
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
File: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft (raw, json)
Hash identifier: /mlhVIAnEgVO+2ucL7bp5r3JqolfW+5eOm2H13e6nY4=
Subject key identifier: 0D:74:F5:49:2F:63:DE:BB:20:7B:27:E5:01:C9:F0:B3:7E:ED:8E:37
Authority key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B
Certificate issuer: /CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
Certificate serial: 068F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
Manifest number: 066A
Signing time: Sat 28 Mar 2026 22:31:25 +0000
Manifest this update: Sat 28 Mar 2026 22:31:25 +0000
Manifest next update: Sat 04 Apr 2026 22:31:25 +0000
Files and hashes: 1: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl (hash: hnypvWPC6ibb95sWMQ102A2GXeCdvN9tWlRAh8Aab/k=)
2: 101150200BF211ECB242D930C4F9AE02.roa (hash: ssvfMr799f/mTVyYIgMj9bRfKIkNqOfU6Gmkf1qphqQ=)
3: D84424F80BF411ECB17CCF3AC4F9AE02.roa (hash: OPDCRi7CT4/YzJXmmua8bhI/wRwIZzxKrVPfIH2gRdg=)
4: C2BDF91086EE11EFB5A6B352C4F9AE02.roa (hash: DGkc44cg4KTTtMc35ker9L4kUFjIMHeDUThOm8rbEJU=)
5: D756DF180BF411ECB17CCF3AC4F9AE02.roa (hash: y2SnfxEi58D0PUlHFRCgP8HkpNi6RCfX061Zf6HOU64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl
rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 22:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1679 (0x68f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C72C, serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
Validity
Not Before: Mar 28 22:31:25 2026 GMT
Not After : Apr 4 22:31:25 2026 GMT
Subject: CN=69c856bd-8489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:31:66:0e:01:14:31:6c:1a:86:2b:2c:ba:
be:ab:7d:cc:4b:74:d8:49:17:e7:d8:d6:fa:a1:a7:
e6:21:b5:22:ed:eb:6f:63:00:20:57:17:4e:56:84:
a3:24:92:29:e6:d8:13:af:af:13:b4:8b:04:a5:ff:
90:7b:09:34:7a:6c:3d:0d:ec:38:0b:63:be:5b:52:
fb:54:fb:ad:cc:c0:45:1c:17:6d:a1:22:f3:90:68:
b9:78:70:82:77:75:ed:6e:39:9d:32:8f:2b:68:5a:
db:44:d0:bb:c6:52:65:f6:d8:9b:19:af:7d:e7:42:
81:2e:1f:59:77:df:a1:3c:ac:f9:50:d3:fa:1e:2c:
09:e2:30:19:35:6e:e0:05:a4:03:ff:a9:4e:2b:48:
00:e2:fa:3d:58:ca:8b:04:64:d3:36:8a:f7:af:14:
ec:53:97:73:61:29:87:00:2c:8d:2c:df:85:3e:b5:
59:78:94:f3:9e:5a:d8:75:b6:d6:ff:3f:06:38:ec:
f7:b8:b1:6e:e2:b1:1c:2a:0a:1b:a8:ee:82:26:eb:
f0:44:4d:c0:ef:dc:f5:ed:2a:f4:98:ac:ba:78:91:
d7:65:da:da:43:87:0b:18:ac:3d:4e:05:03:2a:27:
d1:e6:e9:a2:b2:f9:f8:91:cb:12:e3:05:0a:5b:71:
1e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:74:F5:49:2F:63:DE:BB:20:7B:27:E5:01:C9:F0:B3:7E:ED:8E:37
X509v3 Authority Key Identifier:
keyid:58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a4:16:97:4c:ff:f5:84:d6:21:55:49:b7:53:1d:fb:92:9a:
19:4c:b9:73:67:44:8c:27:a8:5c:d3:fd:c2:f3:56:3d:fb:84:
44:2a:b0:82:38:3a:1a:06:9b:8a:42:e5:13:08:17:7e:8e:36:
76:b6:61:8f:78:b1:b4:c5:da:7e:6a:53:8e:b5:e5:a4:66:a7:
c2:6e:0e:18:2f:bc:b9:c9:45:05:ca:7d:13:11:6e:df:75:0d:
ad:81:75:c4:6a:c9:37:bf:90:12:96:16:43:a3:9f:94:ec:96:
fc:f0:4b:a1:40:49:e9:71:c0:d4:c1:74:aa:2b:6d:c6:5e:b8:
09:44:71:c2:42:db:3d:a0:96:c9:c3:a4:d9:e4:8b:c6:dd:47:
dd:b1:37:db:77:2f:ef:0b:e8:ab:31:b5:1b:ea:47:b7:ba:5d:
00:5f:9b:e4:05:d7:fa:48:7c:f4:06:97:28:05:3b:fa:76:cf:
18:db:8f:bd:0c:fe:16:2e:41:c8:d7:7e:9f:cc:ec:8b:a4:1f:
b3:94:5e:cc:53:7c:4a:47:d7:89:5a:90:a7:b4:44:84:97:87:
d9:a3:87:5e:93:bc:3a:92:c3:21:80:63:5f:27:e5:a8:11:f6:
6c:ee:87:b4:80:ac:a4:2d:d7:e6:50:eb:f6:7a:88:0a:a0:b4:
f5:83:f0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:27:10 2026 by rpki-client