
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft
File: wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft (raw, json)
Hash identifier: BpMtAbH2HRW/LZjbdeAsX94eUCerGMbxxXGmcVlrj6k=
Subject key identifier: 66:48:14:50:78:8E:33:F6:0D:0F:A7:98:F8:BB:E4:9C:E7:97:3E:08
Authority key identifier: C0:BA:1D:FB:35:99:6F:CE:9A:7E:48:59:E8:AF:87:91:FA:F0:EC:94
Certificate issuer: /CN=A914CC0F/serialNumber=C0BA1DFB35996FCE9A7E4859E8AF8791FAF0EC94
Certificate serial: 0A27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft
Manifest number: 0A13
Signing time: Wed 20 May 2026 19:49:02 +0000
Manifest this update: Wed 20 May 2026 19:49:01 +0000
Manifest next update: Wed 27 May 2026 19:49:01 +0000
Files and hashes: 1: wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl (hash: 6F8JxUCb0amgtDHW//oOVPqIxDINzVl57bXewezxoGc=)
2: 170BFAA6995211EA9CF98C52C4F9AE02.roa (hash: 9kDNO20pMwvi0wmR9ppcvvNeZGhsPUJjQbaSpRjX3BE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl
rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2599 (0xa27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CC0F, serialNumber=C0BA1DFB35996FCE9A7E4859E8AF8791FAF0EC94
Validity
Not Before: May 20 19:49:01 2026 GMT
Not After : May 27 19:49:01 2026 GMT
Subject: CN=6a0e102d-966f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:0d:ef:27:e0:36:bf:60:d2:cb:52:6b:99:
48:9c:b0:e6:60:a8:26:36:a2:6f:5a:fa:0a:6e:e0:
24:7b:c6:84:70:12:a3:3c:2c:05:0b:89:d3:7d:7c:
cf:d6:0a:34:72:df:88:15:1b:fc:7f:6c:d2:33:de:
98:a9:f9:ea:0c:00:7a:26:08:f2:4d:4a:85:5f:22:
46:2c:e6:56:fe:9b:af:98:84:61:9d:04:17:dd:9e:
08:b0:42:4f:10:d5:f7:7c:4c:03:e6:d9:92:12:e3:
39:61:e3:2b:b3:c8:98:86:c3:4a:81:9e:12:f2:1c:
00:0d:dc:26:0a:90:97:1d:40:9c:f4:f6:3a:3c:15:
1c:49:46:6f:6d:fe:8d:7b:49:dd:72:e9:bf:ce:a2:
70:b5:60:6b:25:1a:d9:02:2a:cf:db:cc:31:09:60:
be:b2:88:2a:a9:69:73:6f:64:1c:ed:25:38:57:1d:
63:a4:d2:39:98:ce:93:74:15:7e:9b:26:b3:74:3b:
20:66:f6:82:7b:d5:b6:54:89:d9:bd:8a:57:21:e5:
ff:66:a8:18:0b:51:e4:34:93:c8:83:ba:d1:31:af:
1b:a9:5b:7c:10:de:03:c4:de:e8:9a:69:14:98:2e:
08:f6:1b:33:81:8e:d1:dd:7a:3a:4f:19:ad:6d:d3:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:48:14:50:78:8E:33:F6:0D:0F:A7:98:F8:BB:E4:9C:E7:97:3E:08
X509v3 Authority Key Identifier:
keyid:C0:BA:1D:FB:35:99:6F:CE:9A:7E:48:59:E8:AF:87:91:FA:F0:EC:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:62:0c:86:3b:23:15:c2:9d:ab:eb:e0:fa:99:a9:10:35:28:
da:0b:13:c8:fd:5d:01:b6:4b:6d:12:2f:30:eb:9c:84:d2:fa:
44:f7:07:b7:b3:16:5e:57:88:b3:80:43:a2:cb:1f:a9:4c:ee:
6c:6c:ac:84:8e:93:7f:69:b6:5b:44:e4:ae:59:7b:54:5f:9c:
21:37:ec:53:5a:e6:07:c0:24:a1:67:e2:68:2e:e1:36:14:e0:
56:d1:5d:b6:ec:74:0a:59:bd:49:e1:52:32:ce:56:6a:c7:65:
a1:80:47:89:91:8a:07:6a:08:d1:8e:dd:5a:f7:91:63:e4:ab:
78:ce:60:2b:e6:1c:0d:5e:0f:64:e9:cd:7e:41:f6:32:0b:4a:
5a:60:43:db:57:a3:4e:8c:ac:05:d4:60:27:cc:1d:30:fd:32:
aa:c0:79:90:71:0d:86:e8:2a:84:47:9b:d5:ef:77:6b:86:ac:
4d:28:db:0e:8a:1b:75:14:fe:16:3b:ca:49:6d:b6:9a:d5:a7:
1a:91:33:fd:60:a3:7d:01:63:ac:b7:d4:03:83:32:bf:ef:5a:
41:3b:07:e3:59:30:0a:70:7d:e1:d4:08:89:9f:d7:c3:17:63:
e2:4f:f1:3d:06:b0:02:54:e7:db:0d:6a:f3:9a:27:1c:e9:db:
4a:04:6f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:26 2026 by rpki-client