
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
File: 0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft (raw, json)
Hash identifier: VjL51gpXZjoK01AB6gtMF5PezN2Vx2/j2O02Em1ifXo=
Subject key identifier: 8D:93:B0:10:AF:5C:D8:63:3B:CC:44:AC:B6:E8:BE:25:18:33:C1:72
Authority key identifier: D3:08:0A:82:8D:49:88:91:51:00:75:0F:C7:EA:06:02:EE:FF:65:57
Certificate issuer: /CN=A912C2EB/serialNumber=D3080A828D4988915100750FC7EA0602EEFF6557
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
Manifest number: 38
Signing time: Sun 11 Oct 2026 09:15:12 +0000
Manifest this update: Sun 11 Oct 2026 09:15:11 +0000
Manifest next update: Sun 18 Oct 2026 09:15:11 +0000
Files and hashes: 1: 0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl (hash: FhEqyxvQOeLKrrdipSsKAj5cKj+OAtxGVBOFAil4nGw=)
2: A23E3D0C738811F19D7E75576EA30FBC.roa (hash: 28gpiKKu2/NV1BJk3iIiC7QtFrNAkWy/xA/g4Bxzm1M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl
rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 09:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2EB, serialNumber=D3080A828D4988915100750FC7EA0602EEFF6557
Validity
Not Before: Oct 11 09:15:11 2026 GMT
Not After : Oct 18 09:15:11 2026 GMT
Subject: CN=6acb53a0-5204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:8e:9e:42:55:5a:13:94:48:b4:85:94:be:
14:57:55:4f:09:cb:de:09:ed:54:31:eb:19:a1:b2:
f8:3e:c1:af:7b:83:4e:12:ea:c4:d5:82:18:2a:24:
87:de:e2:2f:e8:67:77:1c:cf:60:f2:50:bb:1d:cb:
99:77:d4:ff:08:80:71:8f:2a:8f:28:d8:2b:af:28:
27:7b:4d:e6:9b:a9:cb:fa:ef:8b:7b:29:a1:9c:c6:
65:19:f0:dc:a7:4b:75:44:42:61:52:88:db:97:14:
93:d3:36:3d:a7:97:d0:40:4d:b7:23:31:51:e0:7c:
10:34:48:a6:6a:ed:a0:e2:a4:7d:67:92:cb:ba:d6:
d1:85:ff:77:c7:a1:fd:63:90:3d:37:4f:06:a9:6c:
5b:bd:08:ec:5f:34:4f:50:28:c6:b6:7d:28:2f:41:
22:a9:89:75:a7:53:49:2e:25:44:a1:f5:19:c8:af:
7a:d0:9d:1c:48:f8:34:1d:47:ec:d3:7b:52:d5:c9:
c4:f1:af:c9:23:f9:b0:9c:50:8c:e3:8b:04:91:e0:
ce:6d:77:f4:ae:2e:9e:b4:e2:25:46:2e:17:a3:34:
34:c7:a7:e0:85:67:7a:2b:0c:73:72:40:c0:fb:df:
ac:0b:b3:85:38:e2:a6:cd:a0:30:1b:92:be:e8:15:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:93:B0:10:AF:5C:D8:63:3B:CC:44:AC:B6:E8:BE:25:18:33:C1:72
X509v3 Authority Key Identifier:
keyid:D3:08:0A:82:8D:49:88:91:51:00:75:0F:C7:EA:06:02:EE:FF:65:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:78:ee:1f:8f:78:83:6d:72:59:6c:65:a3:cb:66:82:03:de:
b0:26:5a:83:d6:bf:8d:71:83:67:f3:bf:e0:0a:47:29:45:b0:
6c:93:e2:95:d1:91:e9:bf:49:a2:f8:49:0d:b9:4c:61:3f:97:
2a:0d:d5:25:73:86:9a:93:57:75:cc:a9:74:8d:4a:d6:11:4a:
d0:b4:c3:d1:d6:43:2a:55:9d:cd:09:99:05:99:54:ae:01:e3:
93:dd:c1:20:29:80:49:53:a7:64:de:3e:a0:89:77:cb:08:b4:
51:24:e9:51:53:30:a4:d1:54:57:bc:1c:c8:c5:9e:17:00:70:
f7:59:67:70:6b:31:1f:b9:ab:55:5e:6a:3c:7c:d1:25:fe:1f:
d9:a9:df:5d:aa:93:e2:5f:51:0d:4d:d5:f4:6e:d2:57:e2:2b:
3c:44:48:2a:28:fa:5c:61:20:84:7b:55:36:4f:12:33:37:05:
6d:dc:3a:11:a8:35:ae:90:90:b5:98:0b:69:ab:70:f1:3c:d3:
35:35:f2:2e:87:1b:83:1d:9b:d8:15:b0:a3:90:7c:53:84:e4:
5e:6b:ef:bd:5e:92:aa:48:e8:37:f7:bc:6a:cf:86:09:4a:e5:
04:9c:64:cb:e9:4c:22:3b:5f:7b:7a:d6:d2:48:e7:6a:6b:d6:
b3:7b:56:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:11:21 2026 by rpki-client