
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
File: W3UJDp6gQpi0e6-C-qIoDl42pL8.mft (raw, json)
Hash identifier: Dz7ZSL38gS3upfkyKGudGssRsyiYDJ0OG5DRN5iEjDA=
Subject key identifier: 97:85:57:75:95:B2:D9:B4:3B:C5:7E:87:5C:12:58:36:6F:46:CD:FA
Authority key identifier: 5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF
Certificate issuer: /CN=A913731F/serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
Manifest number: 0212
Signing time: Fri 11 Sep 2026 03:14:02 +0000
Manifest this update: Fri 11 Sep 2026 03:14:01 +0000
Manifest next update: Fri 18 Sep 2026 03:14:01 +0000
Files and hashes: 1: W3UJDp6gQpi0e6-C-qIoDl42pL8.crl (hash: ysiNM5McT4dcVnfkTHql32aoMoPQJfHR/izOjaCYBAo=)
2: 1701D3A0F36B11EF87FE3725C4F9AE02.roa (hash: jL4C9wabFU2W+HZfJ8Q55BVxLErhMFYnZq6X2Wl6HQM=)
3: 2B8FCD3E567C11F19933F103A0833773.roa (hash: u66uRnt9zQfsAog7oSon+IBOkjb9LI2D9Vr4NnhEN8o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl
rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 03:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913731F, serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
Validity
Not Before: Sep 11 03:14:01 2026 GMT
Not After : Sep 18 03:14:01 2026 GMT
Subject: CN=6aa371fa-fb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:00:88:52:ec:b6:b5:20:18:ff:21:59:15:
d9:4f:bf:68:3b:89:7b:ab:54:54:7d:44:2c:68:aa:
a5:e1:32:4c:66:b4:47:9e:48:c9:58:6b:82:cc:b1:
ab:bc:13:bd:90:8d:5d:e7:04:6d:87:f8:7e:73:bf:
cd:95:64:0e:a7:7b:ed:5e:ff:63:07:20:18:5f:b7:
8a:d7:4f:b2:cb:09:f3:eb:b4:e3:87:a1:1d:be:cd:
85:1b:e3:3e:58:6c:08:05:a7:65:9f:42:e0:a5:16:
eb:1e:03:56:91:14:40:e4:0b:56:66:58:f9:01:69:
e0:d8:5e:81:d6:5c:15:56:4c:50:85:29:40:93:5e:
46:45:a8:29:ae:c3:4f:20:0f:c5:87:80:49:9c:c6:
66:be:1d:32:e0:38:a7:10:a6:0a:60:63:9f:df:1b:
71:9b:3c:87:c2:43:40:1d:3c:e0:df:5f:38:03:13:
b2:44:e3:87:de:6d:c0:cf:f0:6f:7c:21:1a:a7:43:
3f:38:ff:ae:29:b8:14:35:fe:d6:6e:3e:60:95:49:
5f:dd:3d:05:cf:1a:34:ed:19:47:b0:86:c9:d9:a4:
f5:e5:06:18:72:8e:db:ca:6c:cc:5c:11:a4:4d:89:
37:9f:10:30:c0:a8:bf:b3:0e:6a:f1:62:00:dc:09:
07:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:85:57:75:95:B2:D9:B4:3B:C5:7E:87:5C:12:58:36:6F:46:CD:FA
X509v3 Authority Key Identifier:
keyid:5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cd:d7:da:1c:e2:58:ff:61:bd:59:b9:19:40:a5:d2:68:1b:
9c:40:ac:d7:ea:b0:d2:4c:3b:b5:c2:43:a3:d3:01:02:3b:34:
5c:89:63:6b:0e:c9:58:00:14:b8:25:dd:25:fa:f7:00:8f:53:
42:57:22:0f:d0:95:b3:11:f8:25:df:5f:ec:1a:65:f9:33:9d:
90:1c:72:c1:f9:dc:cf:c8:d8:d7:f0:b8:7e:45:63:07:4d:d5:
9a:7c:d7:1d:6e:9f:42:6e:fc:5c:c8:e4:c4:23:2a:78:3f:eb:
44:65:af:50:82:e8:93:e9:ef:66:16:d0:00:ce:24:9d:a6:93:
8f:55:87:d0:8a:79:d3:dc:d0:a3:1b:10:12:82:52:de:fa:c4:
6b:23:ca:b3:bb:ee:e6:0a:57:9f:2b:df:be:91:1d:80:a7:da:
ff:22:e3:04:0b:c5:66:b4:c8:50:ed:65:38:f2:50:e1:8d:01:
c4:ee:4b:a2:5c:27:cd:84:35:80:4c:e2:92:f7:0b:72:32:0a:
1a:25:ad:98:c5:35:5f:53:56:b8:a9:3e:d3:66:6d:9a:67:95:
a5:b7:f1:e2:85:4b:aa:f6:26:c5:88:ee:73:27:94:82:bf:88:
ef:ce:a9:67:ed:a0:94:14:5b:c1:a4:7b:58:0c:ba:64:e2:34:
f5:94:9d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:29:39 2026 by rpki-client