
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
File: wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json)
Hash identifier: 12R22s0txi8TA1c0aDnoXdy+nnqYI78a1w7VDPx6PC4=
Subject key identifier: A4:D7:1C:DA:0B:44:25:D4:51:1F:5D:93:E2:13:0F:96:9A:84:69:6F
Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A
Certificate issuer: /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
Manifest number: 0147
Signing time: Tue 03 Mar 2026 04:48:37 +0000
Manifest this update: Tue 03 Mar 2026 04:48:36 +0000
Manifest next update: Tue 10 Mar 2026 04:48:36 +0000
Files and hashes: 1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: c+faSLaqs8soZfBY/sZDYV2Ru/2EeU2USxOz1aoUd8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl
rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EB9A, serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A
Validity
Not Before: Mar 3 04:48:36 2026 GMT
Not After : Mar 10 04:48:36 2026 GMT
Subject: CN=69a66824-f095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:47:29:bd:35:5c:27:0c:3d:3c:54:27:dc:
1e:9d:06:57:c0:fa:63:9e:0d:81:e0:da:ce:1e:a5:
49:e8:3b:ab:37:55:41:3d:39:8a:9e:17:fc:9c:1d:
45:70:45:92:2e:00:3a:1e:a1:0b:0f:6b:4a:7c:94:
4e:f4:37:d9:79:02:06:fd:da:35:d3:88:fd:87:ff:
61:d5:67:f5:2a:9a:9c:65:23:66:f8:d7:e0:ec:c4:
5b:07:fa:c4:6a:c2:74:c8:5e:e4:96:03:9e:e3:f1:
9e:d0:55:eb:be:0a:09:85:26:48:40:2e:c5:9f:cb:
bb:0b:cf:f1:0f:1f:9b:7b:65:ce:62:82:1f:91:4d:
fe:8c:2c:6d:2f:cf:7f:d1:f7:b0:6e:29:db:7a:b5:
c3:4d:60:9a:83:de:cb:3f:9b:29:84:fb:0f:06:ff:
d9:b1:32:10:af:18:d6:82:e1:08:7a:76:91:f7:cd:
40:9e:08:9e:06:cc:4f:bf:a8:65:74:3c:45:63:1e:
6a:4f:97:14:19:ae:6d:ad:3f:30:cc:45:be:29:b0:
3a:e5:1a:ac:7a:3b:78:e9:a2:6e:34:9e:de:e6:b7:
7c:f9:95:bf:01:99:8e:68:3d:6a:fd:69:1c:ac:e8:
d5:bd:ac:29:35:86:84:49:8f:0b:61:bb:fd:89:c9:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D7:1C:DA:0B:44:25:D4:51:1F:5D:93:E2:13:0F:96:9A:84:69:6F
X509v3 Authority Key Identifier:
keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:44:2a:66:7b:b4:5a:4a:fc:8d:fe:17:57:26:5f:0d:c9:c4:
b6:99:9d:68:8b:76:dc:a1:82:06:47:8c:ff:0a:0c:22:34:28:
1e:0a:7e:e9:0e:67:0c:ff:7f:0c:69:83:fa:62:50:da:97:46:
eb:06:c9:f0:0d:2c:aa:67:8b:1e:44:7b:d6:e6:a7:c6:09:06:
12:80:65:3d:c1:d7:78:63:06:3f:20:8d:53:83:1e:4f:0a:34:
ce:a6:8d:6f:1e:e8:f3:97:1e:8b:e5:86:b0:12:96:8e:f9:a1:
c2:8d:67:20:42:e8:b7:d9:24:b2:ff:62:74:6f:23:0f:3c:a4:
3a:7a:f6:a6:82:24:c6:1c:bf:fe:41:a4:ea:5a:a7:17:5b:77:
18:8f:a3:4a:a5:e5:f0:04:83:36:ac:62:ae:4c:11:58:7e:d4:
1d:67:7b:76:7b:b5:dd:b0:b1:29:3e:b0:93:2f:33:cb:c5:4e:
cb:24:b5:73:5b:de:cc:28:23:a1:60:75:1a:1c:98:09:0b:1c:
b5:03:2c:64:98:a0:ee:80:f7:b1:f2:01:17:f1:f6:f2:43:f1:
98:1a:a1:f3:f9:6a:03:78:d4:9f:06:ca:f3:3b:42:43:0c:b6:
27:be:34:a7:3d:68:46:cc:28:10:49:47:2b:29:16:f0:fc:58:
6f:7a:07:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:42:12 2026 by rpki-client