
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
File: wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json)
Hash identifier: FqimobUYQaD1BJ/UQ/8wPvUgctPX+R0b8OC+E57xYR0=
Subject key identifier: 00:14:95:44:0D:CA:97:AA:CB:FA:BE:AA:03:92:55:AC:2A:C3:31:4F
Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB
Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
Certificate serial: 0130
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
Manifest number: 0127
Signing time: Tue 03 Mar 2026 05:17:02 +0000
Manifest this update: Tue 03 Mar 2026 05:17:01 +0000
Manifest next update: Tue 10 Mar 2026 05:17:01 +0000
Files and hashes: 1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: GeT5XICE65yk7SZ2sDc0UrXC5K9fuIAc9u5MEHOsRkY=)
2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: fz5wGX8TCKnp2pv3oEZJbnk1JDuLkYxlHREJYhGasR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl
rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
Validity
Not Before: Mar 3 05:17:01 2026 GMT
Not After : Mar 10 05:17:01 2026 GMT
Subject: CN=69a66ecd-7f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:b0:bd:43:90:7c:72:94:f2:80:75:91:0a:
7e:18:f2:0f:47:52:c3:39:b4:c3:6e:f1:7c:f0:d1:
f6:20:f2:6a:36:7d:ca:35:0b:dc:df:4b:5c:52:56:
74:82:26:ef:ed:12:dc:0a:c2:d7:7d:0e:5d:87:a8:
63:b2:00:c0:b2:58:91:d7:a9:97:ef:d4:99:7e:8d:
fc:f0:ba:7c:b4:32:27:d7:30:7c:06:bb:2c:79:c8:
4d:d2:04:62:f4:20:08:01:1e:e2:2a:9b:a4:87:71:
bc:00:95:99:8a:d0:e6:12:83:a1:bb:52:6f:9c:06:
09:b6:62:d8:9c:91:6e:99:f1:13:f6:31:a6:dc:53:
1a:2b:9d:f1:ca:25:b4:9c:05:32:9c:b6:b8:de:28:
b1:22:28:06:6c:c3:71:c5:28:50:ee:fb:1d:6c:58:
2c:77:f3:eb:a8:57:11:e2:8a:44:f7:00:e6:43:18:
a4:e4:ae:39:92:fa:cb:b2:ab:92:57:bc:e3:11:83:
52:11:2b:a3:62:f7:f7:f2:37:42:4d:28:9f:e6:67:
67:63:83:d7:09:48:38:4b:5c:a6:0d:fe:f2:46:88:
6f:84:6d:f0:6c:e2:10:35:f6:6f:da:32:57:71:b5:
9e:3b:18:13:37:51:21:8f:65:23:d0:c0:d2:83:78:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:14:95:44:0D:CA:97:AA:CB:FA:BE:AA:03:92:55:AC:2A:C3:31:4F
X509v3 Authority Key Identifier:
keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:96:7b:eb:79:37:37:96:28:a2:fc:04:a9:49:90:c7:4f:a3:
9c:29:3b:19:47:2a:fd:9a:24:31:aa:be:98:e8:3d:5b:09:1b:
bb:8a:f5:0b:5f:3b:e4:5b:26:42:9e:e9:63:9a:35:30:64:27:
52:cb:1e:a4:20:c0:08:b9:e2:a5:95:33:4d:0d:90:50:48:67:
fa:c6:93:cf:c9:9f:b9:30:aa:0a:bc:3b:07:d2:59:57:3e:96:
67:ae:6d:c3:77:8d:8e:17:31:37:48:94:6b:05:1e:7b:f8:79:
d8:43:dc:15:9a:2b:f0:56:ca:5d:c9:dc:8d:3f:de:15:78:b7:
cf:d5:04:a7:c9:6e:23:6e:c4:c0:02:f3:63:ff:2c:c4:f1:3a:
50:d5:29:ba:70:f4:e4:c7:72:d2:93:b4:f3:a3:30:17:61:20:
fc:1e:e8:22:e3:93:9c:4d:0d:c6:79:cb:59:e5:27:ee:d9:30:
3b:47:85:15:8e:e7:64:3c:b5:1d:76:1b:83:34:a5:87:74:28:
44:ea:f2:5a:f0:d6:d8:ae:86:35:9c:82:d6:ea:9d:72:d5:4e:
5a:0f:8e:54:f2:47:9e:aa:b8:be:87:dc:fd:32:54:59:3e:9c:
9b:b4:60:fb:5b:ff:26:87:fa:35:c0:e4:9a:db:86:01:a6:6d:
e0:68:ca:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:29 2026 by rpki-client