
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
File: wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json)
Hash identifier: Br3itwyk0SIqSQL1T/GHezIkC5kosLfiWHp9otdXSC8=
Subject key identifier: 58:48:1A:80:61:AC:AA:77:E6:FF:A6:EE:2C:01:99:F5:BC:1A:1C:F2
Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76
Certificate issuer: /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
Manifest number: 01E5
Signing time: Fri 09 Oct 2026 04:00:53 +0000
Manifest this update: Fri 09 Oct 2026 04:00:53 +0000
Manifest next update: Fri 16 Oct 2026 04:00:53 +0000
Files and hashes: 1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: t3HdbHAmi7ZK6W11P+fdFnU7puBmXN48AplIy4dZEqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl
rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914400E, serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276
Validity
Not Before: Oct 9 04:00:53 2026 GMT
Not After : Oct 16 04:00:53 2026 GMT
Subject: CN=6ac866f5-7d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:e6:29:83:aa:d1:a3:11:3f:9e:9d:0a:b7:
48:f2:f3:e8:f5:e8:8a:82:50:b4:06:15:d5:d4:1a:
b0:71:ef:17:98:eb:fa:19:f1:06:c6:32:e8:83:a4:
30:46:93:07:50:9d:88:d3:22:0e:e2:1f:8d:1a:db:
79:fd:bc:de:a3:fa:46:06:88:2f:f6:d6:86:14:88:
33:cb:fe:20:3e:36:1c:c6:08:90:03:be:81:b4:fa:
00:88:bd:e1:88:7b:ce:b1:8b:f6:1c:53:10:e2:0d:
44:87:c2:20:e6:0b:0f:8c:21:93:de:fe:a5:82:59:
95:97:1e:d5:23:97:e9:b1:73:3b:66:4d:c4:d0:61:
a4:c6:ac:09:8f:c1:e5:c7:61:c3:49:61:02:d9:e2:
48:2e:8d:50:d8:9c:00:7c:b1:31:97:c8:c8:d6:16:
b3:ea:f2:8a:76:83:ec:1e:3f:51:09:20:63:ae:1a:
4a:46:73:eb:e5:ba:82:b6:7d:17:d8:2a:45:04:35:
e4:6e:53:71:7f:02:3d:c0:b2:a8:fc:dc:56:ec:96:
bf:22:09:88:1a:0f:56:46:c8:5f:31:45:a9:7e:98:
ad:00:76:47:3d:5c:8b:e1:6b:4b:e3:6c:fc:ae:91:
44:44:43:fa:44:ea:5d:17:bf:0e:c9:bd:d1:4c:ca:
ce:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:48:1A:80:61:AC:AA:77:E6:FF:A6:EE:2C:01:99:F5:BC:1A:1C:F2
X509v3 Authority Key Identifier:
keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:24:f2:e3:13:e9:8d:31:fc:3c:7b:3c:c9:0f:9b:81:74:6e:
29:ae:55:4e:b5:1b:83:1a:99:c9:97:78:6f:a3:a8:11:b0:98:
57:26:91:7f:9c:d1:07:cf:8e:56:7b:33:4a:27:ee:58:a8:79:
25:f0:76:0a:9c:9a:e9:5e:73:04:81:c6:c3:33:2a:8a:1b:f4:
8c:82:59:db:89:b7:41:61:4a:99:4a:95:8f:6e:84:3f:f7:92:
2f:8c:a7:b7:40:25:1a:98:9f:5a:a9:31:1c:f9:24:0c:f2:5a:
29:60:3c:41:ac:0b:1a:28:bb:2e:c3:69:0c:c4:92:ae:bb:2d:
a3:e1:a2:17:49:03:48:d4:81:24:38:bc:a7:1b:17:79:ad:d6:
01:8d:c0:77:d5:e7:c1:ae:6f:0b:da:79:7c:0f:2f:66:4f:c7:
24:c4:5b:a7:90:b8:14:eb:ea:39:8c:68:fc:fa:07:9a:6d:db:
14:ad:95:dc:29:71:6f:65:df:44:d4:70:1a:ed:e6:70:c1:41:
86:5c:f3:5f:d6:b0:e2:15:ae:9b:6b:86:56:e2:52:a7:7a:df:
a9:2e:ec:85:62:1b:4f:cf:e1:9b:bd:c1:63:62:fe:5e:0d:2a:
a1:84:56:c3:3e:0c:1e:6e:72:a0:37:8b:51:1d:57:ad:09:9b:
9a:a7:18:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQwMEUxMTAvBgNVBAUTKEMxOUQ2QjZERUIzQTFGOUMzOTg0N0UxNENBQTU1OTk3
QkM5Q0YyNzYwHhcNMjYxMDA5MDQwMDUzWhcNMjYxMDE2MDQwMDUzWjAYMRYwFAYD
VQQDEw02YWM4NjZmNS03ZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1+rmKYOq0aMRP56dCrdI8vPo9eiKglC0BhXV1Bqwce8XmOv6GfEGxjLog6Qw
RpMHUJ2I0yIO4h+NGtt5/bzeo/pGBogv9taGFIgzy/4gPjYcxgiQA76BtPoAiL3h
iHvOsYv2HFMQ4g1Eh8Ig5gsPjCGT3v6lglmVlx7VI5fpsXM7Zk3E0GGkxqwJj8Hl
x2HDSWEC2eJILo1Q2JwAfLExl8jI1haz6vKKdoPsHj9RCSBjrhpKRnPr5bqCtn0X
2CpFBDXkblNxfwI9wLKo/NxW7Ja/IgmIGg9WRshfMUWpfpitAHZHPVyL4WtL42z8
rpFEREP6ROpdF78Oyb3RTMrOQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhIGoBh
rKp35v+m7iwBmfW8GhzyMB8GA1UdIwQYMBaAFMGda23rOh+cOYR+FMqlWZe8nPJ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DRURBNTJDNEQ5
NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1dzVoSDRVeXFWWmw3eWM4
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3daMXJiZXM2SDV3NWhINFV5cVZabDd5YzhuWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDAwRS9DRURBNTJDNEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1
dzVoSDRVeXFWWmw3eWM4blkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMCTy4xPpjTH8PHs8yQ+bgXRuKa5VTrUbgxqZyZd4b6OoEbCYVyaRf5zRB8+O
VnszSifuWKh5JfB2Cpya6V5zBIHGwzMqihv0jIJZ24m3QWFKmUqVj26EP/eSL4yn
t0AlGpifWqkxHPkkDPJaKWA8QawLGii7LsNpDMSSrrsto+GiF0kDSNSBJDi8pxsX
ea3WAY3Ad9Xnwa5vC9p5fA8vZk/HJMRbp5C4FOvqOYxo/PoHmm3bFK2V3Clxb2Xf
RNRwGu3mcMFBhlzzX9aw4hWum2uGVuJSp3rfqS7shWIbT8/hm73BY2L+Xg0qoYRW
wz4MHm5yoDeLUR1XrQmbmqcYCw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 23:34:35 2026 by rpki-client