72:6d:30:e3:69:47:61:45:52:f0:7c:02:12:c2:b8:67:88:
55:d8:e1:01:af:b5:14:96:e5:d2:0f:63:89:62:3b:b3:23:16:
62:f6:b7:9c:9a:38:bd:73:c3:c3:b7:d4:78:70:5e:dd:9e:70:
0d:c1:f9:9b:b4:92:43:0e:cc:c4:61:62:22:83:67:fd:c4:43:
0c:53:a4:18:9a:3b:cf:5e:f0:43:7e:0a:05:68:57:19:50:e3:
ea:cc:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:09:15 2026 by rpki-client