
$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json)
Hash identifier: FKqzpafQ9vEJKf0IRn+w06FCyRgrQyslEUMOQqxwkWQ=
Subject key identifier: C2:3C:54:DF:88:77:1E:B8:7E:B0:EB:AC:58:CA:E1:FA:D2:C3:FD:BD
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial: 0F3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
Manifest number: 0F18
Signing time: Sun 26 Apr 2026 17:31:14 +0000
Manifest this update: Sun 26 Apr 2026 17:31:14 +0000
Manifest next update: Sun 03 May 2026 17:31:14 +0000
Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: ARTTzmmPMXrdBgweOognvwrWtULZCpeiHNgNZp3vRb8=)
2: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: r73v/j3Pi1PsFFqeuE9PLyE/kQZzsl5EsRJ33NTzO4M=)
3: 247099D084C611F09EBC052BC4F9AE02.roa (hash: bck0Cz+lMfFNk6rw8puMgHrMGrMhmzdTCk9wC+gqcMs=)
4: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: XNImmACJgoKxFFAFbkf6Six9pQM8uanRw2/pmHlIZxs=)
5: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: Ey+GufoUI96FnTTJ85Tetyf6tWmwSdtvBWwRLD91y1c=)
6: 2569C82ADC2311F08AE4CDD5626F56BC.roa (hash: dV1q3hKs8X5N6nMqWd+23yBEXs6dRmnrwADaOuDZSJc=)
7: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: 8C9LDupV6BTb73S5fdDupYh39mCxESKwTImywmqhv28=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 17:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3902 (0xf3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Validity
Not Before: Apr 26 17:31:14 2026 GMT
Not After : May 3 17:31:14 2026 GMT
Subject: CN=69ee4be2-4063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:09:33:31:fc:f9:a7:fb:e1:9b:a5:11:5d:
14:86:1e:dd:8b:6d:d0:ea:86:c0:08:b2:03:c7:1b:
1d:9f:ad:e7:4c:05:66:5a:f4:01:88:4d:ff:0b:51:
25:76:5e:93:d5:5c:71:99:90:8e:78:49:81:1e:6c:
ae:c1:f9:00:44:ae:59:42:2a:57:3f:5c:84:c0:60:
11:8f:e6:43:2e:3c:48:04:92:49:66:22:64:0f:c9:
cc:f1:c7:7f:6d:8d:57:dc:e9:d1:71:a1:da:e8:5d:
68:57:46:a9:c7:dc:85:7b:e7:6e:ba:8b:aa:04:f3:
66:ac:b0:e2:66:db:82:d1:91:a9:92:2f:69:cf:32:
e0:ab:14:46:d6:66:a2:e1:39:7d:88:12:29:3c:8e:
44:1a:ee:fb:ec:14:3d:af:b8:6d:f6:53:76:46:b0:
29:49:cf:1d:bd:f2:db:97:75:b3:17:19:6f:ee:7a:
e0:a5:12:25:7c:5f:02:51:f8:bf:e9:af:8d:78:e8:
4d:19:89:d1:93:bb:23:9d:4a:13:ed:0c:2a:4c:8c:
4f:54:25:d1:c9:52:0e:02:7d:80:35:48:26:fa:1a:
01:2a:7c:23:27:4b:a0:f8:22:b9:35:3f:40:a4:65:
9b:fe:6d:3b:55:52:19:d9:fd:c9:3c:c6:bf:19:9d:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3C:54:DF:88:77:1E:B8:7E:B0:EB:AC:58:CA:E1:FA:D2:C3:FD:BD
X509v3 Authority Key Identifier:
keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:ac:43:dd:f1:27:68:99:89:d0:2e:0e:56:9f:79:91:06:d8:
70:06:9e:a4:c8:08:e2:69:e4:3c:1f:c0:57:eb:42:53:0b:5a:
8a:a5:56:e0:f0:fa:af:2d:78:99:55:3d:e8:95:00:dd:cc:6d:
93:b0:ef:02:2d:1b:96:79:08:f2:9a:08:4b:9f:fb:5e:44:c4:
b2:d1:91:3f:c8:df:b6:a4:55:83:22:35:af:b0:f8:5d:ae:0c:
98:fe:f5:4f:68:40:66:19:c9:cf:a3:fa:eb:bb:bc:52:e3:13:
8b:70:2f:ad:8a:dc:5d:e3:a9:d7:42:f0:a8:14:e0:5a:92:f5:
96:7d:72:08:20:09:67:39:1e:fe:88:59:1b:ac:38:2c:5a:cf:
de:6c:d6:c2:b4:26:91:ef:62:24:f6:68:bc:64:98:46:9f:33:
12:44:ab:55:91:1f:ba:91:12:39:19:41:55:72:f3:38:8c:68:
07:27:55:e4:09:5f:21:86:81:b7:70:83:e3:70:3c:a2:7e:f7:
1c:e6:f1:b8:a0:ce:26:66:82:77:3e:5b:33:79:fe:fa:21:ff:
dd:84:fa:9b:77:37:1e:e8:d5:e1:28:ad:4e:0f:6d:94:7d:39:
e9:cf:1e:95:89:a9:57:8b:12:aa:00:a8:61:17:4a:1e:a5:19:
57:8d:38:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:30 2026 by rpki-client