
$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
File: WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json)
Hash identifier: shyYRP09vQk2wdCvXhuraVfhTVUU+hf46j5bx/j7OCA=
Subject key identifier: F4:A0:04:D1:C2:82:FD:D1:3C:8D:0A:00:90:F8:22:BA:20:41:79:14
Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
Certificate issuer: /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Certificate serial: 352C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
Manifest number: 352C
Signing time: Sat 18 Apr 2026 14:52:25 +0000
Manifest this update: Sat 18 Apr 2026 14:52:25 +0000
Manifest next update: Sat 25 Apr 2026 14:52:25 +0000
Files and hashes: 1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: AtAeN3DP2vueqgtZQlZNdLBL2PYxJeAcc/MUID5zFv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13612 (0x352c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549
Validity
Not Before: Apr 18 14:52:25 2026 GMT
Not After : Apr 25 14:52:25 2026 GMT
Subject: CN=69e39aa9-3336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:14:2b:99:11:58:0c:c0:01:08:2b:8b:84:
d5:e0:65:86:d0:a0:87:86:76:63:6e:24:be:97:72:
e1:12:b5:bb:e6:e6:8e:d7:cb:7e:d8:e7:11:58:25:
f1:7c:10:35:bd:7e:24:f1:8f:1e:60:36:0d:4a:57:
d2:42:95:c3:c6:de:bf:98:50:97:24:7f:09:a5:45:
dd:ec:24:6e:1c:5a:2c:a1:dc:07:bc:4b:99:c2:cf:
03:4c:16:09:34:a7:0c:a5:62:f4:b0:ee:fe:21:12:
28:af:3f:05:ca:59:27:c8:fd:ec:ed:af:54:5d:7b:
77:34:57:c0:a5:b3:63:ed:0e:d9:07:e1:f6:0d:dd:
c7:50:ac:9a:33:a7:a8:5a:12:43:61:7e:b4:06:7a:
27:32:53:b4:67:e6:db:24:0a:76:35:c5:5c:3a:69:
d4:20:ff:9a:b7:65:47:5e:81:7b:55:44:0d:2e:24:
90:ee:e0:63:6a:f7:b0:c4:5b:b7:c5:0c:1f:08:ae:
ec:99:46:fa:e4:87:75:cb:32:78:d6:30:63:1c:15:
89:9c:28:ec:5e:1f:a4:91:16:f9:08:37:a9:c7:fd:
68:d9:08:c4:f1:5c:d8:a5:ae:25:79:aa:8e:80:08:
9b:54:a2:4f:12:c2:55:10:66:52:44:37:a0:f8:6c:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A0:04:D1:C2:82:FD:D1:3C:8D:0A:00:90:F8:22:BA:20:41:79:14
X509v3 Authority Key Identifier:
keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:38:59:1f:4b:7a:78:f2:5a:8d:ed:f6:44:b2:98:f7:4b:5d:
71:a7:46:59:4d:08:5c:f7:4b:44:ed:25:70:3d:ec:9d:0d:14:
9d:2e:6c:8f:6f:89:36:84:97:7a:08:f0:be:55:d6:c6:cb:4f:
cc:d4:aa:a0:f9:08:08:98:02:f1:2d:d2:eb:f9:76:bd:6a:5b:
93:48:a2:4a:3b:44:60:75:f3:2f:3a:dd:34:4c:ee:45:15:85:
b1:26:e5:f3:47:55:ae:38:8e:62:21:53:d9:c4:5f:a6:97:b1:
62:4a:a5:58:97:3d:ad:d0:d4:13:17:bf:eb:59:3b:00:04:62:
a0:92:bc:ab:2e:8d:6d:dd:4d:cf:2a:77:f9:dd:a5:91:e0:be:
eb:0c:c7:ea:7c:d5:33:48:a7:13:62:a2:b6:75:66:c6:c2:a4:
d7:78:a2:19:20:3b:65:ec:99:c0:d8:82:2a:f6:6a:b1:e8:85:
b4:35:1e:96:3d:09:cf:52:73:28:3b:c9:3f:f0:0a:59:0c:9c:
2c:32:9d:82:5b:64:ff:ad:34:2d:17:25:e8:7c:a2:41:02:17:
f5:a0:fc:c3:2f:f0:33:21:50:ab:80:2d:1f:50:7e:20:92:e4:
55:e0:dc:7a:fb:1a:43:82:0d:b7:d8:08:f7:e1:10:ad:c3:7b:
ff:b6:3d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:32 2026 by rpki-client