
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
File: WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft (raw, json)
Hash identifier: nmgt5znPCvbeNp91i0GUgKINfpOAomfb4rCLmzG9MII=
Subject key identifier: 67:55:D5:7A:95:BB:6F:0C:1F:5D:D5:AA:7B:D5:BE:15:F1:8C:5A:6F
Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
Certificate issuer: /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
Manifest number: D0
Signing time: Sun 05 Apr 2026 06:08:13 +0000
Manifest this update: Sun 05 Apr 2026 06:08:13 +0000
Manifest next update: Sun 12 Apr 2026 06:08:13 +0000
Files and hashes: 1: WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl (hash: U+rfMI2gCm6AowcSr4rvAuivB/ucEYSqspgOcBT8pHU=)
2: D56D67B0F48711EFBB2D9D73C4F9AE02.roa (hash: csaBSpZzq59GMLhCxwkq41kKwaXSwMxp+Vf9tiYrdrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A75A, serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Validity
Not Before: Apr 5 06:08:13 2026 GMT
Not After : Apr 12 06:08:13 2026 GMT
Subject: CN=69d1fc4d-1a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:f8:c9:05:78:25:7f:21:0f:dc:23:c9:7a:
d9:b2:d8:b3:20:8d:82:e5:d5:4e:ec:19:fd:26:33:
e2:f9:5c:8d:14:ef:62:cb:67:d9:a5:67:26:be:5c:
1e:58:af:2d:8d:4c:28:a6:d0:d2:f5:8f:81:b9:09:
40:e1:52:b0:d3:0d:74:e7:fe:94:c1:a4:42:e1:09:
bb:91:4c:49:5b:12:4e:ec:db:2c:08:cd:f9:66:32:
f0:3b:a9:e8:dc:33:ba:d6:7c:e6:4b:e2:b2:1c:6e:
f0:c7:f1:ad:b8:9e:fd:d6:48:04:4d:ef:35:95:67:
3a:39:21:03:48:38:08:f9:0c:81:83:38:19:0c:a3:
0e:b6:a3:42:a4:2e:95:8e:88:90:fe:31:2d:b3:c2:
72:84:e6:01:28:2f:8e:a5:55:ce:33:0b:d1:18:fb:
a7:04:16:ea:6b:ef:49:e7:a7:66:e0:21:ee:d4:2e:
24:d2:f9:4f:0d:c9:0a:ae:f5:79:b0:07:9e:ec:7a:
78:c2:bc:e6:2a:57:8f:09:a8:b9:a1:63:5b:75:ee:
c8:d4:3c:cb:8d:70:2f:ad:94:b1:be:39:37:5d:0a:
8b:f7:e8:fd:13:51:af:5f:d2:26:43:c1:6c:8d:34:
d9:c7:4c:8d:4e:11:6b:56:d5:11:be:b9:45:73:09:
a5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:55:D5:7A:95:BB:6F:0C:1F:5D:D5:AA:7B:D5:BE:15:F1:8C:5A:6F
X509v3 Authority Key Identifier:
keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:1c:63:8e:fe:23:b1:93:65:19:b8:ec:a0:ad:56:55:eb:13:
7c:17:db:60:a5:bc:b8:4e:46:d3:19:d4:17:e3:ea:85:d2:b7:
4b:79:09:f4:f7:05:6a:75:fe:30:19:5e:9f:89:7c:df:b7:63:
dd:2c:64:c6:99:67:e8:d7:b4:b4:8e:8b:ad:10:ab:0f:bc:09:
33:3c:d9:ca:30:27:b5:cc:b8:5f:1e:83:64:fd:3e:ea:eb:d5:
27:dc:8b:e3:dc:96:67:74:84:3a:4f:91:d1:7e:ce:f5:33:8b:
9d:d5:14:13:a1:c7:0f:ad:c6:1a:88:ee:0f:45:c2:98:ca:09:
67:a4:bf:98:aa:d3:23:a5:4e:16:a8:50:0b:c9:12:97:da:76:
83:87:79:65:be:64:dd:67:6a:36:71:6e:86:89:0a:1a:fe:1f:
ae:7e:96:de:86:a9:e6:39:4b:d3:cb:c6:07:64:94:da:73:8e:
94:9a:55:4e:ac:c8:98:23:97:36:38:61:18:d7:4f:d0:f7:31:
0e:f3:03:cb:76:a0:26:20:a1:c4:86:b7:ad:6a:6f:0b:32:c7:
0d:20:e5:8f:69:c8:e7:b6:90:2b:41:38:82:c5:84:a2:f2:b6:
2d:f4:80:09:b9:00:c6:dc:c8:bf:1a:76:67:25:34:b1:84:fc:
54:72:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:17 2026 by rpki-client