
$ rpki-client -vvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
File: WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json)
Hash identifier: x4LNl0mUnb8Rdv5o3fIc8wt+G3eQ6dBJg0bVTD+LWQc=
Subject key identifier: 51:02:91:63:6D:5A:B5:B0:85:08:25:23:62:F7:D0:3D:A0:34:CB:86
Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
Certificate issuer: /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Certificate serial: 04F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
Manifest number: 04F2
Signing time: Sun 22 Mar 2026 23:17:17 +0000
Manifest this update: Sun 22 Mar 2026 23:17:17 +0000
Manifest next update: Sun 29 Mar 2026 23:17:17 +0000
Files and hashes: 1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: hNEpc3Hszfn7rM9KjQCjI8IjsAyoZQcVEIgsQ+R4V+4=)
2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: OxBZXjM5WU3mTzBTkJpk2hM02aP7JRhZY0bot56cYO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 23:17:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1273 (0x4f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Validity
Not Before: Mar 22 23:17:17 2026 GMT
Not After : Mar 29 23:17:17 2026 GMT
Subject: CN=69c0787d-0e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:4d:9a:c6:0d:32:f7:61:4f:c7:01:ef:f8:
4f:d5:0b:f5:b3:fb:00:de:65:89:6d:b4:a9:74:81:
f3:04:c4:8b:0c:bc:00:8e:ee:8c:44:8a:e0:de:0d:
7c:ec:9a:33:d5:bf:5e:16:a3:a4:ea:3c:7f:12:b8:
dc:bb:31:39:f1:0e:0b:31:cc:4e:27:d1:44:67:89:
06:ba:ca:9e:a3:53:2c:3c:06:ab:fa:d9:8d:cd:9b:
81:36:2a:3e:b0:55:1d:16:6a:9d:7f:5a:5a:2c:88:
17:ec:c2:63:3b:6a:a0:6d:80:ca:96:c4:6e:e7:c1:
b8:5b:86:4f:ba:56:d7:3c:ac:47:90:84:19:c6:80:
2d:ca:db:4d:f4:67:22:1e:c0:cb:45:43:1e:79:13:
2b:88:74:78:2a:a0:1b:e0:1a:2f:bc:25:0b:b6:57:
28:cb:96:19:87:82:04:dc:4c:a2:f0:a9:cf:93:82:
bb:3a:ad:1e:89:e5:3b:8b:43:31:fe:83:24:ff:eb:
a9:e9:5f:d2:8f:c3:bc:59:db:dd:19:46:59:56:4f:
7e:e6:8b:89:79:da:5b:b8:d5:a1:b7:9c:49:77:83:
62:39:f6:16:a1:c0:5f:09:69:16:e2:35:7c:f9:1f:
39:10:67:00:2c:5a:f8:57:cc:14:8a:ba:ed:84:0f:
9e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:02:91:63:6D:5A:B5:B0:85:08:25:23:62:F7:D0:3D:A0:34:CB:86
X509v3 Authority Key Identifier:
keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ef:14:4d:32:2d:ce:c2:07:f7:79:4f:c2:fc:69:fe:60:3f:
fe:e9:9b:82:8b:32:a2:6a:75:ea:80:05:c8:91:c5:65:db:1c:
88:16:a2:a5:49:4e:29:7e:26:99:3a:ec:1c:5b:ed:6e:43:f0:
ea:5f:39:16:b7:6e:d9:77:0d:c2:48:39:8f:35:9e:f9:c3:fa:
41:7d:28:20:b5:00:ff:e5:02:c5:3a:41:7b:22:d7:f5:b3:2c:
7c:c7:fe:a8:9b:a8:b2:5c:21:62:e2:d5:2e:a8:21:b7:8a:02:
0a:52:43:3b:62:0f:0b:a4:60:9d:2d:9b:26:7b:e7:01:8e:29:
70:1a:a1:c5:f2:bc:dc:68:05:90:f1:5e:a8:c6:b7:c0:29:0c:
0c:ac:0e:cf:4d:ed:35:2d:6c:5b:20:62:32:03:4b:d4:b4:49:
ea:9b:9c:53:64:54:83:0b:f6:b8:bd:58:cb:9d:61:19:c6:7c:
72:0f:6a:e1:c4:ea:c7:46:f0:9f:e1:16:de:ce:d8:ca:12:54:
a5:d2:be:cb:39:c7:45:92:57:d2:fe:fb:91:f8:e8:bc:77:84:
e6:fa:23:fc:a2:8c:4b:64:3d:f6:00:34:d6:b7:2a:aa:21:b8:
ce:69:9a:78:ad:49:0c:ee:f3:ec:90:88:dd:b3:ee:f3:b5:76:
32:9f:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 06:47:46 2026 by rpki-client