
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
File: WKqOb2Cb9VgUA20moSpeKyUViTo.mft (raw, json)
Hash identifier: /HIYW+TqIM5dKbqJTa4qa8Jmolipuno8d033a+5Wpg4=
Subject key identifier: 3B:FD:2A:BC:65:F5:A2:75:49:E3:57:F9:26:97:C3:DE:AE:BE:7D:DC
Authority key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
Certificate issuer: /CN=A914EBB2/serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
Manifest number: 23
Signing time: Tue 03 Mar 2026 04:54:11 +0000
Manifest this update: Tue 03 Mar 2026 04:54:10 +0000
Manifest next update: Tue 10 Mar 2026 04:54:10 +0000
Files and hashes: 1: WKqOb2Cb9VgUA20moSpeKyUViTo.crl (hash: FsOoU6Cg51iLDKuD+P1lIGrv2Gb9VOI3VCD33D/UNXU=)
2: D23FC546011111F1B3598E67446F56BC.roa (hash: DBJqsyZNFzi5BS6eS1AkXchHuBzM7iwXaGnFUNFTZZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Validity
Not Before: Mar 3 04:54:10 2026 GMT
Not After : Mar 10 04:54:10 2026 GMT
Subject: CN=69a66973-d9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:79:13:d2:b7:e2:55:40:1c:15:61:8d:a4:
d5:0e:f0:c7:10:a9:05:f2:8e:38:eb:73:ac:9e:0e:
b4:93:50:b8:93:4a:d5:af:87:80:80:19:d6:d9:ed:
45:59:c6:d4:eb:c3:db:9b:3c:b5:df:65:9d:1c:b6:
eb:97:97:de:75:85:6b:42:61:ec:f3:c2:67:67:2f:
c6:dc:05:7b:6e:3f:73:89:05:30:5a:55:57:34:50:
20:13:b9:2a:76:74:18:ca:77:b1:13:07:2d:2b:9d:
0c:10:48:e5:0b:df:4e:b6:c6:f5:e1:af:2d:04:51:
03:d4:f1:5d:59:91:07:13:09:a1:d5:07:49:5b:81:
28:61:c0:43:8e:53:26:f4:a4:16:25:69:5c:c8:d4:
2e:19:bd:98:14:3c:9a:23:31:10:9b:d4:34:c3:b2:
02:76:a9:a2:75:7d:51:90:e8:4c:98:fa:ac:65:51:
ea:6a:48:b2:35:42:62:d7:11:87:72:bd:ea:21:7d:
24:f1:11:2d:2a:1a:49:35:02:79:90:11:ff:fe:ca:
e2:28:c0:ab:2b:95:5f:ff:43:95:26:08:9d:44:28:
08:8f:18:4f:78:3c:03:11:ac:55:a2:02:91:84:4d:
c6:f8:c8:f9:53:e8:e3:d1:ff:68:d0:43:c3:33:ef:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FD:2A:BC:65:F5:A2:75:49:E3:57:F9:26:97:C3:DE:AE:BE:7D:DC
X509v3 Authority Key Identifier:
keyid:58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:48:6b:50:67:df:3d:8b:76:c8:56:4f:6f:cc:07:31:f0:af:
08:95:a6:bd:69:9e:b8:02:a7:a5:30:0b:7a:be:78:4d:30:e0:
5f:ba:03:5e:ca:4f:65:b3:88:3a:1b:f0:91:5b:ab:e4:02:c3:
13:25:81:0b:cc:e9:98:57:d0:4f:f5:86:94:c6:01:40:d8:20:
62:4f:28:c2:57:04:95:b4:f4:84:bf:07:91:75:d2:38:61:b4:
ec:1f:19:61:56:23:6c:d7:a4:b0:7e:15:ba:59:fb:01:74:ef:
9b:49:94:ca:39:30:21:a7:1c:7a:3b:8f:be:7b:ff:ec:c7:a6:
cf:0c:ac:d8:6f:be:e7:d3:a4:88:31:7b:5b:1f:a4:2e:79:86:
18:4d:e7:b6:c0:65:30:48:e0:2b:7c:00:65:dd:10:47:87:26:
62:20:20:56:0a:5e:58:5b:d4:d2:7e:88:2b:db:1f:57:9e:e2:
4b:d7:e1:48:92:98:c6:58:6d:ff:a7:86:80:51:82:08:00:31:
70:50:07:1c:aa:d6:44:ed:9d:36:df:72:c2:dd:aa:15:3f:10:
60:61:15:f7:8b:87:e5:79:70:d8:dd:38:ca:7c:0a:38:89:5c:
93:a5:d7:6a:54:17:5d:b3:18:e0:36:6e:5f:78:a5:85:e0:b2:
b2:f8:f5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:51 2026 by rpki-client