
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
File: wfLqVt--Dy-St0HdaM9WcRWzspI.mft (raw, json)
Hash identifier: o9bKGGGc3Aufe1D7rrD3ACrtwlBWJk8h6uogj4Ki/T0=
Subject key identifier: 2D:D9:2B:8A:5E:F5:FF:57:5C:DF:19:E8:17:41:AA:28:C4:2A:16:C2
Authority key identifier: C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
Certificate issuer: /CN=A9147150/serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
Manifest number: A2
Signing time: Mon 01 Jun 2026 08:05:44 +0000
Manifest this update: Mon 01 Jun 2026 08:05:43 +0000
Manifest next update: Mon 08 Jun 2026 08:05:43 +0000
Files and hashes: 1: wfLqVt--Dy-St0HdaM9WcRWzspI.crl (hash: Xzk95rl/ZZ6BONeTBrbitmjcBh+nIh1nJqLUUl4IJOQ=)
2: EB6E0EE8677811F08B1EA154C4F9AE02.roa (hash: MMOwPnwsVwQiBGtfRhC6fRE74wLsOmC1//fo0Gh9Pfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147150, serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Validity
Not Before: Jun 1 08:05:43 2026 GMT
Not After : Jun 8 08:05:43 2026 GMT
Subject: CN=6a1d3d58-d0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:b9:fa:2e:df:55:4b:74:2f:3c:65:f7:d8:
65:ca:44:62:66:02:e8:ab:85:12:7e:2c:62:20:28:
90:b8:1b:ed:9a:06:ba:ef:93:13:03:f8:8f:c7:e8:
02:a5:51:8c:f3:18:2b:94:50:95:2e:19:a4:84:75:
db:a7:04:ba:15:e2:4f:a9:62:2a:c7:42:34:a7:21:
a6:53:72:d5:be:73:31:5a:f1:03:8b:da:71:0e:17:
74:29:3b:30:81:6a:b1:90:4e:90:7c:ea:56:1f:d7:
2c:bd:a2:1a:9e:92:94:ba:50:15:1e:c3:78:e7:19:
82:b3:72:4b:21:93:12:23:be:38:89:e4:43:db:20:
f5:80:6c:81:a3:0c:91:fa:5a:d3:c7:f2:7e:4e:ef:
4f:5e:0e:d8:c7:4c:80:3a:71:bb:41:4a:3d:0a:73:
40:49:f1:a8:a8:6c:c7:e5:44:1d:30:21:20:9c:c5:
a0:b6:8d:df:af:9f:6d:81:b3:db:b1:e0:dd:72:7f:
1a:da:09:39:b2:92:ad:2f:c5:16:45:7f:dd:06:0d:
05:da:3b:b9:a8:1c:e1:62:8c:13:64:6f:3f:fb:6f:
e9:8f:55:90:cd:2d:b6:c8:b1:57:76:28:54:d9:fc:
a6:b1:8f:ca:03:57:ed:0c:8c:33:bf:99:5e:78:4f:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D9:2B:8A:5E:F5:FF:57:5C:DF:19:E8:17:41:AA:28:C4:2A:16:C2
X509v3 Authority Key Identifier:
keyid:C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:66:b1:ec:fa:fa:a4:d2:02:50:a5:64:17:25:47:d2:f9:6c:
1c:66:66:83:21:a2:36:4f:a8:e1:d9:39:e1:63:03:cb:7a:c6:
22:cb:77:fc:24:86:45:09:55:4f:13:da:23:0a:df:71:e2:d2:
43:83:7c:02:35:35:d6:4e:df:64:4a:18:cb:74:9f:bf:73:b8:
ba:28:cb:be:d0:e7:1d:34:41:dc:70:7f:e7:9c:a6:09:a9:92:
ec:c1:25:35:12:f8:1d:cf:3d:37:63:85:6c:3a:08:34:be:92:
2c:16:be:0c:c0:e9:ad:30:cb:25:4a:94:dd:6d:06:44:a8:51:
41:4a:1e:83:f0:9f:8c:da:9a:52:bc:e2:92:87:fa:57:0a:25:
19:9a:e5:41:59:95:c7:96:6d:0c:ac:54:69:0a:fb:44:5f:fa:
7b:62:5f:b4:9d:38:41:e8:80:30:b3:89:15:e4:70:fd:51:b6:
29:e3:9f:91:04:6f:04:83:21:b7:72:01:ba:b3:24:35:ad:32:
18:56:c1:20:6f:69:5a:10:f7:0a:2b:c8:77:bd:7f:2d:10:40:
3e:e0:05:4d:79:ed:cc:5e:32:63:60:0d:e0:d7:84:c2:2b:3b:
1d:73:15:9c:af:a6:1e:ee:e0:be:25:18:c8:fc:ac:44:43:47:
fa:e5:6b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:27 2026 by rpki-client