
$ rpki-client -vvf rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
File: W7mo4aQGCswvO_oh78rSwwZujok.mft (raw, json)
Hash identifier: APm6vi8gg5BKbVGeKqqZXsSy56pWZnxO8RnztluK56g=
Subject key identifier: 58:46:36:7B:01:A2:7B:38:9E:11:E3:97:0F:FB:04:A0:4F:5D:5E:48
Authority key identifier: 5B:B9:A8:E1:A4:06:0A:CC:2F:3B:FA:21:EF:CA:D2:C3:06:6E:8E:89
Certificate issuer: /CN=A914699C/serialNumber=5BB9A8E1A4060ACC2F3BFA21EFCAD2C3066E8E89
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
Manifest number: 21
Signing time: Mon 01 Jun 2026 09:49:09 +0000
Manifest this update: Mon 01 Jun 2026 09:49:08 +0000
Manifest next update: Mon 08 Jun 2026 09:49:08 +0000
Files and hashes: 1: W7mo4aQGCswvO_oh78rSwwZujok.crl (hash: mun+Utdtx1CldoNdcuo/LB5L7C/N0dn03GZ4XSfghYs=)
2: 787214AE502D11F1B0D3D52AC9833773.roa (hash: wrle5esD5kunfyi/rtL/mG9W39WCBeUw3VOv/boPy9I=)
3: B241C102502D11F1A5FC1C3EC9833773.roa (hash: pXNb9fqL8rNJsyMIH/TKizTjSzJWlaSb0X5J6/gFCyQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.crl
rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914699C, serialNumber=5BB9A8E1A4060ACC2F3BFA21EFCAD2C3066E8E89
Validity
Not Before: Jun 1 09:49:08 2026 GMT
Not After : Jun 8 09:49:08 2026 GMT
Subject: CN=6a1d5594-5b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:aa:43:db:56:33:d7:8d:7c:a5:27:0d:e9:94:
a3:ca:a4:01:17:45:ee:3a:45:69:93:e8:32:57:3a:
44:57:e9:96:0d:83:dd:57:2d:05:bc:f6:98:70:ea:
60:4b:b0:0d:53:f5:1c:d3:d9:bc:72:33:44:70:ad:
99:40:25:17:0d:7a:a1:77:1c:43:6d:16:ac:2c:69:
4b:07:e0:1b:e7:2c:4e:d9:ac:d1:7b:7e:e0:14:91:
f0:fe:d4:37:e7:4b:53:3c:90:7e:9c:57:41:ff:37:
b8:fd:ae:13:4f:65:63:f5:ce:a0:15:01:13:34:27:
79:95:58:dc:fc:82:fb:bf:f3:de:53:d5:a1:d2:0a:
32:a5:60:21:70:33:bf:54:eb:8d:71:30:ca:95:00:
73:ea:b2:31:d3:66:34:9a:1f:e1:25:cb:4d:1c:78:
a9:f1:64:4a:3d:52:24:69:7d:89:7b:f0:47:a8:71:
4f:0f:ef:36:a7:53:7e:0e:21:41:99:f0:27:73:af:
73:56:5e:03:5a:2f:d0:e6:fc:8d:28:a0:4c:dd:6c:
9f:9f:90:ac:2e:4f:57:95:21:ae:e7:25:63:2f:2b:
30:f0:8d:b4:16:e8:e0:53:2f:4a:79:f4:a5:9a:04:
e8:3b:ac:c8:31:20:c3:b0:8f:dc:fa:82:c9:e5:25:
53:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:46:36:7B:01:A2:7B:38:9E:11:E3:97:0F:FB:04:A0:4F:5D:5E:48
X509v3 Authority Key Identifier:
keyid:5B:B9:A8:E1:A4:06:0A:CC:2F:3B:FA:21:EF:CA:D2:C3:06:6E:8E:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:3d:1e:10:52:79:e1:43:57:1d:89:02:b8:e0:aa:42:e1:b9:
