
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
File: wj3utHnnD2DvynyIRiuVudwiydA.mft (raw, json)
Hash identifier: LO1CUmVB0FcSbp0jkGG3/ejIL5gSo8e3x37oqzNupGs=
Subject key identifier: 51:D5:CE:B0:3B:3E:1B:1D:24:6F:0B:BD:E8:9A:2F:B6:7F:7C:08:75
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Certificate issuer: /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
Manifest number: CE
Signing time: Wed 19 Aug 2026 07:30:45 +0000
Manifest this update: Wed 19 Aug 2026 07:30:44 +0000
Manifest next update: Wed 26 Aug 2026 07:30:44 +0000
Files and hashes: 1: wj3utHnnD2DvynyIRiuVudwiydA.crl (hash: S5ROkWGMUkc6ocXOJGtFcrusxSpCZKFU1ycVDqFRKqQ=)
2: 9EE7FBDA678511F0999A252DC4F9AE02.roa (hash: Iu+MvNjXylPZy283mB/J6+7AiPxESlN4SHOf0/N0qug=)
3: 9F685E60678511F0999A252DC4F9AE02.roa (hash: F0BVTAtasd/U+5Pd7iq4lB4rkiv9dNM8GMlahH5MNTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Validity
Not Before: Aug 19 07:30:44 2026 GMT
Not After : Aug 26 07:30:44 2026 GMT
Subject: CN=6a855ba5-1125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d7:a3:f2:0c:49:a0:e4:20:11:6c:05:b5:4a:
33:61:9c:65:cf:01:8c:80:a8:69:ee:43:f9:63:25:
87:1c:63:45:3f:48:59:1c:32:7e:7b:54:99:c3:b1:
45:30:0b:dc:5b:29:5d:39:5a:31:3b:61:e3:b2:14:
8a:ad:bf:6d:29:c2:0b:f2:f5:cb:8f:8a:0d:ff:77:
8e:f1:99:81:3c:20:86:83:56:76:51:9a:c0:19:11:
05:55:54:b0:ee:1e:a4:6d:91:59:ee:3c:34:c5:d9:
7c:b8:83:47:8e:25:e4:3b:4d:33:fb:bd:85:44:08:
9c:42:8f:85:4d:4f:11:05:b7:ba:4c:22:23:1d:68:
b6:35:fa:bb:fa:28:bc:90:95:3e:54:04:29:34:1e:
b0:17:87:91:d6:56:59:18:50:71:19:89:3c:98:90:
b8:20:1f:0e:ef:42:80:a6:40:15:0b:d9:fc:6e:37:
06:fc:df:90:04:c9:9c:44:2f:fd:94:f6:e8:16:73:
f6:73:c8:dc:93:05:f2:2f:53:90:81:78:29:60:97:
67:5e:6c:90:5f:b8:6c:ce:07:ee:5c:69:be:a6:91:
ba:f9:8d:40:f1:04:2c:9f:63:0c:2d:81:2f:09:cc:
92:53:d3:fe:69:eb:90:38:45:47:99:a4:97:85:69:
a5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:CE:B0:3B:3E:1B:1D:24:6F:0B:BD:E8:9A:2F:B6:7F:7C:08:75
X509v3 Authority Key Identifier:
keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:5e:9d:e8:20:b8:80:86:25:13:74:21:ed:dd:1e:06:9c:6d:
00:d4:6a:e7:11:37:bd:64:43:3d:3b:b3:e7:c4:e3:4b:5e:2c:
e1:99:38:6c:fe:6b:0b:11:40:a5:e8:4c:bc:67:5b:c9:dd:4d:
a6:d1:33:e3:a2:2b:8d:d1:7c:dd:56:f9:75:61:cb:5d:82:cb:
8a:41:90:1c:ad:c5:93:fa:22:fb:9b:35:87:e6:b4:14:99:b6:
ca:2c:2e:d2:35:f2:09:6a:12:a6:c5:27:32:af:c5:a6:31:fc:
ca:1b:a4:21:32:7d:98:de:dd:54:c2:40:d4:c5:67:fb:1d:6e:
d1:a5:40:7e:7d:e1:d9:44:26:81:16:32:83:c8:fa:4b:f0:17:
65:2d:6c:90:ea:d3:09:a0:05:6f:ac:21:71:93:44:cc:6f:46:
4d:1a:ba:39:c1:52:68:11:37:eb:70:aa:8e:48:6f:34:23:dd:
87:b7:62:33:57:59:92:11:08:f6:d0:f8:55:95:7f:61:9a:9d:
b8:e7:b0:7d:54:b8:12:d3:2e:ae:1b:bf:8d:86:6a:84:79:f1:
c6:bd:45:b8:cf:44:60:e6:5e:8c:8e:a1:9f:2c:3d:9f:78:56:
b7:d9:63:4a:11:ef:c4:5d:4b:c4:ab:93:c1:29:7d:50:06:4f:
2a:14:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:02:20 2026 by rpki-client