
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
File: wj3utHnnD2DvynyIRiuVudwiydA.mft (raw, json)
Hash identifier: RvHcAJkMeDgmFaseGCDguhafJgOQc16X2ZFl9fWuCuM=
Subject key identifier: 88:53:EA:27:E0:F8:ED:90:51:19:02:A3:41:C3:32:EC:5B:64:E3:AF
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Certificate issuer: /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
Manifest number: A1
Signing time: Thu 21 May 2026 07:27:51 +0000
Manifest this update: Thu 21 May 2026 07:27:50 +0000
Manifest next update: Thu 28 May 2026 07:27:50 +0000
Files and hashes: 1: wj3utHnnD2DvynyIRiuVudwiydA.crl (hash: w/p5Hh768syfkrPO7tWjkAIv4BRENffxM5Fh8eQHiuc=)
2: 9EE7FBDA678511F0999A252DC4F9AE02.roa (hash: Iu+MvNjXylPZy283mB/J6+7AiPxESlN4SHOf0/N0qug=)
3: 9F685E60678511F0999A252DC4F9AE02.roa (hash: F0BVTAtasd/U+5Pd7iq4lB4rkiv9dNM8GMlahH5MNTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Validity
Not Before: May 21 07:27:50 2026 GMT
Not After : May 28 07:27:50 2026 GMT
Subject: CN=6a0eb3f6-5ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d5:de:9a:47:ad:9c:36:1f:a6:c4:30:63:d4:
e1:b5:49:47:b1:3b:2c:a1:9c:42:ff:6e:a3:ed:bf:
ed:fe:88:be:0b:a4:52:b2:8f:b6:79:83:54:3c:7c:
bc:03:29:c3:dd:1f:ae:55:b1:53:be:86:35:5f:d5:
6a:8d:ca:c7:45:7a:ac:87:5d:26:96:ba:60:8b:45:
cc:48:fd:34:7f:61:02:bf:f8:09:34:37:ff:10:b5:
e2:76:83:6f:ae:e8:6b:0d:12:42:93:63:00:85:35:
14:4d:8c:65:c5:24:47:e1:59:ea:56:d5:18:fa:7b:
22:96:b9:d4:41:60:2a:e9:cf:fc:6b:76:2e:5a:71:
cc:b2:23:f0:53:ba:78:35:f4:64:dc:14:ae:ed:cd:
9b:eb:df:26:be:3b:bb:42:7b:77:b1:8e:b7:ac:eb:
c1:77:ef:5b:0e:e3:5f:64:d8:2d:d5:c5:3c:1d:23:
d1:f6:f4:cd:ab:80:26:ca:3a:2c:49:ab:7a:c5:e6:
e4:11:c6:9e:97:79:68:b2:3e:33:4c:74:e5:2c:a8:
98:20:fd:2a:6f:fb:60:60:5f:83:f3:de:d9:d7:a4:
24:c8:0a:7b:94:64:fb:53:c2:dc:aa:cd:b6:c2:1e:
cd:b9:d8:53:0c:db:8a:80:d1:37:d2:27:a3:f0:9d:
71:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:53:EA:27:E0:F8:ED:90:51:19:02:A3:41:C3:32:EC:5B:64:E3:AF
X509v3 Authority Key Identifier:
keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:a0:a9:ba:20:e0:03:e2:82:8a:f3:90:88:3a:d5:27:34:7d:
16:7e:56:19:6c:49:27:39:c9:fc:73:cc:60:e1:b2:a0:57:9a:
8e:a4:1d:31:eb:6e:31:5a:4d:2a:b8:a9:74:57:f3:ea:2c:6e:
11:d2:db:92:5a:d3:f3:8f:86:c1:83:02:c9:17:95:77:3b:4e:
b7:b3:4a:e3:08:1c:9e:c4:de:94:9f:52:ab:67:34:14:c7:38:
a5:e5:de:aa:78:5c:eb:b8:19:9f:a1:8b:29:d6:3f:52:f8:79:
de:1a:7e:9e:66:f9:b1:9b:3d:64:0b:4b:3a:48:b7:9c:6e:c5:
b5:e9:12:c4:52:a6:3b:31:2a:b4:59:e2:92:9a:60:df:63:ac:
18:34:97:03:0c:b9:52:b7:70:ad:a0:0f:68:23:06:58:ec:13:
9a:b7:a2:25:3c:f5:ef:99:f2:34:7a:ad:62:d0:a0:89:28:fb:
05:37:8e:c7:8e:75:35:c0:78:d0:fe:56:df:b6:59:ac:64:70:
1e:96:8d:a7:5d:6d:fa:69:95:54:c4:f3:95:f3:67:07:ff:45:
d8:4a:61:5c:49:24:b6:c1:67:fc:98:2c:c4:61:2e:d1:cd:c4:
a1:73:d6:1a:63:92:92:b7:1c:bf:b9:5b:9c:1f:a4:d7:1d:43:
a8:66:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:11:50 2026 by rpki-client