55:14:97:ae:db:99:ec:29:9b:91:e8:dc:c7:07:96:a3:69:d6:
7c:65:c6:04:98:c6:da:e5:30:c4:ea:7f:24:5c:17:66:42:c8:
b3:26:41:6d:31:26:43:fd:e5:05:3a:cd:44:48:49:6c:ad:b6:
e7:a8:b7:25:3c:f9:17:38:a2:66:e3:a1:93:f0:55:f0:31:e1:
8d:e7:60:e7:b6:16:17:64:0d:5c:16:12:93:9d:7b:a2:14:da:
11:7f:76:ce:bc:4c:03:44:30:e9:3b:45:33:0f:39:67:a2:78:
c3:cb:b8:88:7c:bd:e0:46:a1:35:ff:83:73:fd:70:8a:ee:bd:
d5:e8:d2:b5:85:18:3b:31:33:31:44:30:53:91:f7:ce:c3:98:
86:7d:77:8d:36:88:ee:4e:ab:06:c9:a7:25:31:cf:7b:fc:31:
46:4b:d4:a1:79:a7:ae:b9:8c:32:f1:7d:eb:71:89:83:10:d8:
82:18:89:4b:d0:a1:43:2c:b5:19:a8:85:8c:9b:c9:21:f1:36:
5d:cb:de:b6:95:80:7f:0e:5b:66:d7:59:bc:79:ef:8f:7b:84:
a2:1b:4a:a6:7a:5d:0a:f7:fe:ae:7c:9f:b5:11:71:5c:96:ff:
c1:15:f1:c9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
Njk5QzExMC8GA1UEBRMoNUJCOUE4RTFBNDA2MEFDQzJGM0JGQTIxRUZDQUQyQzMw
NjZFOEU4OTAeFw0yNjA2MDEwOTQ5MDhaFw0yNjA2MDgwOTQ5MDhaMBgxFjAUBgNV
BAMTDTZhMWQ1NTk0LTViN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfqkPbVjPXjXylJw3plKPKpAEXRe46RWmT6DJXOkRX6ZYNg91XLQW89phw6mBL
sA1T9RzT2bxyM0RwrZlAJRcNeqF3HENtFqwsaUsH4BvnLE7ZrNF7fuAUkfD+1Dfn
S1M8kH6cV0H/N7j9rhNPZWP1zqAVARM0J3mVWNz8gvu/895T1aHSCjKlYCFwM79U
641xMMqVAHPqsjHTZjSaH+Ely00ceKnxZEo9UiRpfYl78EeocU8P7zanU34OIUGZ
8Cdzr3NWXgNaL9Dm/I0ooEzdbJ+fkKwuT1eVIa7nJWMvKzDwjbQW6OBTL0p59KWa
BOg7rMgxIMOwj9z6gsnlJVPtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWEY2ewGi
ezieEeOXD/sEoE9dXkgwHwYDVR0jBBgwFoAUW7mo4aQGCswvO/oh78rSwwZujokw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2OTlDLzlCOURDQTMyNDFG
OTExRjFBN0FBQTAzM0JGODMzNzczL1c3bW80YVFHQ3N3dk9fb2g3OHJTd3dadWpv
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVzdtbzRhUUdDc3d2T19vaDc4clN3d1p1am9rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2
OTlDLzlCOURDQTMyNDFGOTExRjFBN0FBQTAzM0JGODMzNzczL1c3bW80YVFHQ3N3
dk9fb2g3OHJTd3dadWpvay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBgPR4QUnnhQ1cdiQK44KpC4blVFJeu25nsKZuR6NzHB5ajadZ8ZcYEmMba5TDE
6n8kXBdmQsizJkFtMSZD/eUFOs1ESElsrbbnqLclPPkXOKJm46GT8FXwMeGN52Dn
thYXZA1cFhKTnXuiFNoRf3bOvEwDRDDpO0UzDzlnonjDy7iIfL3gRqE1/4Nz/XCK
7r3V6NK1hRg7MTMxRDBTkffOw5iGfXeNNojuTqsGyaclMc97/DFGS9SheaeuuYwy
8X3rcYmDENiCGIlL0KFDLLUZqIWMm8kh8TZdy962lYB/Dltm11m8ee+Pe4SiG0qm
el0K9/6ufJ+1EXFclv/BFfHJ
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:17:43 2026 by rpki-client